{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:10e57e21-e756-572b-b29c-327fef1a8ea0", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@angular/platform-browser", "purl": "pkg:npm/%40angular/platform-browser@17.3.12-tuxcare.18", "type": "library", "bom-ref": "pkg:npm/%40angular/platform-browser@17.3.12-tuxcare.18", "version": "17.3.12-tuxcare.18", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-59052", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:fa5080ba-77f9-590e-90b2-ba7e5fd8b49f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59052 is fixed in version 17.3.12-tuxcare.18 of @angular/platform-browser." } }, { "id": "CVE-2025-66035", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:331c2940-86db-5a14-a4d1-90feaf7a367c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 17.3.12-tuxcare.18 of @angular/platform-browser." } }, { "id": "CVE-2025-66412", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:4e6d2ea5-d2be-5a5a-b115-4944f6083b65", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 17.3.12-tuxcare.18 of @angular/platform-browser." } }, { "id": "CVE-2026-101895", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:7b8214ed-235c-5e9f-a4fe-afe8673f078c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-101895 is fixed in version 17.3.12-tuxcare.18 of @angular/platform-browser." } }, { "id": "CVE-2026-101896", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:d20dd64c-caaf-5be4-b568-985a8a2c4f6f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101896 affects version 17.3.12-tuxcare.18 of @angular/platform-browser." } }, { "id": "CVE-2026-22610", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:98359c1e-8dcb-596d-a719-fe03f1e0a98f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22610 is fixed in version 17.3.12-tuxcare.18 of @angular/platform-browser." } }, { "id": "CVE-2026-27970", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:a47fa798-44cb-5b0f-a3d9-3ecd33d2d41f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27970 is fixed in version 17.3.12-tuxcare.18 of @angular/platform-browser." } }, { "id": "CVE-2026-32635", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:5a6f7a40-ee6f-5b7d-8d3a-26d3f211ed68", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-32635 is fixed in version 17.3.12-tuxcare.18 of @angular/platform-browser." } }, { "id": "CVE-2026-46417", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:1a6177b9-48ae-5feb-8765-ccbc75d9990d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46417 is fixed in version 17.3.12-tuxcare.18 of @angular/platform-browser." } }, { "id": "CVE-2026-50168", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:c35dbc93-610b-54b2-b869-f05ee562c773", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50168 is fixed in version 17.3.12-tuxcare.18 of @angular/platform-browser." } }, { "id": "CVE-2026-50169", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:039d01e1-c96d-5117-81ce-7f6164af24cd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50169 is fixed in version 17.3.12-tuxcare.18 of @angular/platform-browser." } }, { "id": "CVE-2026-50170", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:3628b76c-20d0-569b-8ec7-6494d35d73bc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50170 is fixed in version 17.3.12-tuxcare.18 of @angular/platform-browser." } }, { "id": "CVE-2026-50171", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:3d91a226-1609-5c3c-8bce-20df4aa588a0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50171 is fixed in version 17.3.12-tuxcare.18 of @angular/platform-browser." } }, { "id": "CVE-2026-50184", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:c3f2abbd-8fcb-5091-9a3e-134b8823e82f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50184 is fixed in version 17.3.12-tuxcare.18 of @angular/platform-browser." } }, { "id": "CVE-2026-50555", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:84f4830a-58c4-5229-b9f3-569248f9567d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50555 is fixed in version 17.3.12-tuxcare.18 of @angular/platform-browser." } }, { "id": "CVE-2026-50556", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:bcc68db5-e056-5c28-948f-c5fdde433c8f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50556 is fixed in version 17.3.12-tuxcare.18 of @angular/platform-browser." } }, { "id": "CVE-2026-50557", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:724ea329-aa7c-55e1-9801-20e637a6af16", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50557 is fixed in version 17.3.12-tuxcare.18 of @angular/platform-browser." } }, { "id": "CVE-2026-52725", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:1cb607bb-255f-5b30-b096-2717cbe998a2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-52725 is fixed in version 17.3.12-tuxcare.18 of @angular/platform-browser." } }, { "id": "CVE-2026-54264", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:e2c681ef-5408-5a91-99ef-055eab5a3e65", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54264 is fixed in version 17.3.12-tuxcare.18 of @angular/platform-browser." } }, { "id": "CVE-2026-54265", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:0508abf3-72ac-5a1b-b38e-cb954a4d925f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54265 is fixed in version 17.3.12-tuxcare.18 of @angular/platform-browser." } }, { "id": "CVE-2026-54266", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:d26774a4-12dc-500d-b337-d7038b9f827a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54266 is fixed in version 17.3.12-tuxcare.18 of @angular/platform-browser." } }, { "id": "CVE-2026-54267", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:590d93bc-f735-5de3-9499-6bccc8be110c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54267 is fixed in version 17.3.12-tuxcare.18 of @angular/platform-browser." } }, { "id": "CVE-2026-54268", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:a1228ec7-5f49-59d4-9c1b-b6406b3c5e7e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54268 is fixed in version 17.3.12-tuxcare.18 of @angular/platform-browser." } }, { "id": "CVE-2026-68945", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:8a002fcb-9c3c-5750-b6ba-a2d6234feaf4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-68945 is fixed in version 17.3.12-tuxcare.18 of @angular/platform-browser." } }, { "id": "CVE-2026-69149", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:5b35c3b9-6b0a-5416-8fec-4daca878e92e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69149 is fixed in version 17.3.12-tuxcare.18 of @angular/platform-browser." } }, { "id": "CVE-2026-69151", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:3123086e-2947-5bb5-b7c8-4af798410ee8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69151 is fixed in version 17.3.12-tuxcare.18 of @angular/platform-browser." } }, { "id": "CVE-2026-88056", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:9a662cb0-eb5a-5a16-b4bb-571db5bbc8d8", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88056 does not affect version 17.3.12-tuxcare.18 of @angular/platform-browser. not_affected \u2014 Version 17.3.12 is not affected by CVE-2026-88056. The vulnerability involves String.prototype.trim() being applied during URL resolution in Angular's platform-server, converting validated same-origin URLs with Unicode whitespace into cross-origin protocol-relative URLs, leading to SSRF. This vulnerable code pattern was introduced in newer Angular versions (v20+) and does not exist in version 1...", "justification": "code_not_present" } }, { "id": "CVE-2026-88057", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:d2ee462f-66a2-5998-903e-fbeb0d833f5a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88057 is fixed in version 17.3.12-tuxcare.18 of @angular/platform-browser." } }, { "id": "CVE-2026-88058", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:b9eeee39-06a0-5f92-bf28-519e8168e5b2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88058 is fixed in version 17.3.12-tuxcare.18 of @angular/platform-browser." } }, { "id": "CVE-2026-88059", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:bff4f661-5fe3-5f8d-af2f-59b7dae789d3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88059 is fixed in version 17.3.12-tuxcare.18 of @angular/platform-browser." } }, { "id": "CVE-2026-88060", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:4ba77de0-0f70-5abb-ae4c-fb1623f54220", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88060 is fixed in version 17.3.12-tuxcare.18 of @angular/platform-browser." } } ], "dependencies": [ { "ref": "pkg:npm/%40angular/platform-browser@17.3.12-tuxcare.18" } ] }