{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:c1bd06da-ac2a-5416-8e44-7c6454dcef8b", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@angular/compiler", "purl": "pkg:npm/%40angular/compiler@17.3.12-tuxcare.18", "type": "library", "bom-ref": "pkg:npm/%40angular/compiler@17.3.12-tuxcare.18", "version": "17.3.12-tuxcare.18", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-59052", "affects": [ { "ref": "pkg:npm/%40angular/compiler@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:5e65ee2c-df4c-5edd-8549-585a89f0dfbd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59052 is fixed in version 17.3.12-tuxcare.18 of @angular/compiler." } }, { "id": "CVE-2025-66035", "affects": [ { "ref": "pkg:npm/%40angular/compiler@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:43d01775-a6e2-56bf-ab07-fc30580b2fa4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 17.3.12-tuxcare.18 of @angular/compiler." } }, { "id": "CVE-2025-66412", "affects": [ { "ref": "pkg:npm/%40angular/compiler@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:5418f126-8e85-5e67-ba04-20a087801a9c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 17.3.12-tuxcare.18 of @angular/compiler." } }, { "id": "CVE-2026-101895", "affects": [ { "ref": "pkg:npm/%40angular/compiler@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:139566f3-7060-5699-a933-0eb60aa4f869", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-101895 is fixed in version 17.3.12-tuxcare.18 of @angular/compiler." } }, { "id": "CVE-2026-101896", "affects": [ { "ref": "pkg:npm/%40angular/compiler@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:38cab08f-dd48-5769-bc47-27c06a8e4e51", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101896 affects version 17.3.12-tuxcare.18 of @angular/compiler." } }, { "id": "CVE-2026-22610", "affects": [ { "ref": "pkg:npm/%40angular/compiler@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:5a6c3003-ee4c-5780-96e3-8ae3404bc0a1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22610 is fixed in version 17.3.12-tuxcare.18 of @angular/compiler." } }, { "id": "CVE-2026-27970", "affects": [ { "ref": "pkg:npm/%40angular/compiler@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:5268b202-f0b4-5138-bf8c-6391a1f57aa4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27970 is fixed in version 17.3.12-tuxcare.18 of @angular/compiler." } }, { "id": "CVE-2026-32635", "affects": [ { "ref": "pkg:npm/%40angular/compiler@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:9763ad28-b439-51a6-b0fd-5ab4631be940", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-32635 is fixed in version 17.3.12-tuxcare.18 of @angular/compiler." } }, { "id": "CVE-2026-46417", "affects": [ { "ref": "pkg:npm/%40angular/compiler@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:c582f006-a246-5951-ab6d-f47b6c8692c0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46417 is fixed in version 17.3.12-tuxcare.18 of @angular/compiler." } }, { "id": "CVE-2026-50168", "affects": [ { "ref": "pkg:npm/%40angular/compiler@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:d29df2d5-dedf-5e81-99c6-f07864b51b9b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50168 is fixed in version 17.3.12-tuxcare.18 of @angular/compiler." } }, { "id": "CVE-2026-50169", "affects": [ { "ref": "pkg:npm/%40angular/compiler@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:3929831f-7f36-5f54-88a0-cd0bf16676bc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50169 is fixed in version 17.3.12-tuxcare.18 of @angular/compiler." } }, { "id": "CVE-2026-50170", "affects": [ { "ref": "pkg:npm/%40angular/compiler@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:53b5180c-45b3-5ac4-8ca5-b2737bbad97a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50170 is fixed in version 17.3.12-tuxcare.18 of @angular/compiler." } }, { "id": "CVE-2026-50171", "affects": [ { "ref": "pkg:npm/%40angular/compiler@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:3ff8b9ab-54fa-5249-977e-88a50cc52373", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50171 is fixed in version 17.3.12-tuxcare.18 of @angular/compiler." } }, { "id": "CVE-2026-50184", "affects": [ { "ref": "pkg:npm/%40angular/compiler@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:534685da-81f0-5085-828c-2cfd9fbbb09a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50184 is fixed in version 17.3.12-tuxcare.18 of @angular/compiler." } }, { "id": "CVE-2026-50555", "affects": [ { "ref": "pkg:npm/%40angular/compiler@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:8ee5fc4c-f5da-512a-8140-15b27da787b6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50555 is fixed in version 17.3.12-tuxcare.18 of @angular/compiler." } }, { "id": "CVE-2026-50556", "affects": [ { "ref": "pkg:npm/%40angular/compiler@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:acd43cb8-ab5c-545e-aa99-543f027e888b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50556 is fixed in version 17.3.12-tuxcare.18 of @angular/compiler." } }, { "id": "CVE-2026-50557", "affects": [ { "ref": "pkg:npm/%40angular/compiler@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:a5ac2db3-e03b-5c68-9c42-84c76aa9ca69", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50557 is fixed in version 17.3.12-tuxcare.18 of @angular/compiler." } }, { "id": "CVE-2026-52725", "affects": [ { "ref": "pkg:npm/%40angular/compiler@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:6c18fab2-7474-56aa-88da-782ab64d5c24", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-52725 is fixed in version 17.3.12-tuxcare.18 of @angular/compiler." } }, { "id": "CVE-2026-54264", "affects": [ { "ref": "pkg:npm/%40angular/compiler@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:2d445c7f-66bd-5bda-babc-d43312e32fe7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54264 is fixed in version 17.3.12-tuxcare.18 of @angular/compiler." } }, { "id": "CVE-2026-54265", "affects": [ { "ref": "pkg:npm/%40angular/compiler@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:335bfbd1-78d3-5413-9d8f-4e94527e8013", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54265 is fixed in version 17.3.12-tuxcare.18 of @angular/compiler." } }, { "id": "CVE-2026-54266", "affects": [ { "ref": "pkg:npm/%40angular/compiler@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:91fb66c3-6357-513b-b14d-ed0c82d569f0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54266 is fixed in version 17.3.12-tuxcare.18 of @angular/compiler." } }, { "id": "CVE-2026-54267", "affects": [ { "ref": "pkg:npm/%40angular/compiler@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:54d56a6a-6e4a-5df0-85cd-5bfa545fb2ab", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54267 is fixed in version 17.3.12-tuxcare.18 of @angular/compiler." } }, { "id": "CVE-2026-54268", "affects": [ { "ref": "pkg:npm/%40angular/compiler@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:7b200b1b-d775-5748-8603-07714a638cff", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54268 is fixed in version 17.3.12-tuxcare.18 of @angular/compiler." } }, { "id": "CVE-2026-68945", "affects": [ { "ref": "pkg:npm/%40angular/compiler@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:9c4137ef-badc-5a5b-9414-f1f84bf82a3b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-68945 is fixed in version 17.3.12-tuxcare.18 of @angular/compiler." } }, { "id": "CVE-2026-69149", "affects": [ { "ref": "pkg:npm/%40angular/compiler@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:b904bf82-cb8c-51d2-8b5c-e02e518da0e7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69149 is fixed in version 17.3.12-tuxcare.18 of @angular/compiler." } }, { "id": "CVE-2026-69151", "affects": [ { "ref": "pkg:npm/%40angular/compiler@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:d7573a64-6379-5644-8c2a-1dc4ec4adc09", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69151 is fixed in version 17.3.12-tuxcare.18 of @angular/compiler." } }, { "id": "CVE-2026-88056", "affects": [ { "ref": "pkg:npm/%40angular/compiler@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:f294eaff-f68a-5612-8791-477830798412", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88056 does not affect version 17.3.12-tuxcare.18 of @angular/compiler. not_affected \u2014 Version 17.3.12 is not affected by CVE-2026-88056. The vulnerability involves String.prototype.trim() being applied during URL resolution in Angular's platform-server, converting validated same-origin URLs with Unicode whitespace into cross-origin protocol-relative URLs, leading to SSRF. This vulnerable code pattern was introduced in newer Angular versions (v20+) and does not exist in version 1...", "justification": "code_not_present" } }, { "id": "CVE-2026-88057", "affects": [ { "ref": "pkg:npm/%40angular/compiler@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:6e8b2e77-9c31-5033-82b2-587accbc3f6a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88057 is fixed in version 17.3.12-tuxcare.18 of @angular/compiler." } }, { "id": "CVE-2026-88058", "affects": [ { "ref": "pkg:npm/%40angular/compiler@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:3ac3321d-be59-5932-9429-83eb5faf0cce", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88058 is fixed in version 17.3.12-tuxcare.18 of @angular/compiler." } }, { "id": "CVE-2026-88059", "affects": [ { "ref": "pkg:npm/%40angular/compiler@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:e54613ba-afa2-564a-b156-d5e88691a6de", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88059 is fixed in version 17.3.12-tuxcare.18 of @angular/compiler." } }, { "id": "CVE-2026-88060", "affects": [ { "ref": "pkg:npm/%40angular/compiler@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:653a9ced-c1d1-5493-a438-9e59c0ba1440", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88060 is fixed in version 17.3.12-tuxcare.18 of @angular/compiler." } } ], "dependencies": [ { "ref": "pkg:npm/%40angular/compiler@17.3.12-tuxcare.18" } ] }