{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:2b26720b-fe4e-5e03-a590-53adc5e95c82", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@angular/platform-browser", "purl": "pkg:npm/%40angular/platform-browser@17.3.12-tuxcare.17", "type": "library", "bom-ref": "pkg:npm/%40angular/platform-browser@17.3.12-tuxcare.17", "version": "17.3.12-tuxcare.17", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-59052", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:12e577e2-f5ee-59d6-a73b-2e1c04d06f66", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59052 is fixed in version 17.3.12-tuxcare.17 of @angular/platform-browser." } }, { "id": "CVE-2025-66035", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:9a858a14-c114-5c4e-8a86-614bcb28cd43", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 17.3.12-tuxcare.17 of @angular/platform-browser." } }, { "id": "CVE-2025-66412", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:16f001b0-45d4-5008-9a69-ad4a79173215", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 17.3.12-tuxcare.17 of @angular/platform-browser." } }, { "id": "CVE-2026-101895", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:2429c99b-4c6b-5e5f-9fc6-2a20b3da632a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101895 affects version 17.3.12-tuxcare.17 of @angular/platform-browser, and is fixed in 17.3.12-tuxcare.18." } }, { "id": "CVE-2026-101896", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:3e1cf7e6-4209-56b9-98c1-bb6d93a9e2dd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101896 affects version 17.3.12-tuxcare.17 of @angular/platform-browser." } }, { "id": "CVE-2026-22610", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:8d787fc7-4165-544e-8983-209e06b018e2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22610 is fixed in version 17.3.12-tuxcare.17 of @angular/platform-browser." } }, { "id": "CVE-2026-27970", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:984d6cb4-9d0b-5e0f-beb9-5d370cd149ab", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27970 is fixed in version 17.3.12-tuxcare.17 of @angular/platform-browser." } }, { "id": "CVE-2026-32635", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:acda0e33-db65-5b95-adfb-1582c49f81cd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-32635 is fixed in version 17.3.12-tuxcare.17 of @angular/platform-browser." } }, { "id": "CVE-2026-46417", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:e4bbc569-19ed-50fa-a109-73f7571a95a1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46417 is fixed in version 17.3.12-tuxcare.17 of @angular/platform-browser." } }, { "id": "CVE-2026-50168", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:bee0df88-03be-58b8-9d2e-83b87c839c83", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50168 is fixed in version 17.3.12-tuxcare.17 of @angular/platform-browser." } }, { "id": "CVE-2026-50169", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:6a27c027-b68f-54b7-bb23-063fb3e91e1a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50169 is fixed in version 17.3.12-tuxcare.17 of @angular/platform-browser." } }, { "id": "CVE-2026-50170", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:35c2185e-d1e3-5c24-bb6a-9c6973643515", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50170 is fixed in version 17.3.12-tuxcare.17 of @angular/platform-browser." } }, { "id": "CVE-2026-50171", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:381e1016-4f20-54e7-9254-4384920340b0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50171 is fixed in version 17.3.12-tuxcare.17 of @angular/platform-browser." } }, { "id": "CVE-2026-50184", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:27e9d6b5-29d9-5c65-9fbf-1a0f0903e7dd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50184 is fixed in version 17.3.12-tuxcare.17 of @angular/platform-browser." } }, { "id": "CVE-2026-50555", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:f74fd802-0339-56bd-924a-773b2964db01", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50555 is fixed in version 17.3.12-tuxcare.17 of @angular/platform-browser." } }, { "id": "CVE-2026-50556", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:100250ff-c41e-56c1-8116-c5d8c98a4cab", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50556 is fixed in version 17.3.12-tuxcare.17 of @angular/platform-browser." } }, { "id": "CVE-2026-50557", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:a987f122-34d5-5208-a2f6-f7ebb07ab673", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50557 is fixed in version 17.3.12-tuxcare.17 of @angular/platform-browser." } }, { "id": "CVE-2026-52725", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:d662292f-19c9-5a16-9206-e6d9e042c089", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-52725 is fixed in version 17.3.12-tuxcare.17 of @angular/platform-browser." } }, { "id": "CVE-2026-54264", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:9e81a71a-032e-5de8-a0ba-0459722670ca", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54264 is fixed in version 17.3.12-tuxcare.17 of @angular/platform-browser." } }, { "id": "CVE-2026-54265", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:8467e82d-6ca6-5708-bcfd-540adbaf0338", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54265 is fixed in version 17.3.12-tuxcare.17 of @angular/platform-browser." } }, { "id": "CVE-2026-54266", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:74614d09-8a71-5a4f-b225-1972a758ab24", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54266 is fixed in version 17.3.12-tuxcare.17 of @angular/platform-browser." } }, { "id": "CVE-2026-54267", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:ed9e2459-9c77-5238-ae1e-6f9b799e2f6a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54267 is fixed in version 17.3.12-tuxcare.17 of @angular/platform-browser." } }, { "id": "CVE-2026-54268", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:2801df82-b29c-5921-a289-cf4b996743ac", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54268 is fixed in version 17.3.12-tuxcare.17 of @angular/platform-browser." } }, { "id": "CVE-2026-68945", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:72bfda37-42b2-50fa-b221-68702a15e9b3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-68945 is fixed in version 17.3.12-tuxcare.17 of @angular/platform-browser." } }, { "id": "CVE-2026-69149", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:deadc528-4839-5791-8a80-936c1faee9b4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69149 is fixed in version 17.3.12-tuxcare.17 of @angular/platform-browser." } }, { "id": "CVE-2026-69151", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:badbf6b2-e64d-5198-b83e-9ae41c09a464", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69151 is fixed in version 17.3.12-tuxcare.17 of @angular/platform-browser." } }, { "id": "CVE-2026-88056", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:d140e978-f629-51f3-8f04-2a19dc40459d", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88056 does not affect version 17.3.12-tuxcare.17 of @angular/platform-browser. not_affected \u2014 Version 17.3.12 is not affected by CVE-2026-88056. The vulnerability involves String.prototype.trim() being applied during URL resolution in Angular's platform-server, converting validated same-origin URLs with Unicode whitespace into cross-origin protocol-relative URLs, leading to SSRF. This vulnerable code pattern was introduced in newer Angular versions (v20+) and does not exist in version 1...", "justification": "code_not_present" } }, { "id": "CVE-2026-88057", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:d48803af-dee9-5518-8eca-fecfe3fc70f8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88057 is fixed in version 17.3.12-tuxcare.17 of @angular/platform-browser." } }, { "id": "CVE-2026-88058", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:ec66c66a-8289-591d-adaf-2c0f80e752be", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88058 is fixed in version 17.3.12-tuxcare.17 of @angular/platform-browser." } }, { "id": "CVE-2026-88059", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:acfdf548-75b4-59a2-80df-1cea9cd50738", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88059 is fixed in version 17.3.12-tuxcare.17 of @angular/platform-browser." } }, { "id": "CVE-2026-88060", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:14ab655b-f102-5f19-98f9-f9de0734a6d5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88060 is fixed in version 17.3.12-tuxcare.17 of @angular/platform-browser." } } ], "dependencies": [ { "ref": "pkg:npm/%40angular/platform-browser@17.3.12-tuxcare.17" } ] }