{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:412d9f1f-0f33-5e68-971b-01e5fbe2dfc1", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@angular/elements", "purl": "pkg:npm/%40angular/elements@17.3.12-tuxcare.18", "type": "library", "bom-ref": "pkg:npm/%40angular/elements@17.3.12-tuxcare.18", "version": "17.3.12-tuxcare.18", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-59052", "affects": [ { "ref": "pkg:npm/%40angular/elements@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:04239fec-cfb1-5c38-a15e-d27ed695e311", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59052 is fixed in version 17.3.12-tuxcare.18 of @angular/elements." } }, { "id": "CVE-2025-66035", "affects": [ { "ref": "pkg:npm/%40angular/elements@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:2f55e172-c12d-5c7d-a24c-f74b0a2c1637", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 17.3.12-tuxcare.18 of @angular/elements." } }, { "id": "CVE-2025-66412", "affects": [ { "ref": "pkg:npm/%40angular/elements@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:720e1d0d-e2b4-5a29-acc4-563c5c52ba15", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 17.3.12-tuxcare.18 of @angular/elements." } }, { "id": "CVE-2026-101895", "affects": [ { "ref": "pkg:npm/%40angular/elements@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:bb401882-034d-506d-927d-c62f0dea65de", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-101895 is fixed in version 17.3.12-tuxcare.18 of @angular/elements." } }, { "id": "CVE-2026-101896", "affects": [ { "ref": "pkg:npm/%40angular/elements@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:cfcec494-d07d-59e6-9cf7-dc0e0d68bb79", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101896 affects version 17.3.12-tuxcare.18 of @angular/elements." } }, { "id": "CVE-2026-22610", "affects": [ { "ref": "pkg:npm/%40angular/elements@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:92c8c55a-44cf-5230-ad4e-05efc10dff94", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22610 is fixed in version 17.3.12-tuxcare.18 of @angular/elements." } }, { "id": "CVE-2026-27970", "affects": [ { "ref": "pkg:npm/%40angular/elements@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:1f2bca44-0802-54c7-b62e-c04e3da6ae6a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27970 is fixed in version 17.3.12-tuxcare.18 of @angular/elements." } }, { "id": "CVE-2026-32635", "affects": [ { "ref": "pkg:npm/%40angular/elements@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:2f773ba9-9366-5739-b7da-8be494911423", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-32635 is fixed in version 17.3.12-tuxcare.18 of @angular/elements." } }, { "id": "CVE-2026-46417", "affects": [ { "ref": "pkg:npm/%40angular/elements@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:c4d40ef7-b62c-5fc4-86be-99342662eb02", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46417 is fixed in version 17.3.12-tuxcare.18 of @angular/elements." } }, { "id": "CVE-2026-50168", "affects": [ { "ref": "pkg:npm/%40angular/elements@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:b3015117-de0e-50a8-b17f-1bc01ef1f5f6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50168 is fixed in version 17.3.12-tuxcare.18 of @angular/elements." } }, { "id": "CVE-2026-50169", "affects": [ { "ref": "pkg:npm/%40angular/elements@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:698ccffa-0c99-5c48-9704-b62e8c7e3176", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50169 is fixed in version 17.3.12-tuxcare.18 of @angular/elements." } }, { "id": "CVE-2026-50170", "affects": [ { "ref": "pkg:npm/%40angular/elements@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:dad6334a-231c-5a6e-8889-e9c7f161302b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50170 is fixed in version 17.3.12-tuxcare.18 of @angular/elements." } }, { "id": "CVE-2026-50171", "affects": [ { "ref": "pkg:npm/%40angular/elements@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:6112fa1e-dd8d-5513-8d32-c0c4c027f539", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50171 is fixed in version 17.3.12-tuxcare.18 of @angular/elements." } }, { "id": "CVE-2026-50184", "affects": [ { "ref": "pkg:npm/%40angular/elements@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:de1258f5-bbe8-5b5a-a640-bd34a22f605d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50184 is fixed in version 17.3.12-tuxcare.18 of @angular/elements." } }, { "id": "CVE-2026-50555", "affects": [ { "ref": "pkg:npm/%40angular/elements@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:c4c885ed-d87d-56da-9971-7c1095705189", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50555 is fixed in version 17.3.12-tuxcare.18 of @angular/elements." } }, { "id": "CVE-2026-50556", "affects": [ { "ref": "pkg:npm/%40angular/elements@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:de8e0f51-a61a-5ef6-8b8a-a720f79b0988", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50556 is fixed in version 17.3.12-tuxcare.18 of @angular/elements." } }, { "id": "CVE-2026-50557", "affects": [ { "ref": "pkg:npm/%40angular/elements@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:f8b23c8d-749a-506e-a11a-0252b2ce84d7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50557 is fixed in version 17.3.12-tuxcare.18 of @angular/elements." } }, { "id": "CVE-2026-52725", "affects": [ { "ref": "pkg:npm/%40angular/elements@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:869590d7-1eeb-53a8-b2ea-cbad3c80350a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-52725 is fixed in version 17.3.12-tuxcare.18 of @angular/elements." } }, { "id": "CVE-2026-54264", "affects": [ { "ref": "pkg:npm/%40angular/elements@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:0de44327-88a1-5416-b9e9-a1cb6c4a6211", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54264 is fixed in version 17.3.12-tuxcare.18 of @angular/elements." } }, { "id": "CVE-2026-54265", "affects": [ { "ref": "pkg:npm/%40angular/elements@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:316f5fcd-fb10-5f27-857e-fe437bcd71c0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54265 is fixed in version 17.3.12-tuxcare.18 of @angular/elements." } }, { "id": "CVE-2026-54266", "affects": [ { "ref": "pkg:npm/%40angular/elements@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:c1ba53bf-5236-573d-885c-bc7428b48792", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54266 is fixed in version 17.3.12-tuxcare.18 of @angular/elements." } }, { "id": "CVE-2026-54267", "affects": [ { "ref": "pkg:npm/%40angular/elements@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:2400ea7a-d8ef-5515-a734-a770ad931dd6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54267 is fixed in version 17.3.12-tuxcare.18 of @angular/elements." } }, { "id": "CVE-2026-54268", "affects": [ { "ref": "pkg:npm/%40angular/elements@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:eece4384-2889-50b0-ac40-d2b3a986a462", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54268 is fixed in version 17.3.12-tuxcare.18 of @angular/elements." } }, { "id": "CVE-2026-68945", "affects": [ { "ref": "pkg:npm/%40angular/elements@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:fc304850-327d-5626-b292-3a0a32a20125", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-68945 is fixed in version 17.3.12-tuxcare.18 of @angular/elements." } }, { "id": "CVE-2026-69149", "affects": [ { "ref": "pkg:npm/%40angular/elements@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:4a77b171-c24f-5129-9c72-8b038e36d57a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69149 is fixed in version 17.3.12-tuxcare.18 of @angular/elements." } }, { "id": "CVE-2026-69151", "affects": [ { "ref": "pkg:npm/%40angular/elements@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:7024a55d-be8e-557b-8050-f8b588adf93b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69151 is fixed in version 17.3.12-tuxcare.18 of @angular/elements." } }, { "id": "CVE-2026-88056", "affects": [ { "ref": "pkg:npm/%40angular/elements@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:87224f4a-e6cc-5abf-8eaf-5b9dd2009813", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88056 does not affect version 17.3.12-tuxcare.18 of @angular/elements. not_affected \u2014 Version 17.3.12 is not affected by CVE-2026-88056. The vulnerability involves String.prototype.trim() being applied during URL resolution in Angular's platform-server, converting validated same-origin URLs with Unicode whitespace into cross-origin protocol-relative URLs, leading to SSRF. This vulnerable code pattern was introduced in newer Angular versions (v20+) and does not exist in version 1...", "justification": "code_not_present" } }, { "id": "CVE-2026-88057", "affects": [ { "ref": "pkg:npm/%40angular/elements@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:f6135d19-1b1b-5579-8d4d-a9ff2f08f0cf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88057 is fixed in version 17.3.12-tuxcare.18 of @angular/elements." } }, { "id": "CVE-2026-88058", "affects": [ { "ref": "pkg:npm/%40angular/elements@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:d0256fc0-f203-5344-8ae9-04c04def6f64", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88058 is fixed in version 17.3.12-tuxcare.18 of @angular/elements." } }, { "id": "CVE-2026-88059", "affects": [ { "ref": "pkg:npm/%40angular/elements@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:6153e70e-5219-5d67-8ec7-a76e5a619831", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88059 is fixed in version 17.3.12-tuxcare.18 of @angular/elements." } }, { "id": "CVE-2026-88060", "affects": [ { "ref": "pkg:npm/%40angular/elements@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:cef1530f-e540-5a0f-a815-65edcadb9563", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88060 is fixed in version 17.3.12-tuxcare.18 of @angular/elements." } } ], "dependencies": [ { "ref": "pkg:npm/%40angular/elements@17.3.12-tuxcare.18" } ] }