{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:e43194bf-631b-55cf-bafe-a0f87c3e22d7", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@angular/localize", "purl": "pkg:npm/%40angular/localize@18.2.14-tuxcare.16", "type": "library", "bom-ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.16", "version": "18.2.14-tuxcare.16", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-66035", "affects": [ { "ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:37c77ad9-d5ae-59ff-aee8-8e564c62cf64", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 18.2.14-tuxcare.16 of @angular/localize." } }, { "id": "CVE-2025-66412", "affects": [ { "ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:2164fd16-bf8b-50b2-a1ba-d814771301dc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 18.2.14-tuxcare.16 of @angular/localize." } }, { "id": "CVE-2026-101895", "affects": [ { "ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:d5374923-84a3-516a-9243-c754c14f185c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101895 affects version 18.2.14-tuxcare.16 of @angular/localize, and is fixed in 18.2.14-tuxcare.17." } }, { "id": "CVE-2026-101896", "affects": [ { "ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:9a23879b-d199-5715-a29f-bfa8c894eeb9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101896 affects version 18.2.14-tuxcare.16 of @angular/localize." } }, { "id": "CVE-2026-22610", "affects": [ { "ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:9b4c47b4-7b2e-5dda-8cd9-1e6692d226b1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22610 is fixed in version 18.2.14-tuxcare.16 of @angular/localize." } }, { "id": "CVE-2026-27970", "affects": [ { "ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:0e5b3aea-5c6b-5bae-ba50-7bf87c599926", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27970 is fixed in version 18.2.14-tuxcare.16 of @angular/localize." } }, { "id": "CVE-2026-32635", "affects": [ { "ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:7e4b80bf-41ba-5761-91e9-ded35b67895e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-32635 is fixed in version 18.2.14-tuxcare.16 of @angular/localize." } }, { "id": "CVE-2026-46417", "affects": [ { "ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:b085404b-5a9c-5968-9be0-1738fa5869e4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46417 is fixed in version 18.2.14-tuxcare.16 of @angular/localize." } }, { "id": "CVE-2026-50168", "affects": [ { "ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:46421d84-dd6d-5738-b905-c27116bfad90", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50168 is fixed in version 18.2.14-tuxcare.16 of @angular/localize." } }, { "id": "CVE-2026-50169", "affects": [ { "ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:5db0a7bd-ab2c-51d9-a4b5-24228591a3ea", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50169 is fixed in version 18.2.14-tuxcare.16 of @angular/localize." } }, { "id": "CVE-2026-50170", "affects": [ { "ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:5c233590-a3bd-5453-8e3b-710c6e990408", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50170 is fixed in version 18.2.14-tuxcare.16 of @angular/localize." } }, { "id": "CVE-2026-50171", "affects": [ { "ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:183f1de2-a569-50f2-8b77-570da758e218", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50171 is fixed in version 18.2.14-tuxcare.16 of @angular/localize." } }, { "id": "CVE-2026-50184", "affects": [ { "ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:7c27d0b7-33c6-5f11-baaf-e5c6bf4f1769", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50184 is fixed in version 18.2.14-tuxcare.16 of @angular/localize." } }, { "id": "CVE-2026-50555", "affects": [ { "ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:264c246f-88cd-5723-8c99-7ab6fd814bb2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50555 is fixed in version 18.2.14-tuxcare.16 of @angular/localize." } }, { "id": "CVE-2026-50556", "affects": [ { "ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:0d757e29-686e-5435-b7ef-fffd82328cf2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50556 is fixed in version 18.2.14-tuxcare.16 of @angular/localize." } }, { "id": "CVE-2026-50557", "affects": [ { "ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:1e68dc6d-5ab0-5659-83c2-f9037e36f968", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50557 is fixed in version 18.2.14-tuxcare.16 of @angular/localize." } }, { "id": "CVE-2026-52725", "affects": [ { "ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:fa48f3a2-5b29-5e95-8cea-22095dc4d030", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-52725 is fixed in version 18.2.14-tuxcare.16 of @angular/localize." } }, { "id": "CVE-2026-54264", "affects": [ { "ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:a0b65f08-4a22-5803-a3d7-c85960f05d07", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54264 is fixed in version 18.2.14-tuxcare.16 of @angular/localize." } }, { "id": "CVE-2026-54265", "affects": [ { "ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:201a0df4-12a2-5529-bb3c-9a3cee4dd0e3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54265 is fixed in version 18.2.14-tuxcare.16 of @angular/localize." } }, { "id": "CVE-2026-54266", "affects": [ { "ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:56767c2c-dd62-5302-b12e-f4fb666bb03d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54266 is fixed in version 18.2.14-tuxcare.16 of @angular/localize." } }, { "id": "CVE-2026-54267", "affects": [ { "ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:767af81a-e936-52eb-88cb-09b79b31c373", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54267 is fixed in version 18.2.14-tuxcare.16 of @angular/localize." } }, { "id": "CVE-2026-54268", "affects": [ { "ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:07f1c539-830f-5757-abf6-f48fb8083ee3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54268 is fixed in version 18.2.14-tuxcare.16 of @angular/localize." } }, { "id": "CVE-2026-68945", "affects": [ { "ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:a9a29aeb-08d7-5592-a2ca-67bbf86d69ff", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-68945 is fixed in version 18.2.14-tuxcare.16 of @angular/localize." } }, { "id": "CVE-2026-69149", "affects": [ { "ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:1c66dac7-8f02-581a-bc78-665711b0f5c5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69149 is fixed in version 18.2.14-tuxcare.16 of @angular/localize." } }, { "id": "CVE-2026-69151", "affects": [ { "ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:9c4b002c-1de1-5e6d-a6dd-e861d76dfde7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69151 is fixed in version 18.2.14-tuxcare.16 of @angular/localize." } }, { "id": "CVE-2026-88056", "affects": [ { "ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:107ee06f-ab09-52ce-8cae-b26b45a54a58", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88056 does not affect version 18.2.14-tuxcare.16 of @angular/localize. not_affected \u2014 The target version 18.2.14-tuxcare.13 is NOT affected by CVE-2026-88056. The vulnerable code pattern (calling String.prototype.trim() on URL strings before resolution) was never present in this version. The target uses a refactored parseUrl() implementation introduced via commit 49a60f6045 (May 2026) that correctly handles Unicode whitespace by percent-encoding it rather than stripping it, main...", "justification": "code_not_present" } }, { "id": "CVE-2026-88057", "affects": [ { "ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:b9f25f71-6de4-54aa-b610-df6fc650abe0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88057 is fixed in version 18.2.14-tuxcare.16 of @angular/localize." } }, { "id": "CVE-2026-88058", "affects": [ { "ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:43a0b05c-6af1-5674-9bd6-efb6b96996f9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88058 is fixed in version 18.2.14-tuxcare.16 of @angular/localize." } }, { "id": "CVE-2026-88059", "affects": [ { "ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:2a8aa2f4-12d1-579b-bc64-568abf9cbde7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88059 is fixed in version 18.2.14-tuxcare.16 of @angular/localize." } }, { "id": "CVE-2026-88060", "affects": [ { "ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:405786cf-ef7b-5158-a3da-9ba9c21a9d74", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88060 is fixed in version 18.2.14-tuxcare.16 of @angular/localize." } } ], "dependencies": [ { "ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.16" } ] }