{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:bb58bd4c-b129-5d70-b418-e1b66ae60736", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:npm/%40angular/upgrade@5.2.11-tuxcare.15", "type": "library", "name": "@angular/upgrade", "version": "5.2.11-tuxcare.15", "purl": "pkg:npm/%40angular/upgrade@5.2.11-tuxcare.15" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:d5a4080e-90cf-51b3-985f-4a5532e8d3a6", "id": "CVE-2021-4231", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-4231 is fixed in version 5.2.11-tuxcare.15 of @angular/upgrade." }, "affects": [ { "ref": "pkg:npm/%40angular/upgrade@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:d676232c-24ba-5c75-ba22-28c93d535428", "id": "CVE-2025-66035", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 5.2.11-tuxcare.15 of @angular/upgrade." }, "affects": [ { "ref": "pkg:npm/%40angular/upgrade@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:2ea96cdb-478f-5fbf-b0b8-e3f6c84b9666", "id": "CVE-2025-66412", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 5.2.11-tuxcare.15 of @angular/upgrade." }, "affects": [ { "ref": "pkg:npm/%40angular/upgrade@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:cb54696b-ed7f-5eaf-9fbd-13fb4a6aab44", "id": "CVE-2026-22610", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22610 is fixed in version 5.2.11-tuxcare.15 of @angular/upgrade." }, "affects": [ { "ref": "pkg:npm/%40angular/upgrade@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:34bd7dda-c975-569b-83a8-f19395eebe6b", "id": "CVE-2026-27970", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27970 is fixed in version 5.2.11-tuxcare.15 of @angular/upgrade." }, "affects": [ { "ref": "pkg:npm/%40angular/upgrade@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:9f2f8760-cf17-5008-8d8c-7473d6ebc923", "id": "CVE-2026-41423", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41423 is fixed in version 5.2.11-tuxcare.15 of @angular/upgrade." }, "affects": [ { "ref": "pkg:npm/%40angular/upgrade@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:437cfe5f-2c1c-51d8-9f6d-114d72ab3b75", "id": "CVE-2026-46417", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46417 is fixed in version 5.2.11-tuxcare.15 of @angular/upgrade." }, "affects": [ { "ref": "pkg:npm/%40angular/upgrade@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:4f0ef057-dd35-5ce0-afe0-45da37bb536e", "id": "CVE-2026-50168", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50168 is fixed in version 5.2.11-tuxcare.15 of @angular/upgrade." }, "affects": [ { "ref": "pkg:npm/%40angular/upgrade@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:29180b15-450d-5cfc-b91c-37e26c5dcea2", "id": "CVE-2026-50169", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50169 is fixed in version 5.2.11-tuxcare.15 of @angular/upgrade." }, "affects": [ { "ref": "pkg:npm/%40angular/upgrade@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:9880146d-ed8f-5b77-bdd8-eaf0c6d5517b", "id": "CVE-2026-50170", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50170 is fixed in version 5.2.11-tuxcare.15 of @angular/upgrade." }, "affects": [ { "ref": "pkg:npm/%40angular/upgrade@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:fd97276d-2167-591f-97a5-b64a60533a72", "id": "CVE-2026-50171", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50171 is fixed in version 5.2.11-tuxcare.15 of @angular/upgrade." }, "affects": [ { "ref": "pkg:npm/%40angular/upgrade@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:c9cb82e6-91e7-5726-8cc3-eb166c71bb1d", "id": "CVE-2026-50184", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50184 is fixed in version 5.2.11-tuxcare.15 of @angular/upgrade." }, "affects": [ { "ref": "pkg:npm/%40angular/upgrade@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:e013ac2a-af81-5d6c-86b4-ea74e0ed1ac9", "id": "CVE-2026-50555", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50555 is fixed in version 5.2.11-tuxcare.15 of @angular/upgrade." }, "affects": [ { "ref": "pkg:npm/%40angular/upgrade@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:6eb0a6c1-c91a-57a8-8e1d-639f6cecaa98", "id": "CVE-2026-50556", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50556 is fixed in version 5.2.11-tuxcare.15 of @angular/upgrade." }, "affects": [ { "ref": "pkg:npm/%40angular/upgrade@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:30dd4fcc-78b4-5fe9-8212-ff31aa753ca3", "id": "CVE-2026-50557", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50557 is fixed in version 5.2.11-tuxcare.15 of @angular/upgrade." }, "affects": [ { "ref": "pkg:npm/%40angular/upgrade@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:83593fc7-d3ae-5f85-ab5a-869318ace3a5", "id": "CVE-2026-52725", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-52725 is fixed in version 5.2.11-tuxcare.15 of @angular/upgrade." }, "affects": [ { "ref": "pkg:npm/%40angular/upgrade@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:370ad8cb-4e70-5939-84c6-d042c6f1b73a", "id": "CVE-2026-54264", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54264 is fixed in version 5.2.11-tuxcare.15 of @angular/upgrade." }, "affects": [ { "ref": "pkg:npm/%40angular/upgrade@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:47e56b0f-91cc-56ad-9ec0-87dc66bdcab3", "id": "CVE-2026-54265", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54265 is fixed in version 5.2.11-tuxcare.15 of @angular/upgrade." }, "affects": [ { "ref": "pkg:npm/%40angular/upgrade@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:777d7140-3665-5b62-89a4-fc1ed1763094", "id": "CVE-2026-54266", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54266 is fixed in version 5.2.11-tuxcare.15 of @angular/upgrade." }, "affects": [ { "ref": "pkg:npm/%40angular/upgrade@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:264c31b7-b575-56d0-80ee-06b538e8179f", "id": "CVE-2026-54267", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54267 is fixed in version 5.2.11-tuxcare.15 of @angular/upgrade." }, "affects": [ { "ref": "pkg:npm/%40angular/upgrade@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:ebeb1e35-a01e-5280-bf84-65fab3c65219", "id": "CVE-2026-54268", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54268 is fixed in version 5.2.11-tuxcare.15 of @angular/upgrade." }, "affects": [ { "ref": "pkg:npm/%40angular/upgrade@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:584c5274-edc3-5356-bf45-e3a4c0aa3477", "id": "CVE-2026-68945", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-68945 does not affect version 5.2.11-tuxcare.15 of @angular/upgrade. not_affected \u2014 Angular 5.2.11 is NOT affected by CVE-2026-68945. The vulnerable component `HttpTransferCache` does not exist in this version. This feature was introduced in Angular v16 as part of the modern SSR hydration system. Angular 5.2.11 only has the basic `TransferState` API (a generic key-value store for manual state transfer), not the automatic HTTP request caching interceptor that contains the vulne..." }, "affects": [ { "ref": "pkg:npm/%40angular/upgrade@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:63a395b8-7706-5b60-be5a-f37faa6a0293", "id": "CVE-2026-69149", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69149 is fixed in version 5.2.11-tuxcare.15 of @angular/upgrade." }, "affects": [ { "ref": "pkg:npm/%40angular/upgrade@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:2401afee-9e56-58ad-8977-c34f822ea8cf", "id": "CVE-2026-69151", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69151 is fixed in version 5.2.11-tuxcare.15 of @angular/upgrade." }, "affects": [ { "ref": "pkg:npm/%40angular/upgrade@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:54b4e932-6c12-520e-8dde-fd968c533a35", "id": "CVE-2026-88056", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88056 does not affect version 5.2.11-tuxcare.15 of @angular/upgrade. not_affected \u2014 Angular 5.2.11-tuxcare.19 does not contain the vulnerable URL resolution code pattern described in CVE-2026-88056. The vulnerability requires the url.ts file with parseUrl function calling String.prototype.trim() and the relativeUrlsTransformerInterceptorFn HTTP interceptor, both introduced in later Angular versions (post-June 2026). The target version uses a fundamentally different architectur..." }, "affects": [ { "ref": "pkg:npm/%40angular/upgrade@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:3c1380b2-c81e-51a0-b167-503e07c9492d", "id": "CVE-2026-88057", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88057 affects version 5.2.11-tuxcare.15 of @angular/upgrade." }, "affects": [ { "ref": "pkg:npm/%40angular/upgrade@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:26adfa23-7a75-543e-9be8-150bac28798d", "id": "CVE-2026-88059", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88059 does not affect version 5.2.11-tuxcare.15 of @angular/upgrade. not_affected \u2014 Angular 5.2.11 is NOT AFFECTED by CVE-2026-88059. The vulnerability requires HttpTransferCache with hierarchical HttpClient delegation (withRequestsMadeViaParent()), features that were introduced in Angular v16. Angular 5.2.11 predates these features by approximately 6+ years and contains only a basic HTTP interceptor architecture with no automatic response caching mechanism. While TransferStat..." }, "affects": [ { "ref": "pkg:npm/%40angular/upgrade@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:ce803f1e-6f2f-5eca-849d-0188f5e4ab3b", "id": "CVE-2026-88060", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88060 affects version 5.2.11-tuxcare.15 of @angular/upgrade." }, "affects": [ { "ref": "pkg:npm/%40angular/upgrade@5.2.11-tuxcare.15" } ] } ], "dependencies": [ { "ref": "pkg:npm/%40angular/upgrade@5.2.11-tuxcare.15" } ] }