{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:bab44425-8891-531d-8b05-9f0f538be788", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@angular/localize", "purl": "pkg:npm/%40angular/localize@17.3.12-tuxcare.18", "type": "library", "bom-ref": "pkg:npm/%40angular/localize@17.3.12-tuxcare.18", "version": "17.3.12-tuxcare.18", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-59052", "affects": [ { "ref": "pkg:npm/%40angular/localize@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:a9626bad-c4f5-50f4-9256-d05931a96aa2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59052 is fixed in version 17.3.12-tuxcare.18 of @angular/localize." } }, { "id": "CVE-2025-66035", "affects": [ { "ref": "pkg:npm/%40angular/localize@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:5e2f36b2-47d0-577e-8b56-50049357b779", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 17.3.12-tuxcare.18 of @angular/localize." } }, { "id": "CVE-2025-66412", "affects": [ { "ref": "pkg:npm/%40angular/localize@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:160490db-bd31-51dc-ba4c-3d8d90f54772", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 17.3.12-tuxcare.18 of @angular/localize." } }, { "id": "CVE-2026-101895", "affects": [ { "ref": "pkg:npm/%40angular/localize@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:d364fcb1-2d4c-5a5a-bc10-c98aa6a2f5e4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-101895 is fixed in version 17.3.12-tuxcare.18 of @angular/localize." } }, { "id": "CVE-2026-101896", "affects": [ { "ref": "pkg:npm/%40angular/localize@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:ba9e10e9-8ebf-5efb-9c75-cbf51dc6cf0f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101896 affects version 17.3.12-tuxcare.18 of @angular/localize." } }, { "id": "CVE-2026-22610", "affects": [ { "ref": "pkg:npm/%40angular/localize@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:67dd5010-4253-5e60-b13e-2cea3d6cb809", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22610 is fixed in version 17.3.12-tuxcare.18 of @angular/localize." } }, { "id": "CVE-2026-27970", "affects": [ { "ref": "pkg:npm/%40angular/localize@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:0df522a7-6787-543e-85bd-7836f6e51161", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27970 is fixed in version 17.3.12-tuxcare.18 of @angular/localize." } }, { "id": "CVE-2026-32635", "affects": [ { "ref": "pkg:npm/%40angular/localize@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:e9b35a0b-c3da-5dcf-bf69-3c044a5715d7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-32635 is fixed in version 17.3.12-tuxcare.18 of @angular/localize." } }, { "id": "CVE-2026-46417", "affects": [ { "ref": "pkg:npm/%40angular/localize@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:a5767f4e-cc94-53b8-be38-5f56f358514d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46417 is fixed in version 17.3.12-tuxcare.18 of @angular/localize." } }, { "id": "CVE-2026-50168", "affects": [ { "ref": "pkg:npm/%40angular/localize@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:3e9f3d6e-f49f-5f2d-8009-8a5802df1d37", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50168 is fixed in version 17.3.12-tuxcare.18 of @angular/localize." } }, { "id": "CVE-2026-50169", "affects": [ { "ref": "pkg:npm/%40angular/localize@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:da124873-6733-5667-8769-0b129261a45f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50169 is fixed in version 17.3.12-tuxcare.18 of @angular/localize." } }, { "id": "CVE-2026-50170", "affects": [ { "ref": "pkg:npm/%40angular/localize@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:633ddb28-5b91-509b-96fc-d57e6177849b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50170 is fixed in version 17.3.12-tuxcare.18 of @angular/localize." } }, { "id": "CVE-2026-50171", "affects": [ { "ref": "pkg:npm/%40angular/localize@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:23ce5f11-ee8f-5372-a7b8-ccb793b3df58", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50171 is fixed in version 17.3.12-tuxcare.18 of @angular/localize." } }, { "id": "CVE-2026-50184", "affects": [ { "ref": "pkg:npm/%40angular/localize@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:d1f32781-a7aa-50f9-a4b9-c877573a4212", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50184 is fixed in version 17.3.12-tuxcare.18 of @angular/localize." } }, { "id": "CVE-2026-50555", "affects": [ { "ref": "pkg:npm/%40angular/localize@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:2ed025a4-63f1-549c-a7a3-74c8fa6a7a79", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50555 is fixed in version 17.3.12-tuxcare.18 of @angular/localize." } }, { "id": "CVE-2026-50556", "affects": [ { "ref": "pkg:npm/%40angular/localize@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:ffb330ac-4d17-54d0-b79f-6c313568b42e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50556 is fixed in version 17.3.12-tuxcare.18 of @angular/localize." } }, { "id": "CVE-2026-50557", "affects": [ { "ref": "pkg:npm/%40angular/localize@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:b8019340-8338-5a50-a44c-dd54dd178bf4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50557 is fixed in version 17.3.12-tuxcare.18 of @angular/localize." } }, { "id": "CVE-2026-52725", "affects": [ { "ref": "pkg:npm/%40angular/localize@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:3a45a525-4cd6-5dfb-92bc-5d836d5344e4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-52725 is fixed in version 17.3.12-tuxcare.18 of @angular/localize." } }, { "id": "CVE-2026-54264", "affects": [ { "ref": "pkg:npm/%40angular/localize@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:4ebc1d24-99e2-56c8-969e-397fc7bdc890", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54264 is fixed in version 17.3.12-tuxcare.18 of @angular/localize." } }, { "id": "CVE-2026-54265", "affects": [ { "ref": "pkg:npm/%40angular/localize@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:e321efd2-5212-567a-ae6e-a8bcbd283c3a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54265 is fixed in version 17.3.12-tuxcare.18 of @angular/localize." } }, { "id": "CVE-2026-54266", "affects": [ { "ref": "pkg:npm/%40angular/localize@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:b9f166a2-072a-5b85-927d-9d14ca5e886f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54266 is fixed in version 17.3.12-tuxcare.18 of @angular/localize." } }, { "id": "CVE-2026-54267", "affects": [ { "ref": "pkg:npm/%40angular/localize@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:691e78ca-438d-56e1-a5f4-04f1eaa6efa9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54267 is fixed in version 17.3.12-tuxcare.18 of @angular/localize." } }, { "id": "CVE-2026-54268", "affects": [ { "ref": "pkg:npm/%40angular/localize@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:78027c7a-5baf-5a4e-9e96-01db2b937eec", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54268 is fixed in version 17.3.12-tuxcare.18 of @angular/localize." } }, { "id": "CVE-2026-68945", "affects": [ { "ref": "pkg:npm/%40angular/localize@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:8a2b625d-7519-5c1e-9c46-764a82839694", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-68945 is fixed in version 17.3.12-tuxcare.18 of @angular/localize." } }, { "id": "CVE-2026-69149", "affects": [ { "ref": "pkg:npm/%40angular/localize@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:cb6f57f5-d7c6-5616-b871-c7d6e53ee3a1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69149 is fixed in version 17.3.12-tuxcare.18 of @angular/localize." } }, { "id": "CVE-2026-69151", "affects": [ { "ref": "pkg:npm/%40angular/localize@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:cab7f617-a081-58f1-9516-8c5ec05f37e5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69151 is fixed in version 17.3.12-tuxcare.18 of @angular/localize." } }, { "id": "CVE-2026-88056", "affects": [ { "ref": "pkg:npm/%40angular/localize@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:3122263e-f316-549d-83f9-bc21d531d3b5", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88056 does not affect version 17.3.12-tuxcare.18 of @angular/localize. not_affected \u2014 Version 17.3.12 is not affected by CVE-2026-88056. The vulnerability involves String.prototype.trim() being applied during URL resolution in Angular's platform-server, converting validated same-origin URLs with Unicode whitespace into cross-origin protocol-relative URLs, leading to SSRF. This vulnerable code pattern was introduced in newer Angular versions (v20+) and does not exist in version 1...", "justification": "code_not_present" } }, { "id": "CVE-2026-88057", "affects": [ { "ref": "pkg:npm/%40angular/localize@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:7d97f790-ce8a-5423-89ee-fc940a2f34b6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88057 is fixed in version 17.3.12-tuxcare.18 of @angular/localize." } }, { "id": "CVE-2026-88058", "affects": [ { "ref": "pkg:npm/%40angular/localize@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:89fd84ed-a08e-5a73-9455-4dde8d185eef", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88058 is fixed in version 17.3.12-tuxcare.18 of @angular/localize." } }, { "id": "CVE-2026-88059", "affects": [ { "ref": "pkg:npm/%40angular/localize@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:a252e3d1-ca4e-5e39-b9cf-2ff74d3f15ba", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88059 is fixed in version 17.3.12-tuxcare.18 of @angular/localize." } }, { "id": "CVE-2026-88060", "affects": [ { "ref": "pkg:npm/%40angular/localize@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:1b053b80-b208-5779-88a7-9b7930a5d93f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88060 is fixed in version 17.3.12-tuxcare.18 of @angular/localize." } } ], "dependencies": [ { "ref": "pkg:npm/%40angular/localize@17.3.12-tuxcare.18" } ] }