{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:79453047-002f-5671-813b-8def662cb62c", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:npm/%40angular/service-worker@6.1.10-tuxcare.11", "type": "library", "name": "@angular/service-worker", "version": "6.1.10-tuxcare.11", "purl": "pkg:npm/%40angular/service-worker@6.1.10-tuxcare.11" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:62cc88ce-7b2f-544a-bda7-378413a5eef3", "id": "CVE-2021-4231", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-4231 is fixed in version 6.1.10-tuxcare.11 of @angular/service-worker." }, "affects": [ { "ref": "pkg:npm/%40angular/service-worker@6.1.10-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:51a52c85-da0d-5bcd-a689-1eecca170099", "id": "CVE-2025-66035", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 6.1.10-tuxcare.11 of @angular/service-worker." }, "affects": [ { "ref": "pkg:npm/%40angular/service-worker@6.1.10-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:143789b7-d225-5836-a8f3-3a197a7f08f6", "id": "CVE-2025-66412", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 6.1.10-tuxcare.11 of @angular/service-worker." }, "affects": [ { "ref": "pkg:npm/%40angular/service-worker@6.1.10-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:802189b0-904d-5646-a844-e03c72dccfbb", "id": "CVE-2026-22610", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22610 is fixed in version 6.1.10-tuxcare.11 of @angular/service-worker." }, "affects": [ { "ref": "pkg:npm/%40angular/service-worker@6.1.10-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:27d38216-8b0b-530d-bc48-f93453c3e4fa", "id": "CVE-2026-27970", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27970 is fixed in version 6.1.10-tuxcare.11 of @angular/service-worker." }, "affects": [ { "ref": "pkg:npm/%40angular/service-worker@6.1.10-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:2e06ab15-b993-51b9-8a05-843767561dc6", "id": "CVE-2026-41423", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41423 is fixed in version 6.1.10-tuxcare.11 of @angular/service-worker." }, "affects": [ { "ref": "pkg:npm/%40angular/service-worker@6.1.10-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:e727afe8-37c0-5f44-a894-7dab9ba0e020", "id": "CVE-2026-46417", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46417 is fixed in version 6.1.10-tuxcare.11 of @angular/service-worker." }, "affects": [ { "ref": "pkg:npm/%40angular/service-worker@6.1.10-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:7533ca46-7501-5e81-82e6-5808f11738b0", "id": "CVE-2026-50168", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50168 is fixed in version 6.1.10-tuxcare.11 of @angular/service-worker." }, "affects": [ { "ref": "pkg:npm/%40angular/service-worker@6.1.10-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:fb0c8cde-8bb1-5357-b4b7-793b72fea357", "id": "CVE-2026-50169", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50169 is fixed in version 6.1.10-tuxcare.11 of @angular/service-worker." }, "affects": [ { "ref": "pkg:npm/%40angular/service-worker@6.1.10-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:4bfd958f-30e9-534a-9052-e715c002fd72", "id": "CVE-2026-50170", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50170 is fixed in version 6.1.10-tuxcare.11 of @angular/service-worker." }, "affects": [ { "ref": "pkg:npm/%40angular/service-worker@6.1.10-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:b2f740ff-3e0b-5679-bf11-cb69c8d33768", "id": "CVE-2026-50171", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50171 is fixed in version 6.1.10-tuxcare.11 of @angular/service-worker." }, "affects": [ { "ref": "pkg:npm/%40angular/service-worker@6.1.10-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:46b139f4-646d-5765-b896-5f54eecb45ac", "id": "CVE-2026-50184", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50184 is fixed in version 6.1.10-tuxcare.11 of @angular/service-worker." }, "affects": [ { "ref": "pkg:npm/%40angular/service-worker@6.1.10-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:263785eb-5fe8-5e2e-bbef-e454b7dad491", "id": "CVE-2026-50555", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50555 is fixed in version 6.1.10-tuxcare.11 of @angular/service-worker." }, "affects": [ { "ref": "pkg:npm/%40angular/service-worker@6.1.10-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:146b1557-9d18-5f2a-b079-548cb4eeac9f", "id": "CVE-2026-50556", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50556 is fixed in version 6.1.10-tuxcare.11 of @angular/service-worker." }, "affects": [ { "ref": "pkg:npm/%40angular/service-worker@6.1.10-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:d023f215-29dc-5fea-b0df-7f7e0fb992ed", "id": "CVE-2026-50557", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50557 is fixed in version 6.1.10-tuxcare.11 of @angular/service-worker." }, "affects": [ { "ref": "pkg:npm/%40angular/service-worker@6.1.10-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:a2a96594-3bf7-5725-9656-ecaacce91c7c", "id": "CVE-2026-52725", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-52725 is fixed in version 6.1.10-tuxcare.11 of @angular/service-worker." }, "affects": [ { "ref": "pkg:npm/%40angular/service-worker@6.1.10-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:1d0641be-67e6-57f3-b0bc-ee3e33ad1204", "id": "CVE-2026-54264", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54264 is fixed in version 6.1.10-tuxcare.11 of @angular/service-worker." }, "affects": [ { "ref": "pkg:npm/%40angular/service-worker@6.1.10-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:8b6486e0-965d-5377-970a-3145ef397970", "id": "CVE-2026-54265", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54265 is fixed in version 6.1.10-tuxcare.11 of @angular/service-worker." }, "affects": [ { "ref": "pkg:npm/%40angular/service-worker@6.1.10-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:47ce0350-4bdd-569c-b72e-04aada57ab36", "id": "CVE-2026-54266", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54266 is fixed in version 6.1.10-tuxcare.11 of @angular/service-worker." }, "affects": [ { "ref": "pkg:npm/%40angular/service-worker@6.1.10-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:d724d8ba-e699-5993-9ae3-42c964c55a79", "id": "CVE-2026-54267", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54267 is fixed in version 6.1.10-tuxcare.11 of @angular/service-worker." }, "affects": [ { "ref": "pkg:npm/%40angular/service-worker@6.1.10-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:0bec72a9-d699-5af5-8f98-e3433399910a", "id": "CVE-2026-54268", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54268 is fixed in version 6.1.10-tuxcare.11 of @angular/service-worker." }, "affects": [ { "ref": "pkg:npm/%40angular/service-worker@6.1.10-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:b0f55ca3-ab60-5001-8b4a-98a78cb62fe2", "id": "CVE-2026-68945", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-68945 does not affect version 6.1.10-tuxcare.11 of @angular/service-worker. not_affected \u2014 Angular 6.1.10 is NOT AFFECTED by CVE-2026-68945. The vulnerable HttpTransferCache feature does not exist in this version \u2014 it was introduced in Angular 16.0.0 (April 2023), more than 5 years after Angular 6.1.10 (2018). The vulnerable file `packages/common/http/src/transfer_cache.ts` and all related APIs (`provideClientHydration`, `withNoHttpTransferCache`, `sortAndConcatParams`) are completel..." }, "affects": [ { "ref": "pkg:npm/%40angular/service-worker@6.1.10-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:82cf2602-cbd8-598c-87e3-1e0f77e868ac", "id": "CVE-2026-69149", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69149 is fixed in version 6.1.10-tuxcare.11 of @angular/service-worker." }, "affects": [ { "ref": "pkg:npm/%40angular/service-worker@6.1.10-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:b63dd421-bac2-56bc-9511-029c40bfaac0", "id": "CVE-2026-69151", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69151 is fixed in version 6.1.10-tuxcare.11 of @angular/service-worker." }, "affects": [ { "ref": "pkg:npm/%40angular/service-worker@6.1.10-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:29bc31f0-33ae-5166-9a88-d47ca9c036ca", "id": "CVE-2026-88056", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88056 does not affect version 6.1.10-tuxcare.11 of @angular/service-worker. not_affected \u2014 Angular version 6.1.10 is not affected by CVE-2026-88056. The vulnerable code pattern (url.ts with parseUrl using String.prototype.trim() and relativeUrlsTransformerInterceptorFn interceptor) does not exist in this version. These components were introduced in later Angular versions (post-6.1.10) and subsequently fixed in August 2026. Version 6.1.10 predates the vulnerable SSR URL resolution arc..." }, "affects": [ { "ref": "pkg:npm/%40angular/service-worker@6.1.10-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:76a71bfe-2ce8-5d99-9447-0e7cddb3b52e", "id": "CVE-2026-88057", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88057 affects version 6.1.10-tuxcare.11 of @angular/service-worker." }, "affects": [ { "ref": "pkg:npm/%40angular/service-worker@6.1.10-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:b71d994d-23f9-5eba-95de-6c34a7a9adf5", "id": "CVE-2026-88059", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88059 does not affect version 6.1.10-tuxcare.11 of @angular/service-worker. not_affected \u2014 Angular 6.1.10 is not affected by CVE-2026-88059. The vulnerable HttpTransferCache feature, withRequestsMadeViaParent() delegation API, and modern hydration system (provideClientHydration()) do not exist in this version. These components were introduced in Angular 16+ (circa 2023), while the target version is from Angular 6 (2018). The vulnerability requires automatic HTTP response caching duri..." }, "affects": [ { "ref": "pkg:npm/%40angular/service-worker@6.1.10-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:fa3bfd94-c1df-5a76-9048-c7744fa28062", "id": "CVE-2026-88060", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88060 affects version 6.1.10-tuxcare.11 of @angular/service-worker." }, "affects": [ { "ref": "pkg:npm/%40angular/service-worker@6.1.10-tuxcare.11" } ] } ], "dependencies": [ { "ref": "pkg:npm/%40angular/service-worker@6.1.10-tuxcare.11" } ] }