{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:b547b2d6-a681-5e3c-b92a-b76cd0065194", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@angular/compiler-cli", "purl": "pkg:npm/%40angular/compiler-cli@16.2.11-tuxcare.6", "type": "library", "bom-ref": "pkg:npm/%40angular/compiler-cli@16.2.11-tuxcare.6", "version": "16.2.11-tuxcare.6", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-59052", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:11200fdc-1c5f-5b29-b48c-991011bafc95", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-59052 affects version 16.2.11-tuxcare.6 of @angular/compiler-cli." } }, { "id": "CVE-2025-66035", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:99f6152c-558c-5203-b40c-dc7dba3c0238", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 16.2.11-tuxcare.6 of @angular/compiler-cli." } }, { "id": "CVE-2025-66412", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:6a102c68-488f-58fe-be48-49adb8cbc6f3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 16.2.11-tuxcare.6 of @angular/compiler-cli." } }, { "id": "CVE-2026-101895", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:b63c861e-d8cd-52e3-88c5-e75c1f4c1f7f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-101895 is fixed in version 16.2.11-tuxcare.6 of @angular/compiler-cli." } }, { "id": "CVE-2026-101896", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:3039c214-3634-50fd-9876-b3c5196b1eb5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101896 affects version 16.2.11-tuxcare.6 of @angular/compiler-cli." } }, { "id": "CVE-2026-22610", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:5b3a347e-1dd0-5b70-8272-d64e009cb97b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22610 is fixed in version 16.2.11-tuxcare.6 of @angular/compiler-cli." } }, { "id": "CVE-2026-27970", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:98720d7f-f3de-5407-a6cb-bd9d31f0b990", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27970 is fixed in version 16.2.11-tuxcare.6 of @angular/compiler-cli." } }, { "id": "CVE-2026-41423", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:08823cd1-fb06-5cc0-b2bd-43c589cc8443", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41423 is fixed in version 16.2.11-tuxcare.6 of @angular/compiler-cli." } }, { "id": "CVE-2026-46417", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:2267c1da-e0cb-5457-a700-0a18cc931a29", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46417 is fixed in version 16.2.11-tuxcare.6 of @angular/compiler-cli." } }, { "id": "CVE-2026-50168", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:3f6b77a6-0240-5c85-821d-2110384cb921", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50168 is fixed in version 16.2.11-tuxcare.6 of @angular/compiler-cli." } }, { "id": "CVE-2026-50169", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:8cb2bc31-ca12-5da2-b906-eae499dfa7ed", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50169 is fixed in version 16.2.11-tuxcare.6 of @angular/compiler-cli." } }, { "id": "CVE-2026-50170", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:3206482a-9965-528f-9577-798137cb43c2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50170 is fixed in version 16.2.11-tuxcare.6 of @angular/compiler-cli." } }, { "id": "CVE-2026-50171", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:84d15d70-bdb8-5a9b-ad53-62c735777a74", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50171 is fixed in version 16.2.11-tuxcare.6 of @angular/compiler-cli." } }, { "id": "CVE-2026-50184", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:b23a1d1e-1f1c-5117-8d9e-a8098674e128", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50184 is fixed in version 16.2.11-tuxcare.6 of @angular/compiler-cli." } }, { "id": "CVE-2026-50555", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:f14e71bc-d05b-5e68-9e43-badb480e0e85", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50555 is fixed in version 16.2.11-tuxcare.6 of @angular/compiler-cli." } }, { "id": "CVE-2026-50556", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:5d8de9a5-062b-59b2-be60-3a65a3cda6f2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50556 is fixed in version 16.2.11-tuxcare.6 of @angular/compiler-cli." } }, { "id": "CVE-2026-50557", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:b3715164-d6db-5377-89e2-feb69934463a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50557 is fixed in version 16.2.11-tuxcare.6 of @angular/compiler-cli." } }, { "id": "CVE-2026-52725", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:1019158e-105c-56c8-ab40-b3ff42f6db32", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-52725 is fixed in version 16.2.11-tuxcare.6 of @angular/compiler-cli." } }, { "id": "CVE-2026-54264", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:8b5d4265-8e66-5302-8623-62ae34f24989", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54264 is fixed in version 16.2.11-tuxcare.6 of @angular/compiler-cli." } }, { "id": "CVE-2026-54265", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:28b74366-0372-5e7c-b694-de708c430a99", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54265 is fixed in version 16.2.11-tuxcare.6 of @angular/compiler-cli." } }, { "id": "CVE-2026-54266", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:ea603ca0-faf0-59df-a517-2420d43024ec", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54266 is fixed in version 16.2.11-tuxcare.6 of @angular/compiler-cli." } }, { "id": "CVE-2026-54267", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:d0087057-210d-5e54-8695-9deafa38afd6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54267 is fixed in version 16.2.11-tuxcare.6 of @angular/compiler-cli." } }, { "id": "CVE-2026-54268", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:1f50362b-fc88-537c-8304-59157efc7371", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54268 is fixed in version 16.2.11-tuxcare.6 of @angular/compiler-cli." } }, { "id": "CVE-2026-68945", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:8709c286-51d9-58ae-9085-52ad81ddbc73", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-68945 is fixed in version 16.2.11-tuxcare.6 of @angular/compiler-cli." } }, { "id": "CVE-2026-69149", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:90563646-1535-5929-9419-426e98ff28be", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69149 is fixed in version 16.2.11-tuxcare.6 of @angular/compiler-cli." } }, { "id": "CVE-2026-69151", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:40ceaf28-b447-5cb4-9574-451405352ea2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69151 is fixed in version 16.2.11-tuxcare.6 of @angular/compiler-cli." } }, { "id": "CVE-2026-88056", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:98079313-dc54-5ea2-9a72-70370ce27124", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88056 does not affect version 16.2.11-tuxcare.6 of @angular/compiler-cli. not_affected \u2014 Angular 16.2.11-tuxcare.2 is NOT affected by CVE-2026-88056. The vulnerability requires WHATWG URL validation combined with String.prototype.trim() on URLs during SSR, creating a discrepancy that enables SSRF. While the target uses WHATWG URL parsing (backported in commit c03fbfd7cc for CVE-2026-50168), it does NOT call String.prototype.trim() on URLs. The attack chain is broken at the trim() s...", "justification": "code_not_reachable" } }, { "id": "CVE-2026-88057", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:1bb647a3-0985-59bd-95de-a99c164184ea", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88057 is fixed in version 16.2.11-tuxcare.6 of @angular/compiler-cli." } }, { "id": "CVE-2026-88058", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:3778c683-9cdf-5752-8c36-39a9d0a480d3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88058 is fixed in version 16.2.11-tuxcare.6 of @angular/compiler-cli." } }, { "id": "CVE-2026-88059", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:9b537db8-ad3d-5a0a-b8c8-cae2c85aff03", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88059 is fixed in version 16.2.11-tuxcare.6 of @angular/compiler-cli." } }, { "id": "CVE-2026-88060", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:e52478c4-3b8a-5279-92c9-678e4d1a9cc7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88060 is fixed in version 16.2.11-tuxcare.6 of @angular/compiler-cli." } } ], "dependencies": [ { "ref": "pkg:npm/%40angular/compiler-cli@16.2.11-tuxcare.6" } ] }