{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:558accbc-1df6-574e-9692-581c23338ffc", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@angular/compiler-cli", "purl": "pkg:npm/%40angular/compiler-cli@17.3.12-tuxcare.17", "type": "library", "bom-ref": "pkg:npm/%40angular/compiler-cli@17.3.12-tuxcare.17", "version": "17.3.12-tuxcare.17", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-59052", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:6b0a7a91-8d60-55c7-8fd7-1f81f30527b7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59052 is fixed in version 17.3.12-tuxcare.17 of @angular/compiler-cli." } }, { "id": "CVE-2025-66035", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:0453464a-b798-570f-8517-d4d4d384f885", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 17.3.12-tuxcare.17 of @angular/compiler-cli." } }, { "id": "CVE-2025-66412", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:cac7dd2f-dd1b-538c-9470-3f01a32ce8fe", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 17.3.12-tuxcare.17 of @angular/compiler-cli." } }, { "id": "CVE-2026-101895", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:e576eea8-8319-58f6-b718-76bb48a2d2cd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101895 affects version 17.3.12-tuxcare.17 of @angular/compiler-cli, and is fixed in 17.3.12-tuxcare.18." } }, { "id": "CVE-2026-101896", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:05e7e5c9-1b3e-5fde-8247-72a7ad309202", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101896 affects version 17.3.12-tuxcare.17 of @angular/compiler-cli." } }, { "id": "CVE-2026-22610", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:c2f146af-5278-5c1e-b02c-1e8661b063a0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22610 is fixed in version 17.3.12-tuxcare.17 of @angular/compiler-cli." } }, { "id": "CVE-2026-27970", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:f22dcfb0-a0f1-5cd0-8891-032530081b31", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27970 is fixed in version 17.3.12-tuxcare.17 of @angular/compiler-cli." } }, { "id": "CVE-2026-32635", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:587b7906-1f11-5242-813e-50201fdfcfd6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-32635 is fixed in version 17.3.12-tuxcare.17 of @angular/compiler-cli." } }, { "id": "CVE-2026-46417", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:61799d3d-8220-5983-987d-eb5af2fdfcd4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46417 is fixed in version 17.3.12-tuxcare.17 of @angular/compiler-cli." } }, { "id": "CVE-2026-50168", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:c1c86c7a-45a6-5d0d-83c6-b9ec0c40ee01", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50168 is fixed in version 17.3.12-tuxcare.17 of @angular/compiler-cli." } }, { "id": "CVE-2026-50169", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:a3676102-0cb2-59e8-849e-dc41246c920a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50169 is fixed in version 17.3.12-tuxcare.17 of @angular/compiler-cli." } }, { "id": "CVE-2026-50170", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:c865c100-e9d4-5ef8-a740-4d6e5535718c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50170 is fixed in version 17.3.12-tuxcare.17 of @angular/compiler-cli." } }, { "id": "CVE-2026-50171", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:9508180c-14bb-5329-a3f7-27e23c16efba", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50171 is fixed in version 17.3.12-tuxcare.17 of @angular/compiler-cli." } }, { "id": "CVE-2026-50184", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:b865b17b-c130-54bc-ad04-0613d43b8c0b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50184 is fixed in version 17.3.12-tuxcare.17 of @angular/compiler-cli." } }, { "id": "CVE-2026-50555", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:b47b7470-2eb3-53c1-aaf8-684ab7728eea", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50555 is fixed in version 17.3.12-tuxcare.17 of @angular/compiler-cli." } }, { "id": "CVE-2026-50556", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:f5a99c1e-09d3-5dfb-b981-3e914ef0b3b7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50556 is fixed in version 17.3.12-tuxcare.17 of @angular/compiler-cli." } }, { "id": "CVE-2026-50557", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:2c087c4b-f65f-52b1-8291-b73a89b274b1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50557 is fixed in version 17.3.12-tuxcare.17 of @angular/compiler-cli." } }, { "id": "CVE-2026-52725", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:f457aa9b-5b01-530a-beab-d8d46b0599d1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-52725 is fixed in version 17.3.12-tuxcare.17 of @angular/compiler-cli." } }, { "id": "CVE-2026-54264", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:c68c4cc2-5f07-5d06-a623-1743cdf56ad6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54264 is fixed in version 17.3.12-tuxcare.17 of @angular/compiler-cli." } }, { "id": "CVE-2026-54265", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:3ba66345-72ed-5069-8e5a-eacc703ae03e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54265 is fixed in version 17.3.12-tuxcare.17 of @angular/compiler-cli." } }, { "id": "CVE-2026-54266", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:d89ac489-a5c8-5349-82c9-27465f2041c1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54266 is fixed in version 17.3.12-tuxcare.17 of @angular/compiler-cli." } }, { "id": "CVE-2026-54267", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:2f23fd15-ce60-50ed-be1c-28156a3a4a99", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54267 is fixed in version 17.3.12-tuxcare.17 of @angular/compiler-cli." } }, { "id": "CVE-2026-54268", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:53070e89-ca7a-533c-96dd-e89825d49a41", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54268 is fixed in version 17.3.12-tuxcare.17 of @angular/compiler-cli." } }, { "id": "CVE-2026-68945", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:c63fc6d6-0aec-5f77-8e00-1ab1daa3ce18", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-68945 is fixed in version 17.3.12-tuxcare.17 of @angular/compiler-cli." } }, { "id": "CVE-2026-69149", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:5fc2a0ed-aead-539f-adf0-facfd4be8e68", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69149 is fixed in version 17.3.12-tuxcare.17 of @angular/compiler-cli." } }, { "id": "CVE-2026-69151", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:d70908e9-db92-5b2c-8c8c-f79eddada207", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69151 is fixed in version 17.3.12-tuxcare.17 of @angular/compiler-cli." } }, { "id": "CVE-2026-88056", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:69df6d9a-a4bb-5cf5-a2aa-5485372c5c0f", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88056 does not affect version 17.3.12-tuxcare.17 of @angular/compiler-cli. not_affected \u2014 Version 17.3.12 is not affected by CVE-2026-88056. The vulnerability involves String.prototype.trim() being applied during URL resolution in Angular's platform-server, converting validated same-origin URLs with Unicode whitespace into cross-origin protocol-relative URLs, leading to SSRF. This vulnerable code pattern was introduced in newer Angular versions (v20+) and does not exist in version 1...", "justification": "code_not_present" } }, { "id": "CVE-2026-88057", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:54ab42ff-cbea-5c71-8ebe-b7798c95ca02", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88057 is fixed in version 17.3.12-tuxcare.17 of @angular/compiler-cli." } }, { "id": "CVE-2026-88058", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:c8525d0f-fdf7-557c-9a55-e63550b87318", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88058 is fixed in version 17.3.12-tuxcare.17 of @angular/compiler-cli." } }, { "id": "CVE-2026-88059", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:6150c359-6a25-584b-afac-bc87b8f2d3d8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88059 is fixed in version 17.3.12-tuxcare.17 of @angular/compiler-cli." } }, { "id": "CVE-2026-88060", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:b312e20c-c00b-57f3-9d0a-7e065bd8e504", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88060 is fixed in version 17.3.12-tuxcare.17 of @angular/compiler-cli." } } ], "dependencies": [ { "ref": "pkg:npm/%40angular/compiler-cli@17.3.12-tuxcare.17" } ] }