{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:7e6b69fa-7259-5bf8-a335-66e3407baf3b", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@angular/common", "purl": "pkg:npm/%40angular/common@16.2.11-tuxcare.6", "type": "library", "bom-ref": "pkg:npm/%40angular/common@16.2.11-tuxcare.6", "version": "16.2.11-tuxcare.6", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-59052", "affects": [ { "ref": "pkg:npm/%40angular/common@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:a7631428-3e15-51af-adda-05841517bf41", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-59052 affects version 16.2.11-tuxcare.6 of @angular/common." } }, { "id": "CVE-2025-66035", "affects": [ { "ref": "pkg:npm/%40angular/common@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:f1862358-4c5c-52bd-bb3d-06233cede6d0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 16.2.11-tuxcare.6 of @angular/common." } }, { "id": "CVE-2025-66412", "affects": [ { "ref": "pkg:npm/%40angular/common@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:3c75c589-b4a0-5b64-a944-6c61f6372f4b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 16.2.11-tuxcare.6 of @angular/common." } }, { "id": "CVE-2026-101895", "affects": [ { "ref": "pkg:npm/%40angular/common@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:24dae85c-4534-5785-9835-ecb03216138d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-101895 is fixed in version 16.2.11-tuxcare.6 of @angular/common." } }, { "id": "CVE-2026-101896", "affects": [ { "ref": "pkg:npm/%40angular/common@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:e9fff4f2-256a-5cef-bc9c-9aea368c21b4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101896 affects version 16.2.11-tuxcare.6 of @angular/common." } }, { "id": "CVE-2026-22610", "affects": [ { "ref": "pkg:npm/%40angular/common@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:e1d4c934-5c44-52d4-b20a-2f8dd0b0e55c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22610 is fixed in version 16.2.11-tuxcare.6 of @angular/common." } }, { "id": "CVE-2026-27970", "affects": [ { "ref": "pkg:npm/%40angular/common@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:da716b30-d492-5947-beb8-3b39bb64ed06", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27970 is fixed in version 16.2.11-tuxcare.6 of @angular/common." } }, { "id": "CVE-2026-41423", "affects": [ { "ref": "pkg:npm/%40angular/common@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:db6328a6-a462-55c5-94ae-1b17c0f62814", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41423 is fixed in version 16.2.11-tuxcare.6 of @angular/common." } }, { "id": "CVE-2026-46417", "affects": [ { "ref": "pkg:npm/%40angular/common@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:cc80ee55-4c88-5db5-aa07-16d52e2db665", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46417 is fixed in version 16.2.11-tuxcare.6 of @angular/common." } }, { "id": "CVE-2026-50168", "affects": [ { "ref": "pkg:npm/%40angular/common@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:965e8aae-28af-5bf5-bbac-9272aed7b158", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50168 is fixed in version 16.2.11-tuxcare.6 of @angular/common." } }, { "id": "CVE-2026-50169", "affects": [ { "ref": "pkg:npm/%40angular/common@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:e8fc9103-dd08-5eab-8f7a-65c4b7761ffd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50169 is fixed in version 16.2.11-tuxcare.6 of @angular/common." } }, { "id": "CVE-2026-50170", "affects": [ { "ref": "pkg:npm/%40angular/common@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:30d7c7e2-a24c-52c5-9fde-a706bed80913", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50170 is fixed in version 16.2.11-tuxcare.6 of @angular/common." } }, { "id": "CVE-2026-50171", "affects": [ { "ref": "pkg:npm/%40angular/common@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:722534ce-aa53-576f-b668-461a9baa6453", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50171 is fixed in version 16.2.11-tuxcare.6 of @angular/common." } }, { "id": "CVE-2026-50184", "affects": [ { "ref": "pkg:npm/%40angular/common@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:c63eb099-e2f5-579e-b365-42464448b8a3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50184 is fixed in version 16.2.11-tuxcare.6 of @angular/common." } }, { "id": "CVE-2026-50555", "affects": [ { "ref": "pkg:npm/%40angular/common@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:a740bc16-3ef6-505e-b4cd-e4692ec02859", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50555 is fixed in version 16.2.11-tuxcare.6 of @angular/common." } }, { "id": "CVE-2026-50556", "affects": [ { "ref": "pkg:npm/%40angular/common@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:9eba6cd0-8622-5634-bacf-778944d01fe3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50556 is fixed in version 16.2.11-tuxcare.6 of @angular/common." } }, { "id": "CVE-2026-50557", "affects": [ { "ref": "pkg:npm/%40angular/common@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:3c050a41-245c-5c8c-ae3a-95b7b7e2a144", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50557 is fixed in version 16.2.11-tuxcare.6 of @angular/common." } }, { "id": "CVE-2026-52725", "affects": [ { "ref": "pkg:npm/%40angular/common@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:9061c005-addd-5454-ac07-257633ef6a17", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-52725 is fixed in version 16.2.11-tuxcare.6 of @angular/common." } }, { "id": "CVE-2026-54264", "affects": [ { "ref": "pkg:npm/%40angular/common@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:51cd52c8-2830-56c1-b4bf-07d602bb70fd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54264 is fixed in version 16.2.11-tuxcare.6 of @angular/common." } }, { "id": "CVE-2026-54265", "affects": [ { "ref": "pkg:npm/%40angular/common@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:f4841782-4d8f-5adf-aac5-8ccc1d421b1f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54265 is fixed in version 16.2.11-tuxcare.6 of @angular/common." } }, { "id": "CVE-2026-54266", "affects": [ { "ref": "pkg:npm/%40angular/common@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:17516b2f-9b9f-5240-b02d-560fe1a0333a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54266 is fixed in version 16.2.11-tuxcare.6 of @angular/common." } }, { "id": "CVE-2026-54267", "affects": [ { "ref": "pkg:npm/%40angular/common@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:5d4ba06e-0555-5c63-84e1-79bda2cc096f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54267 is fixed in version 16.2.11-tuxcare.6 of @angular/common." } }, { "id": "CVE-2026-54268", "affects": [ { "ref": "pkg:npm/%40angular/common@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:985c1738-769b-5a8c-ab19-38035dec14a0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54268 is fixed in version 16.2.11-tuxcare.6 of @angular/common." } }, { "id": "CVE-2026-68945", "affects": [ { "ref": "pkg:npm/%40angular/common@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:fe997d49-fa17-599f-a9af-a0387dc05e82", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-68945 is fixed in version 16.2.11-tuxcare.6 of @angular/common." } }, { "id": "CVE-2026-69149", "affects": [ { "ref": "pkg:npm/%40angular/common@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:2e53594f-71af-5bc7-a6b8-60d4fdfcd591", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69149 is fixed in version 16.2.11-tuxcare.6 of @angular/common." } }, { "id": "CVE-2026-69151", "affects": [ { "ref": "pkg:npm/%40angular/common@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:da6f2f16-e030-567b-a838-940050dbec05", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69151 is fixed in version 16.2.11-tuxcare.6 of @angular/common." } }, { "id": "CVE-2026-88056", "affects": [ { "ref": "pkg:npm/%40angular/common@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:b0e7acce-19e4-5e62-a09e-0b1da5d37d7d", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88056 does not affect version 16.2.11-tuxcare.6 of @angular/common. not_affected \u2014 Angular 16.2.11-tuxcare.2 is NOT affected by CVE-2026-88056. The vulnerability requires WHATWG URL validation combined with String.prototype.trim() on URLs during SSR, creating a discrepancy that enables SSRF. While the target uses WHATWG URL parsing (backported in commit c03fbfd7cc for CVE-2026-50168), it does NOT call String.prototype.trim() on URLs. The attack chain is broken at the trim() s...", "justification": "code_not_reachable" } }, { "id": "CVE-2026-88057", "affects": [ { "ref": "pkg:npm/%40angular/common@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:bc6556ae-473f-5c7c-ba17-fe7996dc7c74", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88057 is fixed in version 16.2.11-tuxcare.6 of @angular/common." } }, { "id": "CVE-2026-88058", "affects": [ { "ref": "pkg:npm/%40angular/common@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:cddb24b8-ec00-56e1-8093-bc8f0991e4a7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88058 is fixed in version 16.2.11-tuxcare.6 of @angular/common." } }, { "id": "CVE-2026-88059", "affects": [ { "ref": "pkg:npm/%40angular/common@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:9bf3ed20-351e-528c-932b-1248da1a0c17", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88059 is fixed in version 16.2.11-tuxcare.6 of @angular/common." } }, { "id": "CVE-2026-88060", "affects": [ { "ref": "pkg:npm/%40angular/common@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:77655e37-8a63-5252-aa5d-673513b1ebda", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88060 is fixed in version 16.2.11-tuxcare.6 of @angular/common." } } ], "dependencies": [ { "ref": "pkg:npm/%40angular/common@16.2.11-tuxcare.6" } ] }