{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:a637962c-c80b-56bb-8d7f-c39370549f54", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@angular/platform-browser-dynamic", "purl": "pkg:npm/%40angular/platform-browser-dynamic@18.2.14-tuxcare.16", "type": "library", "bom-ref": "pkg:npm/%40angular/platform-browser-dynamic@18.2.14-tuxcare.16", "version": "18.2.14-tuxcare.16", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-66035", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:03c16d3e-92db-5172-9f64-a8b159f9ff2b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 18.2.14-tuxcare.16 of @angular/platform-browser-dynamic." } }, { "id": "CVE-2025-66412", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:beea9c03-e96f-5dbd-b9d5-6722b871c1c2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 18.2.14-tuxcare.16 of @angular/platform-browser-dynamic." } }, { "id": "CVE-2026-101895", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:82172325-4f68-5db1-bcae-80f99b058f38", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101895 affects version 18.2.14-tuxcare.16 of @angular/platform-browser-dynamic, and is fixed in 18.2.14-tuxcare.17." } }, { "id": "CVE-2026-101896", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:aff198e0-e58a-5634-84bc-93dc96793ffd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101896 affects version 18.2.14-tuxcare.16 of @angular/platform-browser-dynamic." } }, { "id": "CVE-2026-22610", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:79bda12a-d99c-5691-b003-426866c1e3ad", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22610 is fixed in version 18.2.14-tuxcare.16 of @angular/platform-browser-dynamic." } }, { "id": "CVE-2026-27970", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:09be8eba-145d-5b49-b7f8-833e4891cf1a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27970 is fixed in version 18.2.14-tuxcare.16 of @angular/platform-browser-dynamic." } }, { "id": "CVE-2026-32635", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:df7ea1a4-2045-5648-97ad-9d0ce1c1c6ee", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-32635 is fixed in version 18.2.14-tuxcare.16 of @angular/platform-browser-dynamic." } }, { "id": "CVE-2026-46417", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:3769de2b-e9c1-5af1-ac6a-b0fb5bbe1ca0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46417 is fixed in version 18.2.14-tuxcare.16 of @angular/platform-browser-dynamic." } }, { "id": "CVE-2026-50168", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:5ed98a7f-fe55-57fa-8d3d-da4ec8a3d5c3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50168 is fixed in version 18.2.14-tuxcare.16 of @angular/platform-browser-dynamic." } }, { "id": "CVE-2026-50169", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:c67564d4-77aa-59b0-af41-e16d3ae64ea8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50169 is fixed in version 18.2.14-tuxcare.16 of @angular/platform-browser-dynamic." } }, { "id": "CVE-2026-50170", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:b7fdecab-265e-5447-819a-69eafa1fde5a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50170 is fixed in version 18.2.14-tuxcare.16 of @angular/platform-browser-dynamic." } }, { "id": "CVE-2026-50171", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:3ebd6bf0-ee1f-5584-8809-9626a43a53ba", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50171 is fixed in version 18.2.14-tuxcare.16 of @angular/platform-browser-dynamic." } }, { "id": "CVE-2026-50184", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:cc1f8143-97b9-57ba-95aa-5ff6f656f6e6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50184 is fixed in version 18.2.14-tuxcare.16 of @angular/platform-browser-dynamic." } }, { "id": "CVE-2026-50555", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:4e88d6a3-cfc2-56f9-8883-d9da3c5d4d84", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50555 is fixed in version 18.2.14-tuxcare.16 of @angular/platform-browser-dynamic." } }, { "id": "CVE-2026-50556", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:613b6e20-0fed-505d-91a2-982d9b600920", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50556 is fixed in version 18.2.14-tuxcare.16 of @angular/platform-browser-dynamic." } }, { "id": "CVE-2026-50557", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:8f637e05-3d82-5719-860e-0bfe1dbfd500", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50557 is fixed in version 18.2.14-tuxcare.16 of @angular/platform-browser-dynamic." } }, { "id": "CVE-2026-52725", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:f5c62d12-b68e-5e52-891f-ad817fae54d4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-52725 is fixed in version 18.2.14-tuxcare.16 of @angular/platform-browser-dynamic." } }, { "id": "CVE-2026-54264", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:1bb13138-e452-5848-a1d2-208fa7e81d6d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54264 is fixed in version 18.2.14-tuxcare.16 of @angular/platform-browser-dynamic." } }, { "id": "CVE-2026-54265", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:24ee2d08-59a0-5d87-9857-b98f12996625", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54265 is fixed in version 18.2.14-tuxcare.16 of @angular/platform-browser-dynamic." } }, { "id": "CVE-2026-54266", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:d35ec107-53a0-5dbc-bbdd-6f30b232edb3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54266 is fixed in version 18.2.14-tuxcare.16 of @angular/platform-browser-dynamic." } }, { "id": "CVE-2026-54267", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:3feabfbd-12ab-590c-8323-14d8ac2a1d26", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54267 is fixed in version 18.2.14-tuxcare.16 of @angular/platform-browser-dynamic." } }, { "id": "CVE-2026-54268", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:282749ad-9e34-51da-8723-19634350c116", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54268 is fixed in version 18.2.14-tuxcare.16 of @angular/platform-browser-dynamic." } }, { "id": "CVE-2026-68945", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:2d6fd7a8-d137-5fb0-83c4-586d62664a1b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-68945 is fixed in version 18.2.14-tuxcare.16 of @angular/platform-browser-dynamic." } }, { "id": "CVE-2026-69149", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:52578d91-b3d7-502a-8940-08061dcbc91d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69149 is fixed in version 18.2.14-tuxcare.16 of @angular/platform-browser-dynamic." } }, { "id": "CVE-2026-69151", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:37600bf0-5fc5-57d8-896a-e98c8a0d33b5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69151 is fixed in version 18.2.14-tuxcare.16 of @angular/platform-browser-dynamic." } }, { "id": "CVE-2026-88056", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:e3148703-1b51-5f3f-b2df-e0d53cdaf559", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88056 does not affect version 18.2.14-tuxcare.16 of @angular/platform-browser-dynamic. not_affected \u2014 The target version 18.2.14-tuxcare.13 is NOT affected by CVE-2026-88056. The vulnerable code pattern (calling String.prototype.trim() on URL strings before resolution) was never present in this version. The target uses a refactored parseUrl() implementation introduced via commit 49a60f6045 (May 2026) that correctly handles Unicode whitespace by percent-encoding it rather than stripping it, main...", "justification": "code_not_present" } }, { "id": "CVE-2026-88057", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:ae560f5d-24d8-56ca-a024-9c55f2c2caaa", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88057 is fixed in version 18.2.14-tuxcare.16 of @angular/platform-browser-dynamic." } }, { "id": "CVE-2026-88058", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:d4ceb73e-ecbc-52cb-b321-56cedbc2ef2c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88058 is fixed in version 18.2.14-tuxcare.16 of @angular/platform-browser-dynamic." } }, { "id": "CVE-2026-88059", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:4d8e41c6-4ec6-58e8-b07c-e10473093fd2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88059 is fixed in version 18.2.14-tuxcare.16 of @angular/platform-browser-dynamic." } }, { "id": "CVE-2026-88060", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:b0953ecf-4061-5298-9e7d-e89f2894de7e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88060 is fixed in version 18.2.14-tuxcare.16 of @angular/platform-browser-dynamic." } } ], "dependencies": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@18.2.14-tuxcare.16" } ] }