{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:7c850d92-8699-54bc-9431-3e3f9f128638", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@angular/compiler-cli", "purl": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.17", "type": "library", "bom-ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.17", "version": "18.2.14-tuxcare.17", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-66035", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:5727134e-cb73-5410-ac23-1fe6f6a9953d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 18.2.14-tuxcare.17 of @angular/compiler-cli." } }, { "id": "CVE-2025-66412", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:80189b80-e7c2-5f3f-a6d8-d4c537adabbc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 18.2.14-tuxcare.17 of @angular/compiler-cli." } }, { "id": "CVE-2026-101895", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:45ddb0c1-bd48-50e0-a769-6f407a878e7c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-101895 is fixed in version 18.2.14-tuxcare.17 of @angular/compiler-cli." } }, { "id": "CVE-2026-101896", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:23ce636d-03ec-5dfa-b6c5-5901cb9ec6bf", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101896 affects version 18.2.14-tuxcare.17 of @angular/compiler-cli." } }, { "id": "CVE-2026-22610", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:42f744f4-083f-55f5-b768-67f4477312c6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22610 is fixed in version 18.2.14-tuxcare.17 of @angular/compiler-cli." } }, { "id": "CVE-2026-27970", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:36457bf8-6467-511c-a714-a048663d72a1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27970 is fixed in version 18.2.14-tuxcare.17 of @angular/compiler-cli." } }, { "id": "CVE-2026-32635", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:3739a454-0a32-56ca-b1f4-fb4165d0047f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-32635 is fixed in version 18.2.14-tuxcare.17 of @angular/compiler-cli." } }, { "id": "CVE-2026-46417", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:a4c8d92d-2059-5148-92e4-de51f8032c3d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46417 is fixed in version 18.2.14-tuxcare.17 of @angular/compiler-cli." } }, { "id": "CVE-2026-50168", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:937e1140-2446-5280-be34-3dfeeff9e487", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50168 is fixed in version 18.2.14-tuxcare.17 of @angular/compiler-cli." } }, { "id": "CVE-2026-50169", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:70977a1c-b811-5c3e-b65c-e678cc3bf062", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50169 is fixed in version 18.2.14-tuxcare.17 of @angular/compiler-cli." } }, { "id": "CVE-2026-50170", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:964d1475-ea48-5e08-81ba-a85c072e6639", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50170 is fixed in version 18.2.14-tuxcare.17 of @angular/compiler-cli." } }, { "id": "CVE-2026-50171", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:6547bd28-141f-5d31-884e-1513fcd847bf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50171 is fixed in version 18.2.14-tuxcare.17 of @angular/compiler-cli." } }, { "id": "CVE-2026-50184", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:f587aa16-a896-567f-b093-e0f7ce1b5c8e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50184 is fixed in version 18.2.14-tuxcare.17 of @angular/compiler-cli." } }, { "id": "CVE-2026-50555", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:5d453546-a39e-576f-ae42-18d31c5e72bf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50555 is fixed in version 18.2.14-tuxcare.17 of @angular/compiler-cli." } }, { "id": "CVE-2026-50556", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:e1f1a8c4-96da-5a51-b054-f7375fe26775", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50556 is fixed in version 18.2.14-tuxcare.17 of @angular/compiler-cli." } }, { "id": "CVE-2026-50557", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:b2d7a74c-791a-5364-bcab-030b74059600", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50557 is fixed in version 18.2.14-tuxcare.17 of @angular/compiler-cli." } }, { "id": "CVE-2026-52725", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:273e8837-5b94-5bc3-a11c-fc976b135435", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-52725 is fixed in version 18.2.14-tuxcare.17 of @angular/compiler-cli." } }, { "id": "CVE-2026-54264", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:2124a5de-a262-543f-a971-88f7dd309025", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54264 is fixed in version 18.2.14-tuxcare.17 of @angular/compiler-cli." } }, { "id": "CVE-2026-54265", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:fba2a4af-5e7c-5efa-99f3-0d5819d9c7d7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54265 is fixed in version 18.2.14-tuxcare.17 of @angular/compiler-cli." } }, { "id": "CVE-2026-54266", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:4b800af0-a417-59d5-ad4f-cddc9249c6cc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54266 is fixed in version 18.2.14-tuxcare.17 of @angular/compiler-cli." } }, { "id": "CVE-2026-54267", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:090f872d-8e3c-56cb-8ed0-5a2dba699e8d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54267 is fixed in version 18.2.14-tuxcare.17 of @angular/compiler-cli." } }, { "id": "CVE-2026-54268", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:5d699431-dd26-5da1-aa6d-5bd9ea27ffda", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54268 is fixed in version 18.2.14-tuxcare.17 of @angular/compiler-cli." } }, { "id": "CVE-2026-68945", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:7a6cfbfa-e1d7-527d-a02b-704ed90c445f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-68945 is fixed in version 18.2.14-tuxcare.17 of @angular/compiler-cli." } }, { "id": "CVE-2026-69149", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:3faa8081-de86-504c-add7-fed0dabe1a92", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69149 is fixed in version 18.2.14-tuxcare.17 of @angular/compiler-cli." } }, { "id": "CVE-2026-69151", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:313d6473-78e2-5ab4-9178-7469ded62328", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69151 is fixed in version 18.2.14-tuxcare.17 of @angular/compiler-cli." } }, { "id": "CVE-2026-88056", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:acf08dfa-d715-58d7-9e65-6a932dda09d5", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88056 does not affect version 18.2.14-tuxcare.17 of @angular/compiler-cli. not_affected \u2014 The target version 18.2.14-tuxcare.13 is NOT affected by CVE-2026-88056. The vulnerable code pattern (calling String.prototype.trim() on URL strings before resolution) was never present in this version. The target uses a refactored parseUrl() implementation introduced via commit 49a60f6045 (May 2026) that correctly handles Unicode whitespace by percent-encoding it rather than stripping it, main...", "justification": "code_not_present" } }, { "id": "CVE-2026-88057", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:3771cb86-6df8-5e08-b3b3-bdebc110701a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88057 is fixed in version 18.2.14-tuxcare.17 of @angular/compiler-cli." } }, { "id": "CVE-2026-88058", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:54b7e5f5-5916-510c-a5ec-6608b01f4149", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88058 is fixed in version 18.2.14-tuxcare.17 of @angular/compiler-cli." } }, { "id": "CVE-2026-88059", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:d58260f5-2676-5593-86f9-464c33797861", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88059 is fixed in version 18.2.14-tuxcare.17 of @angular/compiler-cli." } }, { "id": "CVE-2026-88060", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:65633dd9-09c8-5188-80f4-482c1c3e7af2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88060 is fixed in version 18.2.14-tuxcare.17 of @angular/compiler-cli." } } ], "dependencies": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.17" } ] }