{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:23554aa1-f117-5ec1-9282-81645ae43066", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@angular/forms", "purl": "pkg:npm/%40angular/forms@17.3.12-tuxcare.18", "type": "library", "bom-ref": "pkg:npm/%40angular/forms@17.3.12-tuxcare.18", "version": "17.3.12-tuxcare.18", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-59052", "affects": [ { "ref": "pkg:npm/%40angular/forms@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:e5a1d9c5-f116-5083-944b-e99dfa01a9ef", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59052 is fixed in version 17.3.12-tuxcare.18 of @angular/forms." } }, { "id": "CVE-2025-66035", "affects": [ { "ref": "pkg:npm/%40angular/forms@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:408cfcaf-8323-5264-85bb-9ba826f8639b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 17.3.12-tuxcare.18 of @angular/forms." } }, { "id": "CVE-2025-66412", "affects": [ { "ref": "pkg:npm/%40angular/forms@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:48747f53-992e-54ca-98e8-565ab1372396", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 17.3.12-tuxcare.18 of @angular/forms." } }, { "id": "CVE-2026-101895", "affects": [ { "ref": "pkg:npm/%40angular/forms@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:87ab1d71-6757-52c4-ad27-0923a813e501", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-101895 is fixed in version 17.3.12-tuxcare.18 of @angular/forms." } }, { "id": "CVE-2026-101896", "affects": [ { "ref": "pkg:npm/%40angular/forms@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:d1dfac1e-e55a-5601-bd7f-07e04f239ea2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101896 affects version 17.3.12-tuxcare.18 of @angular/forms." } }, { "id": "CVE-2026-22610", "affects": [ { "ref": "pkg:npm/%40angular/forms@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:b352ee01-ff84-5046-a3b7-0593ff05ad20", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22610 is fixed in version 17.3.12-tuxcare.18 of @angular/forms." } }, { "id": "CVE-2026-27970", "affects": [ { "ref": "pkg:npm/%40angular/forms@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:101a40d6-4ee0-50d6-9d0a-139d68916218", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27970 is fixed in version 17.3.12-tuxcare.18 of @angular/forms." } }, { "id": "CVE-2026-32635", "affects": [ { "ref": "pkg:npm/%40angular/forms@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:431ba1b2-1526-5fae-afb4-5e51edfe06b3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-32635 is fixed in version 17.3.12-tuxcare.18 of @angular/forms." } }, { "id": "CVE-2026-46417", "affects": [ { "ref": "pkg:npm/%40angular/forms@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:61bbae70-5989-5a99-b55e-5faaa8998605", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46417 is fixed in version 17.3.12-tuxcare.18 of @angular/forms." } }, { "id": "CVE-2026-50168", "affects": [ { "ref": "pkg:npm/%40angular/forms@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:e8b0d6d4-3722-5509-a15a-d454050ef921", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50168 is fixed in version 17.3.12-tuxcare.18 of @angular/forms." } }, { "id": "CVE-2026-50169", "affects": [ { "ref": "pkg:npm/%40angular/forms@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:29cb2071-1dfe-55ed-a31b-c062f34bdf88", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50169 is fixed in version 17.3.12-tuxcare.18 of @angular/forms." } }, { "id": "CVE-2026-50170", "affects": [ { "ref": "pkg:npm/%40angular/forms@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:de804665-784a-59ea-9a77-7f456afd64eb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50170 is fixed in version 17.3.12-tuxcare.18 of @angular/forms." } }, { "id": "CVE-2026-50171", "affects": [ { "ref": "pkg:npm/%40angular/forms@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:0603657d-be0d-5fb6-b973-8ae55135b838", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50171 is fixed in version 17.3.12-tuxcare.18 of @angular/forms." } }, { "id": "CVE-2026-50184", "affects": [ { "ref": "pkg:npm/%40angular/forms@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:41ba9ffe-9fd8-52e0-9a8d-55b4f4d9b998", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50184 is fixed in version 17.3.12-tuxcare.18 of @angular/forms." } }, { "id": "CVE-2026-50555", "affects": [ { "ref": "pkg:npm/%40angular/forms@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:fbca4d5d-6667-5d94-8c2a-0beeb472f811", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50555 is fixed in version 17.3.12-tuxcare.18 of @angular/forms." } }, { "id": "CVE-2026-50556", "affects": [ { "ref": "pkg:npm/%40angular/forms@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:e83b52bd-29ad-58ab-92cd-afa42216b0b1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50556 is fixed in version 17.3.12-tuxcare.18 of @angular/forms." } }, { "id": "CVE-2026-50557", "affects": [ { "ref": "pkg:npm/%40angular/forms@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:458cb3be-a5b9-59c5-9c8b-eff7af6bd841", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50557 is fixed in version 17.3.12-tuxcare.18 of @angular/forms." } }, { "id": "CVE-2026-52725", "affects": [ { "ref": "pkg:npm/%40angular/forms@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:c4823530-bd0b-5246-883c-9259c4fffbe9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-52725 is fixed in version 17.3.12-tuxcare.18 of @angular/forms." } }, { "id": "CVE-2026-54264", "affects": [ { "ref": "pkg:npm/%40angular/forms@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:020a8d2a-8be7-58f3-bb74-8daffb228134", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54264 is fixed in version 17.3.12-tuxcare.18 of @angular/forms." } }, { "id": "CVE-2026-54265", "affects": [ { "ref": "pkg:npm/%40angular/forms@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:e2c21c3c-6bf3-5220-ad10-e6f8de1f087d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54265 is fixed in version 17.3.12-tuxcare.18 of @angular/forms." } }, { "id": "CVE-2026-54266", "affects": [ { "ref": "pkg:npm/%40angular/forms@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:48af8c4d-1bab-5c3a-805e-c0def072748a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54266 is fixed in version 17.3.12-tuxcare.18 of @angular/forms." } }, { "id": "CVE-2026-54267", "affects": [ { "ref": "pkg:npm/%40angular/forms@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:75c0d3bc-234d-5254-867d-20335607a2b0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54267 is fixed in version 17.3.12-tuxcare.18 of @angular/forms." } }, { "id": "CVE-2026-54268", "affects": [ { "ref": "pkg:npm/%40angular/forms@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:4cfe6ef6-896f-51d2-8537-6553529220d9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54268 is fixed in version 17.3.12-tuxcare.18 of @angular/forms." } }, { "id": "CVE-2026-68945", "affects": [ { "ref": "pkg:npm/%40angular/forms@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:25f64f48-372d-56cd-9376-67092f3e390e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-68945 is fixed in version 17.3.12-tuxcare.18 of @angular/forms." } }, { "id": "CVE-2026-69149", "affects": [ { "ref": "pkg:npm/%40angular/forms@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:9ecba12e-ad6e-58e4-b0f2-b33de1709822", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69149 is fixed in version 17.3.12-tuxcare.18 of @angular/forms." } }, { "id": "CVE-2026-69151", "affects": [ { "ref": "pkg:npm/%40angular/forms@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:b4997b71-7519-5946-8bfd-3079ee365f33", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69151 is fixed in version 17.3.12-tuxcare.18 of @angular/forms." } }, { "id": "CVE-2026-88056", "affects": [ { "ref": "pkg:npm/%40angular/forms@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:d3094285-69d4-53b6-8a07-2b573d6a498b", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88056 does not affect version 17.3.12-tuxcare.18 of @angular/forms. not_affected \u2014 Version 17.3.12 is not affected by CVE-2026-88056. The vulnerability involves String.prototype.trim() being applied during URL resolution in Angular's platform-server, converting validated same-origin URLs with Unicode whitespace into cross-origin protocol-relative URLs, leading to SSRF. This vulnerable code pattern was introduced in newer Angular versions (v20+) and does not exist in version 1...", "justification": "code_not_present" } }, { "id": "CVE-2026-88057", "affects": [ { "ref": "pkg:npm/%40angular/forms@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:01fd9193-0c98-5fe8-ad30-2f564a5338d6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88057 is fixed in version 17.3.12-tuxcare.18 of @angular/forms." } }, { "id": "CVE-2026-88058", "affects": [ { "ref": "pkg:npm/%40angular/forms@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:c2f3e379-799b-5306-b748-30770e3f215f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88058 is fixed in version 17.3.12-tuxcare.18 of @angular/forms." } }, { "id": "CVE-2026-88059", "affects": [ { "ref": "pkg:npm/%40angular/forms@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:74b61cb8-4f00-533d-bd7e-952580ad75f6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88059 is fixed in version 17.3.12-tuxcare.18 of @angular/forms." } }, { "id": "CVE-2026-88060", "affects": [ { "ref": "pkg:npm/%40angular/forms@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:301239e5-dd48-57cc-a72b-d15be4d851fb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88060 is fixed in version 17.3.12-tuxcare.18 of @angular/forms." } } ], "dependencies": [ { "ref": "pkg:npm/%40angular/forms@17.3.12-tuxcare.18" } ] }