{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:e247fb3c-f440-5deb-8bd9-1b1932b279e8", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@angular/compiler-cli", "purl": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.16", "type": "library", "bom-ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.16", "version": "18.2.14-tuxcare.16", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-66035", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:ce895e8d-046a-56fb-ac19-1c272a07ef5a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 18.2.14-tuxcare.16 of @angular/compiler-cli." } }, { "id": "CVE-2025-66412", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:6478e5d4-20cc-5579-a434-ab626666c746", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 18.2.14-tuxcare.16 of @angular/compiler-cli." } }, { "id": "CVE-2026-101895", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:dd6ae0d7-0426-563d-90c8-0efd62533632", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101895 affects version 18.2.14-tuxcare.16 of @angular/compiler-cli, and is fixed in 18.2.14-tuxcare.17." } }, { "id": "CVE-2026-101896", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:1208e636-0353-5c6a-a0f4-2ae0b688c24d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101896 affects version 18.2.14-tuxcare.16 of @angular/compiler-cli." } }, { "id": "CVE-2026-22610", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:0763ab34-f496-5bde-ac6c-584591c1498c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22610 is fixed in version 18.2.14-tuxcare.16 of @angular/compiler-cli." } }, { "id": "CVE-2026-27970", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:5f088b00-fa77-52cc-902c-ab230a3d960f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27970 is fixed in version 18.2.14-tuxcare.16 of @angular/compiler-cli." } }, { "id": "CVE-2026-32635", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:73aff774-027b-540b-be73-7c83416edaf5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-32635 is fixed in version 18.2.14-tuxcare.16 of @angular/compiler-cli." } }, { "id": "CVE-2026-46417", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:28e4d143-0980-54af-8e46-41df2fb8ed19", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46417 is fixed in version 18.2.14-tuxcare.16 of @angular/compiler-cli." } }, { "id": "CVE-2026-50168", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:858626a7-518e-55c9-b883-d5d147fafc46", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50168 is fixed in version 18.2.14-tuxcare.16 of @angular/compiler-cli." } }, { "id": "CVE-2026-50169", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:e95d72f0-ce03-5979-b931-03bfe92b9cca", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50169 is fixed in version 18.2.14-tuxcare.16 of @angular/compiler-cli." } }, { "id": "CVE-2026-50170", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:a403b316-c13d-5c54-8b6f-fdf83cc461d1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50170 is fixed in version 18.2.14-tuxcare.16 of @angular/compiler-cli." } }, { "id": "CVE-2026-50171", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:f9f4c145-e9b0-56fd-94b4-111ec436e9a4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50171 is fixed in version 18.2.14-tuxcare.16 of @angular/compiler-cli." } }, { "id": "CVE-2026-50184", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:fef825ae-eb68-5aec-b540-df61caf0ed84", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50184 is fixed in version 18.2.14-tuxcare.16 of @angular/compiler-cli." } }, { "id": "CVE-2026-50555", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:460b6b26-6e03-5c42-80c1-a7fa8d54f0b0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50555 is fixed in version 18.2.14-tuxcare.16 of @angular/compiler-cli." } }, { "id": "CVE-2026-50556", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:4ae98c77-f3fc-5223-8966-3648218f7b2f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50556 is fixed in version 18.2.14-tuxcare.16 of @angular/compiler-cli." } }, { "id": "CVE-2026-50557", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:8c3029b8-e617-5f2c-af3e-53d41a1bb1d0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50557 is fixed in version 18.2.14-tuxcare.16 of @angular/compiler-cli." } }, { "id": "CVE-2026-52725", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:84341fff-5031-5655-9a17-a409871c789c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-52725 is fixed in version 18.2.14-tuxcare.16 of @angular/compiler-cli." } }, { "id": "CVE-2026-54264", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:d4e1d9ee-5dda-519e-a0f7-ee44977b8bf9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54264 is fixed in version 18.2.14-tuxcare.16 of @angular/compiler-cli." } }, { "id": "CVE-2026-54265", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:b076b0cc-00eb-5d19-bf5e-5fa501e85472", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54265 is fixed in version 18.2.14-tuxcare.16 of @angular/compiler-cli." } }, { "id": "CVE-2026-54266", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:c5dbc650-0a28-5e01-83ae-0fc4ec3c7de8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54266 is fixed in version 18.2.14-tuxcare.16 of @angular/compiler-cli." } }, { "id": "CVE-2026-54267", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:08463b46-d40b-5541-8b2f-c791764d1ffb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54267 is fixed in version 18.2.14-tuxcare.16 of @angular/compiler-cli." } }, { "id": "CVE-2026-54268", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:59b8b764-8948-58d3-83f5-40b97893cb8d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54268 is fixed in version 18.2.14-tuxcare.16 of @angular/compiler-cli." } }, { "id": "CVE-2026-68945", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:94be6caf-9686-5024-ad62-53f6f34903af", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-68945 is fixed in version 18.2.14-tuxcare.16 of @angular/compiler-cli." } }, { "id": "CVE-2026-69149", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:97403aef-b77c-5d56-91d3-da5a6b8f8f7a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69149 is fixed in version 18.2.14-tuxcare.16 of @angular/compiler-cli." } }, { "id": "CVE-2026-69151", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:6161adcd-24f8-5320-82fc-e57c32ef0b6d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69151 is fixed in version 18.2.14-tuxcare.16 of @angular/compiler-cli." } }, { "id": "CVE-2026-88056", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:c4d3138f-f149-5c19-9796-ce4ef9dcf275", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88056 does not affect version 18.2.14-tuxcare.16 of @angular/compiler-cli. not_affected \u2014 The target version 18.2.14-tuxcare.13 is NOT affected by CVE-2026-88056. The vulnerable code pattern (calling String.prototype.trim() on URL strings before resolution) was never present in this version. The target uses a refactored parseUrl() implementation introduced via commit 49a60f6045 (May 2026) that correctly handles Unicode whitespace by percent-encoding it rather than stripping it, main...", "justification": "code_not_present" } }, { "id": "CVE-2026-88057", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:2e73f755-ee60-5307-96d2-52d3314c6db3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88057 is fixed in version 18.2.14-tuxcare.16 of @angular/compiler-cli." } }, { "id": "CVE-2026-88058", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:5b86520b-4ff8-5490-96b4-5ec360d69456", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88058 is fixed in version 18.2.14-tuxcare.16 of @angular/compiler-cli." } }, { "id": "CVE-2026-88059", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:60b06dc2-f754-5f88-a990-f8e12f9f9845", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88059 is fixed in version 18.2.14-tuxcare.16 of @angular/compiler-cli." } }, { "id": "CVE-2026-88060", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:694ff20a-3f29-57b2-a4ed-51d2280d51c6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88060 is fixed in version 18.2.14-tuxcare.16 of @angular/compiler-cli." } } ], "dependencies": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.16" } ] }