{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:82d825ed-6ae2-5bc0-9a09-b7eb7ee023b1", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@angular/platform-browser", "purl": "pkg:npm/%40angular/platform-browser@16.2.12-tuxcare.15", "type": "library", "bom-ref": "pkg:npm/%40angular/platform-browser@16.2.12-tuxcare.15", "version": "16.2.12-tuxcare.15", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-59052", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@16.2.12-tuxcare.15" } ], "bom-ref": "urn:uuid:7ac4471d-dceb-5017-93e4-816a2df191f8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59052 is fixed in version 16.2.12-tuxcare.15 of @angular/platform-browser." } }, { "id": "CVE-2025-66035", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@16.2.12-tuxcare.15" } ], "bom-ref": "urn:uuid:26c318c1-2d14-5ecd-9444-82c823584666", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 16.2.12-tuxcare.15 of @angular/platform-browser." } }, { "id": "CVE-2025-66412", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@16.2.12-tuxcare.15" } ], "bom-ref": "urn:uuid:09b8bf56-65d3-51a5-9f17-cbb03bd903be", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 16.2.12-tuxcare.15 of @angular/platform-browser." } }, { "id": "CVE-2026-101895", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@16.2.12-tuxcare.15" } ], "bom-ref": "urn:uuid:39267725-af79-514f-9c98-56c2ec42909d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101895 affects version 16.2.12-tuxcare.15 of @angular/platform-browser, and is fixed in 16.2.12-tuxcare.16." } }, { "id": "CVE-2026-101896", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@16.2.12-tuxcare.15" } ], "bom-ref": "urn:uuid:96afce58-d32b-5c48-9507-d6c4fb68615e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101896 affects version 16.2.12-tuxcare.15 of @angular/platform-browser." } }, { "id": "CVE-2026-22610", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@16.2.12-tuxcare.15" } ], "bom-ref": "urn:uuid:abb3342c-c502-5a91-85d1-0719be40eaf7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22610 is fixed in version 16.2.12-tuxcare.15 of @angular/platform-browser." } }, { "id": "CVE-2026-27970", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@16.2.12-tuxcare.15" } ], "bom-ref": "urn:uuid:f0a251a1-0931-581f-9f85-a4c7bb06f6e2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27970 is fixed in version 16.2.12-tuxcare.15 of @angular/platform-browser." } }, { "id": "CVE-2026-46417", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@16.2.12-tuxcare.15" } ], "bom-ref": "urn:uuid:0c050b54-2974-57cd-bba6-0c7fc93aed3f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46417 is fixed in version 16.2.12-tuxcare.15 of @angular/platform-browser." } }, { "id": "CVE-2026-50168", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@16.2.12-tuxcare.15" } ], "bom-ref": "urn:uuid:54598f85-80b5-5f50-80dd-2082763b38f0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50168 is fixed in version 16.2.12-tuxcare.15 of @angular/platform-browser." } }, { "id": "CVE-2026-50169", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@16.2.12-tuxcare.15" } ], "bom-ref": "urn:uuid:05a0e700-29b8-559e-85be-70daa647efa1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50169 is fixed in version 16.2.12-tuxcare.15 of @angular/platform-browser." } }, { "id": "CVE-2026-50170", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@16.2.12-tuxcare.15" } ], "bom-ref": "urn:uuid:21acd5c9-b11b-5884-9b7a-1e4998c22abb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50170 is fixed in version 16.2.12-tuxcare.15 of @angular/platform-browser." } }, { "id": "CVE-2026-50171", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@16.2.12-tuxcare.15" } ], "bom-ref": "urn:uuid:e840fde4-b944-5954-a95c-f7c85fbaec4b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50171 is fixed in version 16.2.12-tuxcare.15 of @angular/platform-browser." } }, { "id": "CVE-2026-50184", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@16.2.12-tuxcare.15" } ], "bom-ref": "urn:uuid:9553c8ae-f226-5f84-ba6e-ac6e753f2de5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50184 is fixed in version 16.2.12-tuxcare.15 of @angular/platform-browser." } }, { "id": "CVE-2026-50555", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@16.2.12-tuxcare.15" } ], "bom-ref": "urn:uuid:54c22fba-424a-5d6c-9dbf-b8f6a206ebef", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50555 is fixed in version 16.2.12-tuxcare.15 of @angular/platform-browser." } }, { "id": "CVE-2026-50556", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@16.2.12-tuxcare.15" } ], "bom-ref": "urn:uuid:554cc98d-0105-58c9-9a5e-00fcf5637970", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50556 is fixed in version 16.2.12-tuxcare.15 of @angular/platform-browser." } }, { "id": "CVE-2026-50557", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@16.2.12-tuxcare.15" } ], "bom-ref": "urn:uuid:c0169751-063e-586e-a3f9-3129c76a0522", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50557 is fixed in version 16.2.12-tuxcare.15 of @angular/platform-browser." } }, { "id": "CVE-2026-52725", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@16.2.12-tuxcare.15" } ], "bom-ref": "urn:uuid:712f18a1-48d8-5548-a8e3-755f413a91eb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-52725 is fixed in version 16.2.12-tuxcare.15 of @angular/platform-browser." } }, { "id": "CVE-2026-54264", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@16.2.12-tuxcare.15" } ], "bom-ref": "urn:uuid:57ca0e49-5adf-5721-b7cd-d8d399f09280", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54264 is fixed in version 16.2.12-tuxcare.15 of @angular/platform-browser." } }, { "id": "CVE-2026-54265", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@16.2.12-tuxcare.15" } ], "bom-ref": "urn:uuid:76e23e0b-b329-5b31-8414-4ac8af473251", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54265 is fixed in version 16.2.12-tuxcare.15 of @angular/platform-browser." } }, { "id": "CVE-2026-54266", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@16.2.12-tuxcare.15" } ], "bom-ref": "urn:uuid:0042e328-6a5f-53fe-b8c3-338fec63d1d6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54266 is fixed in version 16.2.12-tuxcare.15 of @angular/platform-browser." } }, { "id": "CVE-2026-54267", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@16.2.12-tuxcare.15" } ], "bom-ref": "urn:uuid:7ef62ea0-4144-52e1-8a3f-25d73e744650", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54267 is fixed in version 16.2.12-tuxcare.15 of @angular/platform-browser." } }, { "id": "CVE-2026-54268", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@16.2.12-tuxcare.15" } ], "bom-ref": "urn:uuid:1459babb-5689-5ea2-9731-23a5ea0915e6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54268 is fixed in version 16.2.12-tuxcare.15 of @angular/platform-browser." } }, { "id": "CVE-2026-68945", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@16.2.12-tuxcare.15" } ], "bom-ref": "urn:uuid:5e93fa62-67fd-59a9-83f5-2529577b8833", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-68945 is fixed in version 16.2.12-tuxcare.15 of @angular/platform-browser." } }, { "id": "CVE-2026-69149", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@16.2.12-tuxcare.15" } ], "bom-ref": "urn:uuid:be3666cf-f7f0-547a-91fc-498d4946a97f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69149 is fixed in version 16.2.12-tuxcare.15 of @angular/platform-browser." } }, { "id": "CVE-2026-69151", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@16.2.12-tuxcare.15" } ], "bom-ref": "urn:uuid:2e842be2-3924-5163-8f54-df087ec9396f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69151 is fixed in version 16.2.12-tuxcare.15 of @angular/platform-browser." } }, { "id": "CVE-2026-88056", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@16.2.12-tuxcare.15" } ], "bom-ref": "urn:uuid:f0ed3231-acbf-5d4f-846d-af03cf56c5ea", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88056 does not affect version 16.2.12-tuxcare.15 of @angular/platform-browser. not_affected \u2014 CVE-2026-88056 affects Angular versions 20.3.x, 21.2.x, and 22.x where a refactored URL parsing utility added String.prototype.trim() that strips Unicode whitespace, enabling SSRF bypasses. The target (Angular 16.2.12-tuxcare.12) is based on Angular 16.2.x architecture, which predates the vulnerable code pattern entirely. TuxCare created url.ts fresh on June 24, 2026 for CVE-2026-50168, modelin...", "justification": "code_not_present" } }, { "id": "CVE-2026-88057", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@16.2.12-tuxcare.15" } ], "bom-ref": "urn:uuid:8c7c3542-682e-5aa8-a253-37264629b7eb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88057 is fixed in version 16.2.12-tuxcare.15 of @angular/platform-browser." } }, { "id": "CVE-2026-88058", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@16.2.12-tuxcare.15" } ], "bom-ref": "urn:uuid:82b21a39-ab83-57c9-b41d-a408cc13bfab", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88058 is fixed in version 16.2.12-tuxcare.15 of @angular/platform-browser." } }, { "id": "CVE-2026-88059", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@16.2.12-tuxcare.15" } ], "bom-ref": "urn:uuid:ee1fc37a-ef08-5028-9fc0-285bd4bbb017", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88059 is fixed in version 16.2.12-tuxcare.15 of @angular/platform-browser." } }, { "id": "CVE-2026-88060", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@16.2.12-tuxcare.15" } ], "bom-ref": "urn:uuid:cadaa6cc-0dd5-5951-a95d-82740bb20cd2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88060 is fixed in version 16.2.12-tuxcare.15 of @angular/platform-browser." } } ], "dependencies": [ { "ref": "pkg:npm/%40angular/platform-browser@16.2.12-tuxcare.15" } ] }