{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:b388502c-c58b-5ff9-b0ff-baabcc6e2d69", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@angular/forms", "purl": "pkg:npm/%40angular/forms@16.2.11-tuxcare.6", "type": "library", "bom-ref": "pkg:npm/%40angular/forms@16.2.11-tuxcare.6", "version": "16.2.11-tuxcare.6", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-59052", "affects": [ { "ref": "pkg:npm/%40angular/forms@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:23fa88ea-fb17-547a-a5d2-3c341efb1ddc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-59052 affects version 16.2.11-tuxcare.6 of @angular/forms." } }, { "id": "CVE-2025-66035", "affects": [ { "ref": "pkg:npm/%40angular/forms@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:788c0108-38f0-50fd-bf5e-2a246d33d59d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 16.2.11-tuxcare.6 of @angular/forms." } }, { "id": "CVE-2025-66412", "affects": [ { "ref": "pkg:npm/%40angular/forms@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:95da95e6-6a29-5d08-8559-11420a255dc0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 16.2.11-tuxcare.6 of @angular/forms." } }, { "id": "CVE-2026-101895", "affects": [ { "ref": "pkg:npm/%40angular/forms@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:a3e181a8-ceba-5bd9-bb49-0b1baa4f537e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-101895 is fixed in version 16.2.11-tuxcare.6 of @angular/forms." } }, { "id": "CVE-2026-101896", "affects": [ { "ref": "pkg:npm/%40angular/forms@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:36843d96-0008-5374-9533-33354c3e3f34", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101896 affects version 16.2.11-tuxcare.6 of @angular/forms." } }, { "id": "CVE-2026-22610", "affects": [ { "ref": "pkg:npm/%40angular/forms@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:a8462426-76cb-5568-8802-fe54de6a9330", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22610 is fixed in version 16.2.11-tuxcare.6 of @angular/forms." } }, { "id": "CVE-2026-27970", "affects": [ { "ref": "pkg:npm/%40angular/forms@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:98c199b8-a950-5c92-af5d-80ced817a664", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27970 is fixed in version 16.2.11-tuxcare.6 of @angular/forms." } }, { "id": "CVE-2026-41423", "affects": [ { "ref": "pkg:npm/%40angular/forms@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:af7f4aee-5d6a-51d4-a550-82c057b77e40", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41423 is fixed in version 16.2.11-tuxcare.6 of @angular/forms." } }, { "id": "CVE-2026-46417", "affects": [ { "ref": "pkg:npm/%40angular/forms@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:9c3213a2-0d42-532a-8230-72908cdd5aa6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46417 is fixed in version 16.2.11-tuxcare.6 of @angular/forms." } }, { "id": "CVE-2026-50168", "affects": [ { "ref": "pkg:npm/%40angular/forms@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:08384447-a79d-57e8-9503-951d44655f3e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50168 is fixed in version 16.2.11-tuxcare.6 of @angular/forms." } }, { "id": "CVE-2026-50169", "affects": [ { "ref": "pkg:npm/%40angular/forms@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:14897494-0d9f-536b-924d-20ce0dfb3fb5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50169 is fixed in version 16.2.11-tuxcare.6 of @angular/forms." } }, { "id": "CVE-2026-50170", "affects": [ { "ref": "pkg:npm/%40angular/forms@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:827279e1-2a2c-53f3-92c6-29fb99dcf039", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50170 is fixed in version 16.2.11-tuxcare.6 of @angular/forms." } }, { "id": "CVE-2026-50171", "affects": [ { "ref": "pkg:npm/%40angular/forms@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:ddf88c49-2af1-58a3-9832-d520e536bc88", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50171 is fixed in version 16.2.11-tuxcare.6 of @angular/forms." } }, { "id": "CVE-2026-50184", "affects": [ { "ref": "pkg:npm/%40angular/forms@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:1a0ff317-c0ee-5374-a3fc-da9e7e0c038a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50184 is fixed in version 16.2.11-tuxcare.6 of @angular/forms." } }, { "id": "CVE-2026-50555", "affects": [ { "ref": "pkg:npm/%40angular/forms@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:9aae43c1-196c-5d1a-adca-f96b58e3006e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50555 is fixed in version 16.2.11-tuxcare.6 of @angular/forms." } }, { "id": "CVE-2026-50556", "affects": [ { "ref": "pkg:npm/%40angular/forms@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:fa55f3f3-b14b-5270-bfd1-18f9e9183c7f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50556 is fixed in version 16.2.11-tuxcare.6 of @angular/forms." } }, { "id": "CVE-2026-50557", "affects": [ { "ref": "pkg:npm/%40angular/forms@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:baf7d35d-afaa-5f3f-8c56-02f3111b6819", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50557 is fixed in version 16.2.11-tuxcare.6 of @angular/forms." } }, { "id": "CVE-2026-52725", "affects": [ { "ref": "pkg:npm/%40angular/forms@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:b2a405f7-0045-5d42-9d8c-b9fdb30db884", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-52725 is fixed in version 16.2.11-tuxcare.6 of @angular/forms." } }, { "id": "CVE-2026-54264", "affects": [ { "ref": "pkg:npm/%40angular/forms@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:76f2cea7-52f5-5f40-b248-2570e858eadf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54264 is fixed in version 16.2.11-tuxcare.6 of @angular/forms." } }, { "id": "CVE-2026-54265", "affects": [ { "ref": "pkg:npm/%40angular/forms@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:fa9d26c7-ea03-5917-85fe-d73db7f91d31", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54265 is fixed in version 16.2.11-tuxcare.6 of @angular/forms." } }, { "id": "CVE-2026-54266", "affects": [ { "ref": "pkg:npm/%40angular/forms@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:80b1c315-3c07-5590-892d-a1d807f5c7b7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54266 is fixed in version 16.2.11-tuxcare.6 of @angular/forms." } }, { "id": "CVE-2026-54267", "affects": [ { "ref": "pkg:npm/%40angular/forms@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:c5152448-a5f3-5631-880c-9db3c87546d2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54267 is fixed in version 16.2.11-tuxcare.6 of @angular/forms." } }, { "id": "CVE-2026-54268", "affects": [ { "ref": "pkg:npm/%40angular/forms@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:8be91c5c-6c05-57af-a44c-dca66eb18044", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54268 is fixed in version 16.2.11-tuxcare.6 of @angular/forms." } }, { "id": "CVE-2026-68945", "affects": [ { "ref": "pkg:npm/%40angular/forms@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:5f823aa7-138d-5171-a2d3-40443d581e28", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-68945 is fixed in version 16.2.11-tuxcare.6 of @angular/forms." } }, { "id": "CVE-2026-69149", "affects": [ { "ref": "pkg:npm/%40angular/forms@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:f0787140-144e-5eac-99b5-7fdfe4bad5d3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69149 is fixed in version 16.2.11-tuxcare.6 of @angular/forms." } }, { "id": "CVE-2026-69151", "affects": [ { "ref": "pkg:npm/%40angular/forms@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:c5a17e8d-b9f0-5db9-9e33-81fde468a3ec", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69151 is fixed in version 16.2.11-tuxcare.6 of @angular/forms." } }, { "id": "CVE-2026-88056", "affects": [ { "ref": "pkg:npm/%40angular/forms@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:f99dd5a5-3ea8-5b74-b010-67985fb964f6", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88056 does not affect version 16.2.11-tuxcare.6 of @angular/forms. not_affected \u2014 Angular 16.2.11-tuxcare.2 is NOT affected by CVE-2026-88056. The vulnerability requires WHATWG URL validation combined with String.prototype.trim() on URLs during SSR, creating a discrepancy that enables SSRF. While the target uses WHATWG URL parsing (backported in commit c03fbfd7cc for CVE-2026-50168), it does NOT call String.prototype.trim() on URLs. The attack chain is broken at the trim() s...", "justification": "code_not_reachable" } }, { "id": "CVE-2026-88057", "affects": [ { "ref": "pkg:npm/%40angular/forms@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:533d002f-9d10-51d3-9504-1aa8ff98c956", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88057 is fixed in version 16.2.11-tuxcare.6 of @angular/forms." } }, { "id": "CVE-2026-88058", "affects": [ { "ref": "pkg:npm/%40angular/forms@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:ee13bf4f-c878-587e-8fce-cac38cd33c75", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88058 is fixed in version 16.2.11-tuxcare.6 of @angular/forms." } }, { "id": "CVE-2026-88059", "affects": [ { "ref": "pkg:npm/%40angular/forms@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:36a5e77a-b3a5-5677-9db4-7a5f191fa45f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88059 is fixed in version 16.2.11-tuxcare.6 of @angular/forms." } }, { "id": "CVE-2026-88060", "affects": [ { "ref": "pkg:npm/%40angular/forms@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:c3a3c4a0-7a32-59e7-aed4-c14da2a7ead2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88060 is fixed in version 16.2.11-tuxcare.6 of @angular/forms." } } ], "dependencies": [ { "ref": "pkg:npm/%40angular/forms@16.2.11-tuxcare.6" } ] }