{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:78e5b7ee-2a12-5a6f-a9fd-e391a17cd9b4", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@angular/elements", "purl": "pkg:npm/%40angular/elements@17.3.12-tuxcare.17", "type": "library", "bom-ref": "pkg:npm/%40angular/elements@17.3.12-tuxcare.17", "version": "17.3.12-tuxcare.17", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-59052", "affects": [ { "ref": "pkg:npm/%40angular/elements@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:e375feee-a217-5b6e-9a44-77dfabec638b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59052 is fixed in version 17.3.12-tuxcare.17 of @angular/elements." } }, { "id": "CVE-2025-66035", "affects": [ { "ref": "pkg:npm/%40angular/elements@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:95488f79-f602-5929-9b5c-52af6d60cdc5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 17.3.12-tuxcare.17 of @angular/elements." } }, { "id": "CVE-2025-66412", "affects": [ { "ref": "pkg:npm/%40angular/elements@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:fb7446e2-44af-5aef-9f39-d098a655bd69", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 17.3.12-tuxcare.17 of @angular/elements." } }, { "id": "CVE-2026-101895", "affects": [ { "ref": "pkg:npm/%40angular/elements@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:497b5489-ec42-5352-a1c3-11ae7ccd29ee", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101895 affects version 17.3.12-tuxcare.17 of @angular/elements, and is fixed in 17.3.12-tuxcare.18." } }, { "id": "CVE-2026-101896", "affects": [ { "ref": "pkg:npm/%40angular/elements@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:d9803e8d-031b-5724-ac0c-59df5f357db3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101896 affects version 17.3.12-tuxcare.17 of @angular/elements." } }, { "id": "CVE-2026-22610", "affects": [ { "ref": "pkg:npm/%40angular/elements@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:b0546203-4ff5-5453-b7d9-8a3e931ca9c2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22610 is fixed in version 17.3.12-tuxcare.17 of @angular/elements." } }, { "id": "CVE-2026-27970", "affects": [ { "ref": "pkg:npm/%40angular/elements@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:41050abc-d28d-54fd-b484-064c380a5d91", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27970 is fixed in version 17.3.12-tuxcare.17 of @angular/elements." } }, { "id": "CVE-2026-32635", "affects": [ { "ref": "pkg:npm/%40angular/elements@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:2e4d7c97-b6db-5a22-a2dd-2c4c1f333769", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-32635 is fixed in version 17.3.12-tuxcare.17 of @angular/elements." } }, { "id": "CVE-2026-46417", "affects": [ { "ref": "pkg:npm/%40angular/elements@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:5a4c4eaf-5cab-5da2-9bfa-0956f559d0f0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46417 is fixed in version 17.3.12-tuxcare.17 of @angular/elements." } }, { "id": "CVE-2026-50168", "affects": [ { "ref": "pkg:npm/%40angular/elements@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:3d1d7d83-6fc5-5584-ad06-4de4f7d98510", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50168 is fixed in version 17.3.12-tuxcare.17 of @angular/elements." } }, { "id": "CVE-2026-50169", "affects": [ { "ref": "pkg:npm/%40angular/elements@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:cdf42aa2-501d-5665-8290-6a282946ba68", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50169 is fixed in version 17.3.12-tuxcare.17 of @angular/elements." } }, { "id": "CVE-2026-50170", "affects": [ { "ref": "pkg:npm/%40angular/elements@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:dfeacdc7-6483-5554-9107-3ccf46201824", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50170 is fixed in version 17.3.12-tuxcare.17 of @angular/elements." } }, { "id": "CVE-2026-50171", "affects": [ { "ref": "pkg:npm/%40angular/elements@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:30406bef-95d1-54d5-a0e2-b9d0514c7ecb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50171 is fixed in version 17.3.12-tuxcare.17 of @angular/elements." } }, { "id": "CVE-2026-50184", "affects": [ { "ref": "pkg:npm/%40angular/elements@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:70cb67a5-eae4-5612-acea-7e267a43e335", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50184 is fixed in version 17.3.12-tuxcare.17 of @angular/elements." } }, { "id": "CVE-2026-50555", "affects": [ { "ref": "pkg:npm/%40angular/elements@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:56d25338-9f1e-5f58-bb8b-1e4bb62e7259", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50555 is fixed in version 17.3.12-tuxcare.17 of @angular/elements." } }, { "id": "CVE-2026-50556", "affects": [ { "ref": "pkg:npm/%40angular/elements@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:48e634ce-4473-588e-a843-6490c938e7ed", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50556 is fixed in version 17.3.12-tuxcare.17 of @angular/elements." } }, { "id": "CVE-2026-50557", "affects": [ { "ref": "pkg:npm/%40angular/elements@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:4016a635-c860-5789-a8e8-9fec7c5c9325", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50557 is fixed in version 17.3.12-tuxcare.17 of @angular/elements." } }, { "id": "CVE-2026-52725", "affects": [ { "ref": "pkg:npm/%40angular/elements@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:18727807-640a-5371-a006-853014e80c1e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-52725 is fixed in version 17.3.12-tuxcare.17 of @angular/elements." } }, { "id": "CVE-2026-54264", "affects": [ { "ref": "pkg:npm/%40angular/elements@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:dce98685-c632-5798-aee9-0e7cacd3addf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54264 is fixed in version 17.3.12-tuxcare.17 of @angular/elements." } }, { "id": "CVE-2026-54265", "affects": [ { "ref": "pkg:npm/%40angular/elements@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:a29f13ef-389c-5d5d-8116-df181b651589", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54265 is fixed in version 17.3.12-tuxcare.17 of @angular/elements." } }, { "id": "CVE-2026-54266", "affects": [ { "ref": "pkg:npm/%40angular/elements@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:30e35ff8-d733-5f71-88e6-521abf191d82", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54266 is fixed in version 17.3.12-tuxcare.17 of @angular/elements." } }, { "id": "CVE-2026-54267", "affects": [ { "ref": "pkg:npm/%40angular/elements@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:4722b2b6-b7cd-5b0c-a742-b838cb92d642", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54267 is fixed in version 17.3.12-tuxcare.17 of @angular/elements." } }, { "id": "CVE-2026-54268", "affects": [ { "ref": "pkg:npm/%40angular/elements@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:fafee055-2ccb-54c0-a155-110b0ea5bf79", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54268 is fixed in version 17.3.12-tuxcare.17 of @angular/elements." } }, { "id": "CVE-2026-68945", "affects": [ { "ref": "pkg:npm/%40angular/elements@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:18dabddc-271e-5326-aa9a-21e53af0dc4a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-68945 is fixed in version 17.3.12-tuxcare.17 of @angular/elements." } }, { "id": "CVE-2026-69149", "affects": [ { "ref": "pkg:npm/%40angular/elements@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:81d0c11d-ba37-53ed-b06d-9144c69bc918", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69149 is fixed in version 17.3.12-tuxcare.17 of @angular/elements." } }, { "id": "CVE-2026-69151", "affects": [ { "ref": "pkg:npm/%40angular/elements@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:ae700ab4-0946-5fb7-afdc-c7411694d491", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69151 is fixed in version 17.3.12-tuxcare.17 of @angular/elements." } }, { "id": "CVE-2026-88056", "affects": [ { "ref": "pkg:npm/%40angular/elements@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:66c4c99a-3f31-5f79-80dd-401b89e0fd45", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88056 does not affect version 17.3.12-tuxcare.17 of @angular/elements. not_affected \u2014 Version 17.3.12 is not affected by CVE-2026-88056. The vulnerability involves String.prototype.trim() being applied during URL resolution in Angular's platform-server, converting validated same-origin URLs with Unicode whitespace into cross-origin protocol-relative URLs, leading to SSRF. This vulnerable code pattern was introduced in newer Angular versions (v20+) and does not exist in version 1...", "justification": "code_not_present" } }, { "id": "CVE-2026-88057", "affects": [ { "ref": "pkg:npm/%40angular/elements@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:ace8fede-09e8-5f95-bec7-92867e5a320d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88057 is fixed in version 17.3.12-tuxcare.17 of @angular/elements." } }, { "id": "CVE-2026-88058", "affects": [ { "ref": "pkg:npm/%40angular/elements@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:e8b01c0f-24cc-5a33-b2de-95ecc154cf97", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88058 is fixed in version 17.3.12-tuxcare.17 of @angular/elements." } }, { "id": "CVE-2026-88059", "affects": [ { "ref": "pkg:npm/%40angular/elements@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:5f7e27a4-1c90-5b3a-8721-11b4bf0bde50", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88059 is fixed in version 17.3.12-tuxcare.17 of @angular/elements." } }, { "id": "CVE-2026-88060", "affects": [ { "ref": "pkg:npm/%40angular/elements@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:fa964e0c-6a9e-534e-b12e-772a39b019bf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88060 is fixed in version 17.3.12-tuxcare.17 of @angular/elements." } } ], "dependencies": [ { "ref": "pkg:npm/%40angular/elements@17.3.12-tuxcare.17" } ] }