{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:07431c33-16d8-5ce3-b583-02aec16e05da", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@angular/bazel", "purl": "pkg:npm/%40angular/bazel@16.2.11-tuxcare.6", "type": "library", "bom-ref": "pkg:npm/%40angular/bazel@16.2.11-tuxcare.6", "version": "16.2.11-tuxcare.6", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-59052", "affects": [ { "ref": "pkg:npm/%40angular/bazel@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:b8fc973c-1b90-5a33-ae12-ee9a78f67acb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-59052 affects version 16.2.11-tuxcare.6 of @angular/bazel." } }, { "id": "CVE-2025-66035", "affects": [ { "ref": "pkg:npm/%40angular/bazel@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:469f4afa-f14a-51d7-8bf5-34e852f0212a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 16.2.11-tuxcare.6 of @angular/bazel." } }, { "id": "CVE-2025-66412", "affects": [ { "ref": "pkg:npm/%40angular/bazel@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:be0b48bd-62b6-57d0-8963-1fd02dcf77ac", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 16.2.11-tuxcare.6 of @angular/bazel." } }, { "id": "CVE-2026-101895", "affects": [ { "ref": "pkg:npm/%40angular/bazel@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:07ec9f94-7944-5556-8edd-7901106ad0df", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-101895 is fixed in version 16.2.11-tuxcare.6 of @angular/bazel." } }, { "id": "CVE-2026-101896", "affects": [ { "ref": "pkg:npm/%40angular/bazel@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:4cedb294-2247-5140-b879-f3dd13e70ca2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101896 affects version 16.2.11-tuxcare.6 of @angular/bazel." } }, { "id": "CVE-2026-22610", "affects": [ { "ref": "pkg:npm/%40angular/bazel@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:f33ca7b2-3bfb-5d37-bc81-273359dec4d7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22610 is fixed in version 16.2.11-tuxcare.6 of @angular/bazel." } }, { "id": "CVE-2026-27970", "affects": [ { "ref": "pkg:npm/%40angular/bazel@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:f25d51ab-692c-5680-9a2a-3771d5268504", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27970 is fixed in version 16.2.11-tuxcare.6 of @angular/bazel." } }, { "id": "CVE-2026-41423", "affects": [ { "ref": "pkg:npm/%40angular/bazel@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:cf62bb4f-1080-5ded-a319-485e7fba2da2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41423 is fixed in version 16.2.11-tuxcare.6 of @angular/bazel." } }, { "id": "CVE-2026-46417", "affects": [ { "ref": "pkg:npm/%40angular/bazel@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:c01530c7-90b6-54d1-996e-aa4a4f2a628c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46417 is fixed in version 16.2.11-tuxcare.6 of @angular/bazel." } }, { "id": "CVE-2026-50168", "affects": [ { "ref": "pkg:npm/%40angular/bazel@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:69d3a681-d814-57c5-b04b-a5d1d17fd0d6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50168 is fixed in version 16.2.11-tuxcare.6 of @angular/bazel." } }, { "id": "CVE-2026-50169", "affects": [ { "ref": "pkg:npm/%40angular/bazel@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:6d4283ad-ab94-5090-a427-549a2b021df0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50169 is fixed in version 16.2.11-tuxcare.6 of @angular/bazel." } }, { "id": "CVE-2026-50170", "affects": [ { "ref": "pkg:npm/%40angular/bazel@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:48562879-dde8-584d-b5ab-e405449c1c65", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50170 is fixed in version 16.2.11-tuxcare.6 of @angular/bazel." } }, { "id": "CVE-2026-50171", "affects": [ { "ref": "pkg:npm/%40angular/bazel@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:371d46ab-5110-555d-90d9-43c8ca9a6698", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50171 is fixed in version 16.2.11-tuxcare.6 of @angular/bazel." } }, { "id": "CVE-2026-50184", "affects": [ { "ref": "pkg:npm/%40angular/bazel@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:18d48108-8920-5a6a-bd55-cbf1781aa984", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50184 is fixed in version 16.2.11-tuxcare.6 of @angular/bazel." } }, { "id": "CVE-2026-50555", "affects": [ { "ref": "pkg:npm/%40angular/bazel@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:7c778ec9-45e8-55a9-9f3d-de82d088bdc6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50555 is fixed in version 16.2.11-tuxcare.6 of @angular/bazel." } }, { "id": "CVE-2026-50556", "affects": [ { "ref": "pkg:npm/%40angular/bazel@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:b5680407-3ddd-50c8-81ea-1f3f1b762df5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50556 is fixed in version 16.2.11-tuxcare.6 of @angular/bazel." } }, { "id": "CVE-2026-50557", "affects": [ { "ref": "pkg:npm/%40angular/bazel@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:9fdf2396-46d6-5bbf-99c5-b8830b952d72", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50557 is fixed in version 16.2.11-tuxcare.6 of @angular/bazel." } }, { "id": "CVE-2026-52725", "affects": [ { "ref": "pkg:npm/%40angular/bazel@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:51926044-2529-5a0f-96f2-a9214d4c2dc1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-52725 is fixed in version 16.2.11-tuxcare.6 of @angular/bazel." } }, { "id": "CVE-2026-54264", "affects": [ { "ref": "pkg:npm/%40angular/bazel@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:529a5488-d0d0-53ea-a7db-fbecdcb0f802", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54264 is fixed in version 16.2.11-tuxcare.6 of @angular/bazel." } }, { "id": "CVE-2026-54265", "affects": [ { "ref": "pkg:npm/%40angular/bazel@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:d75a9d21-6a4a-5dc9-be21-9b9e186ffccf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54265 is fixed in version 16.2.11-tuxcare.6 of @angular/bazel." } }, { "id": "CVE-2026-54266", "affects": [ { "ref": "pkg:npm/%40angular/bazel@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:30499940-a772-5caf-972a-584b88464ce6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54266 is fixed in version 16.2.11-tuxcare.6 of @angular/bazel." } }, { "id": "CVE-2026-54267", "affects": [ { "ref": "pkg:npm/%40angular/bazel@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:79ff35e7-3cf4-5d1e-a828-b66a7981754b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54267 is fixed in version 16.2.11-tuxcare.6 of @angular/bazel." } }, { "id": "CVE-2026-54268", "affects": [ { "ref": "pkg:npm/%40angular/bazel@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:99391d4f-a8bb-582c-af2b-3a9a3789b9c6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54268 is fixed in version 16.2.11-tuxcare.6 of @angular/bazel." } }, { "id": "CVE-2026-68945", "affects": [ { "ref": "pkg:npm/%40angular/bazel@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:34b9a6b5-d9ec-5241-bd1c-9fd296e158db", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-68945 is fixed in version 16.2.11-tuxcare.6 of @angular/bazel." } }, { "id": "CVE-2026-69149", "affects": [ { "ref": "pkg:npm/%40angular/bazel@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:9190d4bb-b8a7-545e-9216-9a7c96f94f4c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69149 is fixed in version 16.2.11-tuxcare.6 of @angular/bazel." } }, { "id": "CVE-2026-69151", "affects": [ { "ref": "pkg:npm/%40angular/bazel@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:119b536a-00d4-5ebe-bf55-ef830954cb5e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69151 is fixed in version 16.2.11-tuxcare.6 of @angular/bazel." } }, { "id": "CVE-2026-88056", "affects": [ { "ref": "pkg:npm/%40angular/bazel@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:06926d87-c7db-5cbf-aa08-424a74f7a375", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88056 does not affect version 16.2.11-tuxcare.6 of @angular/bazel. not_affected \u2014 Angular 16.2.11-tuxcare.2 is NOT affected by CVE-2026-88056. The vulnerability requires WHATWG URL validation combined with String.prototype.trim() on URLs during SSR, creating a discrepancy that enables SSRF. While the target uses WHATWG URL parsing (backported in commit c03fbfd7cc for CVE-2026-50168), it does NOT call String.prototype.trim() on URLs. The attack chain is broken at the trim() s...", "justification": "code_not_reachable" } }, { "id": "CVE-2026-88057", "affects": [ { "ref": "pkg:npm/%40angular/bazel@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:40fa0194-9904-5205-b4e0-9ab4bc1829d0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88057 is fixed in version 16.2.11-tuxcare.6 of @angular/bazel." } }, { "id": "CVE-2026-88058", "affects": [ { "ref": "pkg:npm/%40angular/bazel@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:5af2e644-b16b-53f9-9b58-4168efaa4a34", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88058 is fixed in version 16.2.11-tuxcare.6 of @angular/bazel." } }, { "id": "CVE-2026-88059", "affects": [ { "ref": "pkg:npm/%40angular/bazel@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:8d1ec4db-82a6-5782-85ab-60cc238daa4f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88059 is fixed in version 16.2.11-tuxcare.6 of @angular/bazel." } }, { "id": "CVE-2026-88060", "affects": [ { "ref": "pkg:npm/%40angular/bazel@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:c2439997-1c92-5d5c-894e-83eabd3b3e7f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88060 is fixed in version 16.2.11-tuxcare.6 of @angular/bazel." } } ], "dependencies": [ { "ref": "pkg:npm/%40angular/bazel@16.2.11-tuxcare.6" } ] }