{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:dd767c9d-c79c-59a0-ab73-35dc4f94b24a", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@angular/language-service", "purl": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.17", "type": "library", "bom-ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.17", "version": "18.2.14-tuxcare.17", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-66035", "affects": [ { "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:dd215c33-3946-56f7-b72b-b2f4298288c2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 18.2.14-tuxcare.17 of @angular/language-service." } }, { "id": "CVE-2025-66412", "affects": [ { "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:08e3e050-7c83-51a0-ba4b-e61d01829322", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 18.2.14-tuxcare.17 of @angular/language-service." } }, { "id": "CVE-2026-101895", "affects": [ { "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:d8beca8a-aecb-541b-a828-85c94fa628f4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-101895 is fixed in version 18.2.14-tuxcare.17 of @angular/language-service." } }, { "id": "CVE-2026-101896", "affects": [ { "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:dbab62ca-c439-53cf-bc09-8e0fb43949ee", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101896 affects version 18.2.14-tuxcare.17 of @angular/language-service." } }, { "id": "CVE-2026-22610", "affects": [ { "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:39cf3fa4-b362-5924-9053-ee2e3ecab8c2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22610 is fixed in version 18.2.14-tuxcare.17 of @angular/language-service." } }, { "id": "CVE-2026-27970", "affects": [ { "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:8e362ce3-6f08-5258-9579-29c8fa7eaae4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27970 is fixed in version 18.2.14-tuxcare.17 of @angular/language-service." } }, { "id": "CVE-2026-32635", "affects": [ { "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:1fcc2b43-b90f-5849-9087-19077833a80c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-32635 is fixed in version 18.2.14-tuxcare.17 of @angular/language-service." } }, { "id": "CVE-2026-46417", "affects": [ { "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:53d4811e-6dee-59dc-b895-37736b82b096", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46417 is fixed in version 18.2.14-tuxcare.17 of @angular/language-service." } }, { "id": "CVE-2026-50168", "affects": [ { "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:5f3e453f-e0a2-5985-959c-a08f1194da2b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50168 is fixed in version 18.2.14-tuxcare.17 of @angular/language-service." } }, { "id": "CVE-2026-50169", "affects": [ { "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:9db212f8-9612-5449-9a48-27127142c9c3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50169 is fixed in version 18.2.14-tuxcare.17 of @angular/language-service." } }, { "id": "CVE-2026-50170", "affects": [ { "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:5f17b4f7-8198-56ae-850b-a1abe71d4d52", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50170 is fixed in version 18.2.14-tuxcare.17 of @angular/language-service." } }, { "id": "CVE-2026-50171", "affects": [ { "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:d621fa28-7de0-5e21-8171-c225bf7cc5dd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50171 is fixed in version 18.2.14-tuxcare.17 of @angular/language-service." } }, { "id": "CVE-2026-50184", "affects": [ { "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:8386dca1-74f0-5a6e-b8d3-39a31ec1cf01", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50184 is fixed in version 18.2.14-tuxcare.17 of @angular/language-service." } }, { "id": "CVE-2026-50555", "affects": [ { "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:cfacff84-0e23-5929-a10c-2f7f3da13c90", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50555 is fixed in version 18.2.14-tuxcare.17 of @angular/language-service." } }, { "id": "CVE-2026-50556", "affects": [ { "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:6ae7cde5-0c3d-5ab4-9abd-31ee02ddf476", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50556 is fixed in version 18.2.14-tuxcare.17 of @angular/language-service." } }, { "id": "CVE-2026-50557", "affects": [ { "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:ffef211d-2a4c-5ec6-9e6b-dc4cfcb47ac2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50557 is fixed in version 18.2.14-tuxcare.17 of @angular/language-service." } }, { "id": "CVE-2026-52725", "affects": [ { "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:3e4bf2bb-fb0c-5e2b-a1d4-009a69fd0527", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-52725 is fixed in version 18.2.14-tuxcare.17 of @angular/language-service." } }, { "id": "CVE-2026-54264", "affects": [ { "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:71a671d3-fb3b-5753-bafc-a90deed21dbc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54264 is fixed in version 18.2.14-tuxcare.17 of @angular/language-service." } }, { "id": "CVE-2026-54265", "affects": [ { "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:0dd14d53-f279-5ad5-bbcc-0303d2ad020a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54265 is fixed in version 18.2.14-tuxcare.17 of @angular/language-service." } }, { "id": "CVE-2026-54266", "affects": [ { "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:ab8d0b2f-6655-58da-a8d2-159bd0a6da55", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54266 is fixed in version 18.2.14-tuxcare.17 of @angular/language-service." } }, { "id": "CVE-2026-54267", "affects": [ { "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:3fafe546-ad1d-5120-bc00-e4b1ed8cc228", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54267 is fixed in version 18.2.14-tuxcare.17 of @angular/language-service." } }, { "id": "CVE-2026-54268", "affects": [ { "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:46a89195-c22b-5471-9607-a8afae6ec687", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54268 is fixed in version 18.2.14-tuxcare.17 of @angular/language-service." } }, { "id": "CVE-2026-68945", "affects": [ { "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:266e6fa8-7a73-5198-b468-3e91407ca8cd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-68945 is fixed in version 18.2.14-tuxcare.17 of @angular/language-service." } }, { "id": "CVE-2026-69149", "affects": [ { "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:61a40c9b-0708-521b-ba47-a52afababb27", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69149 is fixed in version 18.2.14-tuxcare.17 of @angular/language-service." } }, { "id": "CVE-2026-69151", "affects": [ { "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:76fc9560-146d-5854-9dd1-7c58a199b3c6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69151 is fixed in version 18.2.14-tuxcare.17 of @angular/language-service." } }, { "id": "CVE-2026-88056", "affects": [ { "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:f6a8913b-f7b5-5649-892c-5c4e97c9c0ad", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88056 does not affect version 18.2.14-tuxcare.17 of @angular/language-service. not_affected \u2014 The target version 18.2.14-tuxcare.13 is NOT affected by CVE-2026-88056. The vulnerable code pattern (calling String.prototype.trim() on URL strings before resolution) was never present in this version. The target uses a refactored parseUrl() implementation introduced via commit 49a60f6045 (May 2026) that correctly handles Unicode whitespace by percent-encoding it rather than stripping it, main...", "justification": "code_not_present" } }, { "id": "CVE-2026-88057", "affects": [ { "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:51e9a9ad-9d28-54da-aec2-c364323cfbf8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88057 is fixed in version 18.2.14-tuxcare.17 of @angular/language-service." } }, { "id": "CVE-2026-88058", "affects": [ { "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:5a467634-aa2f-583e-84b5-ab9c706fcf87", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88058 is fixed in version 18.2.14-tuxcare.17 of @angular/language-service." } }, { "id": "CVE-2026-88059", "affects": [ { "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:50a4eceb-d40f-5cc0-b8e4-40fa1268446c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88059 is fixed in version 18.2.14-tuxcare.17 of @angular/language-service." } }, { "id": "CVE-2026-88060", "affects": [ { "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:68ef0024-ec02-5201-b3c9-a598da7412be", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88060 is fixed in version 18.2.14-tuxcare.17 of @angular/language-service." } } ], "dependencies": [ { "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.17" } ] }