{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:bf03ce2f-8681-5217-b617-4804d29d2bcd", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:npm/%40angular/service-worker@5.2.11-tuxcare.17", "type": "library", "name": "@angular/service-worker", "version": "5.2.11-tuxcare.17", "purl": "pkg:npm/%40angular/service-worker@5.2.11-tuxcare.17" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:ad85d1a3-6582-557d-8ef8-e9ab5ca4cb31", "id": "CVE-2021-4231", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-4231 is fixed in version 5.2.11-tuxcare.17 of @angular/service-worker." }, "affects": [ { "ref": "pkg:npm/%40angular/service-worker@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:a680c7e4-af72-5bf3-84e4-4ffcac60b40d", "id": "CVE-2025-66035", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 5.2.11-tuxcare.17 of @angular/service-worker." }, "affects": [ { "ref": "pkg:npm/%40angular/service-worker@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:0b9aba07-7cc4-5973-8946-efae8bc8c993", "id": "CVE-2025-66412", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 5.2.11-tuxcare.17 of @angular/service-worker." }, "affects": [ { "ref": "pkg:npm/%40angular/service-worker@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:1411da80-ccb6-5b82-8760-aa2c2a60b2da", "id": "CVE-2026-22610", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22610 is fixed in version 5.2.11-tuxcare.17 of @angular/service-worker." }, "affects": [ { "ref": "pkg:npm/%40angular/service-worker@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:84eac469-2f6a-53dd-9477-d1f636b58a97", "id": "CVE-2026-27970", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27970 is fixed in version 5.2.11-tuxcare.17 of @angular/service-worker." }, "affects": [ { "ref": "pkg:npm/%40angular/service-worker@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:efca4642-81ee-546d-845d-614fb445b12c", "id": "CVE-2026-41423", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41423 is fixed in version 5.2.11-tuxcare.17 of @angular/service-worker." }, "affects": [ { "ref": "pkg:npm/%40angular/service-worker@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:88a5074d-e5ca-5d1c-b97b-86fba4e9cfcd", "id": "CVE-2026-46417", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46417 is fixed in version 5.2.11-tuxcare.17 of @angular/service-worker." }, "affects": [ { "ref": "pkg:npm/%40angular/service-worker@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:1b9774a4-92b3-595f-bf13-4e8535d5f69d", "id": "CVE-2026-50168", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50168 is fixed in version 5.2.11-tuxcare.17 of @angular/service-worker." }, "affects": [ { "ref": "pkg:npm/%40angular/service-worker@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:f7e23f9b-9df1-5e86-816c-67d177aa4876", "id": "CVE-2026-50169", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50169 is fixed in version 5.2.11-tuxcare.17 of @angular/service-worker." }, "affects": [ { "ref": "pkg:npm/%40angular/service-worker@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:f4200671-6ca3-5128-9045-3f534e50db42", "id": "CVE-2026-50170", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50170 is fixed in version 5.2.11-tuxcare.17 of @angular/service-worker." }, "affects": [ { "ref": "pkg:npm/%40angular/service-worker@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:ae666151-9435-5e43-bcb0-8edd33d59260", "id": "CVE-2026-50171", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50171 is fixed in version 5.2.11-tuxcare.17 of @angular/service-worker." }, "affects": [ { "ref": "pkg:npm/%40angular/service-worker@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:0a12aa5e-f5dc-5cbc-af22-8799747695ae", "id": "CVE-2026-50184", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50184 is fixed in version 5.2.11-tuxcare.17 of @angular/service-worker." }, "affects": [ { "ref": "pkg:npm/%40angular/service-worker@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:9a2b095a-dd85-54f2-8143-3538feae183a", "id": "CVE-2026-50555", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50555 is fixed in version 5.2.11-tuxcare.17 of @angular/service-worker." }, "affects": [ { "ref": "pkg:npm/%40angular/service-worker@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:7066cf05-4159-5321-8e84-b7ec22c33ce8", "id": "CVE-2026-50556", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50556 is fixed in version 5.2.11-tuxcare.17 of @angular/service-worker." }, "affects": [ { "ref": "pkg:npm/%40angular/service-worker@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:545fa43d-0996-5491-807c-02056157bedb", "id": "CVE-2026-50557", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50557 is fixed in version 5.2.11-tuxcare.17 of @angular/service-worker." }, "affects": [ { "ref": "pkg:npm/%40angular/service-worker@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:5a56769f-3310-584d-ac23-220f52c341d4", "id": "CVE-2026-52725", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-52725 is fixed in version 5.2.11-tuxcare.17 of @angular/service-worker." }, "affects": [ { "ref": "pkg:npm/%40angular/service-worker@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:0acfb0cd-9aac-54d4-a5bd-c770d2bf30c9", "id": "CVE-2026-54264", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54264 is fixed in version 5.2.11-tuxcare.17 of @angular/service-worker." }, "affects": [ { "ref": "pkg:npm/%40angular/service-worker@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:d7090fb3-8319-5854-b0e8-f749e8b7bfad", "id": "CVE-2026-54265", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54265 is fixed in version 5.2.11-tuxcare.17 of @angular/service-worker." }, "affects": [ { "ref": "pkg:npm/%40angular/service-worker@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:ecce2ae3-3517-5e74-afe8-7b037d8b9ac6", "id": "CVE-2026-54266", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54266 is fixed in version 5.2.11-tuxcare.17 of @angular/service-worker." }, "affects": [ { "ref": "pkg:npm/%40angular/service-worker@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:a0d562e2-f43e-5907-b455-d21c8d4e7c09", "id": "CVE-2026-54267", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54267 is fixed in version 5.2.11-tuxcare.17 of @angular/service-worker." }, "affects": [ { "ref": "pkg:npm/%40angular/service-worker@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:d496271f-a3e0-5db4-9bb7-da96df6ccacb", "id": "CVE-2026-54268", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54268 is fixed in version 5.2.11-tuxcare.17 of @angular/service-worker." }, "affects": [ { "ref": "pkg:npm/%40angular/service-worker@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:a4e9cbe3-8c5c-5bda-8cff-9f1e4dc2c92c", "id": "CVE-2026-68945", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-68945 does not affect version 5.2.11-tuxcare.17 of @angular/service-worker. not_affected \u2014 Angular 5.2.11 is NOT affected by CVE-2026-68945. The vulnerable component `HttpTransferCache` does not exist in this version. This feature was introduced in Angular v16 as part of the modern SSR hydration system. Angular 5.2.11 only has the basic `TransferState` API (a generic key-value store for manual state transfer), not the automatic HTTP request caching interceptor that contains the vulne..." }, "affects": [ { "ref": "pkg:npm/%40angular/service-worker@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:f355f982-b97c-501c-b058-827435ed2d0e", "id": "CVE-2026-69149", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69149 is fixed in version 5.2.11-tuxcare.17 of @angular/service-worker." }, "affects": [ { "ref": "pkg:npm/%40angular/service-worker@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:095774df-0414-5a38-b38f-b66afd18e2aa", "id": "CVE-2026-69151", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69151 is fixed in version 5.2.11-tuxcare.17 of @angular/service-worker." }, "affects": [ { "ref": "pkg:npm/%40angular/service-worker@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:9ff4063c-9d89-59b1-b40b-856dc11c6531", "id": "CVE-2026-88056", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88056 does not affect version 5.2.11-tuxcare.17 of @angular/service-worker. not_affected \u2014 Angular 5.2.11-tuxcare.19 does not contain the vulnerable URL resolution code pattern described in CVE-2026-88056. The vulnerability requires the url.ts file with parseUrl function calling String.prototype.trim() and the relativeUrlsTransformerInterceptorFn HTTP interceptor, both introduced in later Angular versions (post-June 2026). The target version uses a fundamentally different architectur..." }, "affects": [ { "ref": "pkg:npm/%40angular/service-worker@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:c9c52516-1994-5ea0-9785-ca98448d9005", "id": "CVE-2026-88057", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88057 affects version 5.2.11-tuxcare.17 of @angular/service-worker." }, "affects": [ { "ref": "pkg:npm/%40angular/service-worker@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:47464d91-3b39-5869-a80e-c4bc942b61bd", "id": "CVE-2026-88059", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88059 does not affect version 5.2.11-tuxcare.17 of @angular/service-worker. not_affected \u2014 Angular 5.2.11 is NOT AFFECTED by CVE-2026-88059. The vulnerability requires HttpTransferCache with hierarchical HttpClient delegation (withRequestsMadeViaParent()), features that were introduced in Angular v16. Angular 5.2.11 predates these features by approximately 6+ years and contains only a basic HTTP interceptor architecture with no automatic response caching mechanism. While TransferStat..." }, "affects": [ { "ref": "pkg:npm/%40angular/service-worker@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:da548dea-91c4-5c48-9dac-70ee2f5c8b56", "id": "CVE-2026-88060", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88060 affects version 5.2.11-tuxcare.17 of @angular/service-worker." }, "affects": [ { "ref": "pkg:npm/%40angular/service-worker@5.2.11-tuxcare.17" } ] } ], "dependencies": [ { "ref": "pkg:npm/%40angular/service-worker@5.2.11-tuxcare.17" } ] }