{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:a4989435-f9fe-574a-80d4-1368b106f235", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@angular/platform-browser-dynamic", "purl": "pkg:npm/%40angular/platform-browser-dynamic@18.2.14-tuxcare.17", "type": "library", "bom-ref": "pkg:npm/%40angular/platform-browser-dynamic@18.2.14-tuxcare.17", "version": "18.2.14-tuxcare.17", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-66035", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:824562a8-4b58-5c48-9756-6708180cb656", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 18.2.14-tuxcare.17 of @angular/platform-browser-dynamic." } }, { "id": "CVE-2025-66412", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:56e6e6ba-3292-5bc0-81bf-0f9e68654eb7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 18.2.14-tuxcare.17 of @angular/platform-browser-dynamic." } }, { "id": "CVE-2026-101895", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:dc234909-5c20-5cca-8d7f-c002fd2ac3fb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-101895 is fixed in version 18.2.14-tuxcare.17 of @angular/platform-browser-dynamic." } }, { "id": "CVE-2026-101896", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:dc07d8b5-387c-5541-b681-136918823d98", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101896 affects version 18.2.14-tuxcare.17 of @angular/platform-browser-dynamic." } }, { "id": "CVE-2026-22610", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:f76ab92e-fcd0-5b99-8a84-fbf02eb56870", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22610 is fixed in version 18.2.14-tuxcare.17 of @angular/platform-browser-dynamic." } }, { "id": "CVE-2026-27970", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:b8d03883-9b2b-5172-a096-f21b28b2a75a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27970 is fixed in version 18.2.14-tuxcare.17 of @angular/platform-browser-dynamic." } }, { "id": "CVE-2026-32635", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:66d672ed-bb18-516a-a2be-b0c14519ad1d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-32635 is fixed in version 18.2.14-tuxcare.17 of @angular/platform-browser-dynamic." } }, { "id": "CVE-2026-46417", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:f98de8a3-ba82-5c44-adcc-d9895c876367", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46417 is fixed in version 18.2.14-tuxcare.17 of @angular/platform-browser-dynamic." } }, { "id": "CVE-2026-50168", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:a1cd4441-6382-5809-a95f-b13a5c7dc1b6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50168 is fixed in version 18.2.14-tuxcare.17 of @angular/platform-browser-dynamic." } }, { "id": "CVE-2026-50169", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:f301d4c7-f0d5-579b-8d7e-4445c2c12ec8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50169 is fixed in version 18.2.14-tuxcare.17 of @angular/platform-browser-dynamic." } }, { "id": "CVE-2026-50170", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:1a3e14b2-e088-5a38-9156-7d1917b21aa9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50170 is fixed in version 18.2.14-tuxcare.17 of @angular/platform-browser-dynamic." } }, { "id": "CVE-2026-50171", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:a2e4df99-8194-5e07-ad22-4092edd618bc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50171 is fixed in version 18.2.14-tuxcare.17 of @angular/platform-browser-dynamic." } }, { "id": "CVE-2026-50184", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:2a4b9c49-18b6-5750-a364-db5bcd4163ff", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50184 is fixed in version 18.2.14-tuxcare.17 of @angular/platform-browser-dynamic." } }, { "id": "CVE-2026-50555", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:eccb759d-adda-5490-9571-dc53803d0d11", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50555 is fixed in version 18.2.14-tuxcare.17 of @angular/platform-browser-dynamic." } }, { "id": "CVE-2026-50556", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:3a7f3660-75a2-50c6-aab1-1d210fa5d4eb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50556 is fixed in version 18.2.14-tuxcare.17 of @angular/platform-browser-dynamic." } }, { "id": "CVE-2026-50557", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:dd252e01-6313-5543-84d7-b03bc79f8cac", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50557 is fixed in version 18.2.14-tuxcare.17 of @angular/platform-browser-dynamic." } }, { "id": "CVE-2026-52725", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:cbad1ac0-04b4-5969-b34a-52e298fe2331", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-52725 is fixed in version 18.2.14-tuxcare.17 of @angular/platform-browser-dynamic." } }, { "id": "CVE-2026-54264", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:c366dce4-55be-56ca-8439-5d5fa152e975", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54264 is fixed in version 18.2.14-tuxcare.17 of @angular/platform-browser-dynamic." } }, { "id": "CVE-2026-54265", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:26a20c9f-01b7-5129-aae3-ceed9d231ab2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54265 is fixed in version 18.2.14-tuxcare.17 of @angular/platform-browser-dynamic." } }, { "id": "CVE-2026-54266", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:77709397-945a-5f8a-9fc1-5caf26ed0f3c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54266 is fixed in version 18.2.14-tuxcare.17 of @angular/platform-browser-dynamic." } }, { "id": "CVE-2026-54267", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:6443ed3b-d3f9-5b0a-b947-d58ad26d0a73", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54267 is fixed in version 18.2.14-tuxcare.17 of @angular/platform-browser-dynamic." } }, { "id": "CVE-2026-54268", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:352d2c41-ebd0-57d9-8094-9e1b2d653839", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54268 is fixed in version 18.2.14-tuxcare.17 of @angular/platform-browser-dynamic." } }, { "id": "CVE-2026-68945", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:a1905b73-b449-5e95-977b-bb98116f8ed5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-68945 is fixed in version 18.2.14-tuxcare.17 of @angular/platform-browser-dynamic." } }, { "id": "CVE-2026-69149", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:03e4353a-3f75-5afa-a0d1-1fea5ee69c96", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69149 is fixed in version 18.2.14-tuxcare.17 of @angular/platform-browser-dynamic." } }, { "id": "CVE-2026-69151", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:a595394b-849b-5980-a937-23e80a4ac4ce", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69151 is fixed in version 18.2.14-tuxcare.17 of @angular/platform-browser-dynamic." } }, { "id": "CVE-2026-88056", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:5274aad0-5e0f-5651-8d84-409f80bfbf83", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88056 does not affect version 18.2.14-tuxcare.17 of @angular/platform-browser-dynamic. not_affected \u2014 The target version 18.2.14-tuxcare.13 is NOT affected by CVE-2026-88056. The vulnerable code pattern (calling String.prototype.trim() on URL strings before resolution) was never present in this version. The target uses a refactored parseUrl() implementation introduced via commit 49a60f6045 (May 2026) that correctly handles Unicode whitespace by percent-encoding it rather than stripping it, main...", "justification": "code_not_present" } }, { "id": "CVE-2026-88057", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:a51ef1ac-5501-501d-9b3f-2a40c02c6a2f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88057 is fixed in version 18.2.14-tuxcare.17 of @angular/platform-browser-dynamic." } }, { "id": "CVE-2026-88058", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:e91a29ce-3bf2-5944-8b0e-3a33e37800c8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88058 is fixed in version 18.2.14-tuxcare.17 of @angular/platform-browser-dynamic." } }, { "id": "CVE-2026-88059", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:800ee437-8450-5df7-805b-b8f199c15715", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88059 is fixed in version 18.2.14-tuxcare.17 of @angular/platform-browser-dynamic." } }, { "id": "CVE-2026-88060", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:3e36aabc-27e1-5f78-8b08-73de1ca50630", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88060 is fixed in version 18.2.14-tuxcare.17 of @angular/platform-browser-dynamic." } } ], "dependencies": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@18.2.14-tuxcare.17" } ] }