{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:b2b4e004-3366-56a9-ba8a-71f0b98696ed", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@angular/platform-browser", "purl": "pkg:npm/%40angular/platform-browser@16.2.11-tuxcare.6", "type": "library", "bom-ref": "pkg:npm/%40angular/platform-browser@16.2.11-tuxcare.6", "version": "16.2.11-tuxcare.6", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-59052", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:f6d5d60c-29bf-5c21-8dc7-35284ebc7b1e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-59052 affects version 16.2.11-tuxcare.6 of @angular/platform-browser." } }, { "id": "CVE-2025-66035", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:f5afcc1b-3b8d-5297-8d1b-c414b5de2fd8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 16.2.11-tuxcare.6 of @angular/platform-browser." } }, { "id": "CVE-2025-66412", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:ca1e79b2-ec3d-5bfd-a565-1299e9e9bac4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 16.2.11-tuxcare.6 of @angular/platform-browser." } }, { "id": "CVE-2026-101895", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:f768569e-4b18-55cc-b80a-f33089cc9d57", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-101895 is fixed in version 16.2.11-tuxcare.6 of @angular/platform-browser." } }, { "id": "CVE-2026-101896", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:afa40adf-7a02-5800-b68e-dc25fdde0158", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101896 affects version 16.2.11-tuxcare.6 of @angular/platform-browser." } }, { "id": "CVE-2026-22610", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:3154840c-254e-5025-bae9-05cd3d6f93d5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22610 is fixed in version 16.2.11-tuxcare.6 of @angular/platform-browser." } }, { "id": "CVE-2026-27970", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:0a90b9d9-f5df-53f6-b502-b462ebf41d4b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27970 is fixed in version 16.2.11-tuxcare.6 of @angular/platform-browser." } }, { "id": "CVE-2026-41423", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:88dc180b-175a-5323-8b52-59f12565dd18", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41423 is fixed in version 16.2.11-tuxcare.6 of @angular/platform-browser." } }, { "id": "CVE-2026-46417", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:64f37fd6-c4c7-5f57-b039-81964c309827", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46417 is fixed in version 16.2.11-tuxcare.6 of @angular/platform-browser." } }, { "id": "CVE-2026-50168", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:36e645c5-795c-56f4-9103-a5ad5d3fdd81", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50168 is fixed in version 16.2.11-tuxcare.6 of @angular/platform-browser." } }, { "id": "CVE-2026-50169", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:140bbcea-71c6-5097-ba34-6ab1bb4f9fb0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50169 is fixed in version 16.2.11-tuxcare.6 of @angular/platform-browser." } }, { "id": "CVE-2026-50170", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:fce119ce-dab3-5043-b19f-d30b638bde89", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50170 is fixed in version 16.2.11-tuxcare.6 of @angular/platform-browser." } }, { "id": "CVE-2026-50171", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:0c5a4b1f-945e-5881-b898-4cd36dfa3228", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50171 is fixed in version 16.2.11-tuxcare.6 of @angular/platform-browser." } }, { "id": "CVE-2026-50184", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:31ddcc00-e886-50d9-8124-c3775bdc5d81", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50184 is fixed in version 16.2.11-tuxcare.6 of @angular/platform-browser." } }, { "id": "CVE-2026-50555", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:ba705e94-1921-5e21-8ad1-bb17cfb59fac", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50555 is fixed in version 16.2.11-tuxcare.6 of @angular/platform-browser." } }, { "id": "CVE-2026-50556", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:78df5cc0-61e6-559c-b3d4-b2f040fab8a8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50556 is fixed in version 16.2.11-tuxcare.6 of @angular/platform-browser." } }, { "id": "CVE-2026-50557", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:3696ed03-c631-5787-8d3b-e88618f95644", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50557 is fixed in version 16.2.11-tuxcare.6 of @angular/platform-browser." } }, { "id": "CVE-2026-52725", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:3ffce1b6-8fd6-501f-aca1-9b5e147ba9d0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-52725 is fixed in version 16.2.11-tuxcare.6 of @angular/platform-browser." } }, { "id": "CVE-2026-54264", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:42c59e5a-0008-5d15-851d-23e827d55ff2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54264 is fixed in version 16.2.11-tuxcare.6 of @angular/platform-browser." } }, { "id": "CVE-2026-54265", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:a2289a6e-cb48-5c0b-b4c6-513050157c35", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54265 is fixed in version 16.2.11-tuxcare.6 of @angular/platform-browser." } }, { "id": "CVE-2026-54266", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:77896372-aaf3-55a3-8ca2-ab58c9fc8808", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54266 is fixed in version 16.2.11-tuxcare.6 of @angular/platform-browser." } }, { "id": "CVE-2026-54267", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:5b6250f2-ccf1-57f5-883c-6e0b76bb8b27", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54267 is fixed in version 16.2.11-tuxcare.6 of @angular/platform-browser." } }, { "id": "CVE-2026-54268", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:5b88099a-e1a4-588b-869a-ffad54f3a259", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54268 is fixed in version 16.2.11-tuxcare.6 of @angular/platform-browser." } }, { "id": "CVE-2026-68945", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:b34545c1-ae0f-57d0-914f-0bfccf2946a8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-68945 is fixed in version 16.2.11-tuxcare.6 of @angular/platform-browser." } }, { "id": "CVE-2026-69149", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:bf61656d-7456-5dfd-8068-282351858694", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69149 is fixed in version 16.2.11-tuxcare.6 of @angular/platform-browser." } }, { "id": "CVE-2026-69151", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:b746e9ce-a82f-594a-9448-a1696d0cac52", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69151 is fixed in version 16.2.11-tuxcare.6 of @angular/platform-browser." } }, { "id": "CVE-2026-88056", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:f2271ea3-c603-5cca-bd19-b0edff31fb2d", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88056 does not affect version 16.2.11-tuxcare.6 of @angular/platform-browser. not_affected \u2014 Angular 16.2.11-tuxcare.2 is NOT affected by CVE-2026-88056. The vulnerability requires WHATWG URL validation combined with String.prototype.trim() on URLs during SSR, creating a discrepancy that enables SSRF. While the target uses WHATWG URL parsing (backported in commit c03fbfd7cc for CVE-2026-50168), it does NOT call String.prototype.trim() on URLs. The attack chain is broken at the trim() s...", "justification": "code_not_reachable" } }, { "id": "CVE-2026-88057", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:492d51d7-41b4-55f0-a62a-74e9168cb26a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88057 is fixed in version 16.2.11-tuxcare.6 of @angular/platform-browser." } }, { "id": "CVE-2026-88058", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:5f0f26ab-8600-5b1b-ba06-71761a63ffc4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88058 is fixed in version 16.2.11-tuxcare.6 of @angular/platform-browser." } }, { "id": "CVE-2026-88059", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:86925a7e-4e61-5521-a154-3f015a221427", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88059 is fixed in version 16.2.11-tuxcare.6 of @angular/platform-browser." } }, { "id": "CVE-2026-88060", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@16.2.11-tuxcare.6" } ], "bom-ref": "urn:uuid:9f41e7ce-cdfd-5bff-b8f3-3e1bce500e86", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88060 is fixed in version 16.2.11-tuxcare.6 of @angular/platform-browser." } } ], "dependencies": [ { "ref": "pkg:npm/%40angular/platform-browser@16.2.11-tuxcare.6" } ] }