{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:354fa48a-60aa-5e30-88b5-9f7ceea1b6ac", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@angular/common", "purl": "pkg:npm/%40angular/common@18.2.14-tuxcare.16", "type": "library", "bom-ref": "pkg:npm/%40angular/common@18.2.14-tuxcare.16", "version": "18.2.14-tuxcare.16", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-66035", "affects": [ { "ref": "pkg:npm/%40angular/common@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:f68a6f81-4715-5444-8f8b-a3330a046928", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 18.2.14-tuxcare.16 of @angular/common." } }, { "id": "CVE-2025-66412", "affects": [ { "ref": "pkg:npm/%40angular/common@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:f7fbd5ce-5f3f-5993-80bf-edfd434708d1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 18.2.14-tuxcare.16 of @angular/common." } }, { "id": "CVE-2026-101895", "affects": [ { "ref": "pkg:npm/%40angular/common@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:4bf1177d-3148-56f0-b690-bd8ab71d0936", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101895 affects version 18.2.14-tuxcare.16 of @angular/common, and is fixed in 18.2.14-tuxcare.17." } }, { "id": "CVE-2026-101896", "affects": [ { "ref": "pkg:npm/%40angular/common@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:021dce55-9d64-5cb7-9968-4bbc05d663cd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101896 affects version 18.2.14-tuxcare.16 of @angular/common." } }, { "id": "CVE-2026-22610", "affects": [ { "ref": "pkg:npm/%40angular/common@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:59f9fde8-9948-5d19-a03a-50828cb4cea8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22610 is fixed in version 18.2.14-tuxcare.16 of @angular/common." } }, { "id": "CVE-2026-27970", "affects": [ { "ref": "pkg:npm/%40angular/common@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:46b2009f-d8ab-5284-aa36-b8757e3e37f6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27970 is fixed in version 18.2.14-tuxcare.16 of @angular/common." } }, { "id": "CVE-2026-32635", "affects": [ { "ref": "pkg:npm/%40angular/common@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:ef4f479b-a467-51cb-892a-a6007f2d96d1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-32635 is fixed in version 18.2.14-tuxcare.16 of @angular/common." } }, { "id": "CVE-2026-46417", "affects": [ { "ref": "pkg:npm/%40angular/common@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:f55d17bd-61c8-521a-b678-33c6be712765", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46417 is fixed in version 18.2.14-tuxcare.16 of @angular/common." } }, { "id": "CVE-2026-50168", "affects": [ { "ref": "pkg:npm/%40angular/common@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:212469f1-6931-5a12-8382-f926637d363d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50168 is fixed in version 18.2.14-tuxcare.16 of @angular/common." } }, { "id": "CVE-2026-50169", "affects": [ { "ref": "pkg:npm/%40angular/common@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:b064d085-665d-5aed-a773-7754adfd617d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50169 is fixed in version 18.2.14-tuxcare.16 of @angular/common." } }, { "id": "CVE-2026-50170", "affects": [ { "ref": "pkg:npm/%40angular/common@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:99651a7e-b7e7-5867-a544-14da8f85e96a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50170 is fixed in version 18.2.14-tuxcare.16 of @angular/common." } }, { "id": "CVE-2026-50171", "affects": [ { "ref": "pkg:npm/%40angular/common@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:a27e3466-d2d2-5b40-ba87-ebb2563ba97d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50171 is fixed in version 18.2.14-tuxcare.16 of @angular/common." } }, { "id": "CVE-2026-50184", "affects": [ { "ref": "pkg:npm/%40angular/common@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:889f2630-d913-5246-90b9-f4416556c6a6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50184 is fixed in version 18.2.14-tuxcare.16 of @angular/common." } }, { "id": "CVE-2026-50555", "affects": [ { "ref": "pkg:npm/%40angular/common@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:dc3044eb-8508-5d8d-a1c5-d975cffadd83", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50555 is fixed in version 18.2.14-tuxcare.16 of @angular/common." } }, { "id": "CVE-2026-50556", "affects": [ { "ref": "pkg:npm/%40angular/common@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:ca77f8e8-52c4-51a6-a9bf-1752d23599f6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50556 is fixed in version 18.2.14-tuxcare.16 of @angular/common." } }, { "id": "CVE-2026-50557", "affects": [ { "ref": "pkg:npm/%40angular/common@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:5627ae45-6a4c-52ce-9290-6b3c9c3047ba", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50557 is fixed in version 18.2.14-tuxcare.16 of @angular/common." } }, { "id": "CVE-2026-52725", "affects": [ { "ref": "pkg:npm/%40angular/common@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:99da8f90-5ae4-507a-8d09-b5aa298a39a7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-52725 is fixed in version 18.2.14-tuxcare.16 of @angular/common." } }, { "id": "CVE-2026-54264", "affects": [ { "ref": "pkg:npm/%40angular/common@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:4bde447c-44b1-55d2-89b8-9a8e9028e8b5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54264 is fixed in version 18.2.14-tuxcare.16 of @angular/common." } }, { "id": "CVE-2026-54265", "affects": [ { "ref": "pkg:npm/%40angular/common@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:ebb1f029-642b-5875-a69a-34ccf271905b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54265 is fixed in version 18.2.14-tuxcare.16 of @angular/common." } }, { "id": "CVE-2026-54266", "affects": [ { "ref": "pkg:npm/%40angular/common@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:660a3058-0a68-58fa-bfb4-d594844557e7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54266 is fixed in version 18.2.14-tuxcare.16 of @angular/common." } }, { "id": "CVE-2026-54267", "affects": [ { "ref": "pkg:npm/%40angular/common@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:aa49e0e0-34fd-57d3-b287-f4645f0539c5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54267 is fixed in version 18.2.14-tuxcare.16 of @angular/common." } }, { "id": "CVE-2026-54268", "affects": [ { "ref": "pkg:npm/%40angular/common@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:080b68c6-8eae-5fbd-8a2d-ed9420205a58", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54268 is fixed in version 18.2.14-tuxcare.16 of @angular/common." } }, { "id": "CVE-2026-68945", "affects": [ { "ref": "pkg:npm/%40angular/common@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:fd397995-cc73-581a-b70a-b8b804749b27", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-68945 is fixed in version 18.2.14-tuxcare.16 of @angular/common." } }, { "id": "CVE-2026-69149", "affects": [ { "ref": "pkg:npm/%40angular/common@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:43b0d872-d3ba-5bb6-b597-0f50e576578d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69149 is fixed in version 18.2.14-tuxcare.16 of @angular/common." } }, { "id": "CVE-2026-69151", "affects": [ { "ref": "pkg:npm/%40angular/common@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:237d153d-e025-5c7d-82c2-ddf11eefd34a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69151 is fixed in version 18.2.14-tuxcare.16 of @angular/common." } }, { "id": "CVE-2026-88056", "affects": [ { "ref": "pkg:npm/%40angular/common@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:e46e2f7a-dbfc-59a7-9fdc-754522fc7895", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88056 does not affect version 18.2.14-tuxcare.16 of @angular/common. not_affected \u2014 The target version 18.2.14-tuxcare.13 is NOT affected by CVE-2026-88056. The vulnerable code pattern (calling String.prototype.trim() on URL strings before resolution) was never present in this version. The target uses a refactored parseUrl() implementation introduced via commit 49a60f6045 (May 2026) that correctly handles Unicode whitespace by percent-encoding it rather than stripping it, main...", "justification": "code_not_present" } }, { "id": "CVE-2026-88057", "affects": [ { "ref": "pkg:npm/%40angular/common@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:d8fe5f53-82ba-5f88-bd5b-cb738e4f1f62", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88057 is fixed in version 18.2.14-tuxcare.16 of @angular/common." } }, { "id": "CVE-2026-88058", "affects": [ { "ref": "pkg:npm/%40angular/common@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:2c161ea7-d77d-5a67-a0fc-d026f6bf3d99", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88058 is fixed in version 18.2.14-tuxcare.16 of @angular/common." } }, { "id": "CVE-2026-88059", "affects": [ { "ref": "pkg:npm/%40angular/common@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:8a3422b1-dd28-5d5f-a168-58875790372b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88059 is fixed in version 18.2.14-tuxcare.16 of @angular/common." } }, { "id": "CVE-2026-88060", "affects": [ { "ref": "pkg:npm/%40angular/common@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:15e7f437-a516-568b-8700-8eab34176270", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88060 is fixed in version 18.2.14-tuxcare.16 of @angular/common." } } ], "dependencies": [ { "ref": "pkg:npm/%40angular/common@18.2.14-tuxcare.16" } ] }