{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:049c7357-02a6-5381-aa97-d62c60004790", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@angular/platform-browser", "purl": "pkg:npm/%40angular/platform-browser@18.2.14-tuxcare.17", "type": "library", "bom-ref": "pkg:npm/%40angular/platform-browser@18.2.14-tuxcare.17", "version": "18.2.14-tuxcare.17", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-66035", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:65f1832e-c364-55da-ba53-14b565362590", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 18.2.14-tuxcare.17 of @angular/platform-browser." } }, { "id": "CVE-2025-66412", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:601d6b56-cffe-541c-9b79-3e02c6888a4c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 18.2.14-tuxcare.17 of @angular/platform-browser." } }, { "id": "CVE-2026-101895", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:48e44a66-bd1a-54bf-b4c4-e2f297585df5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-101895 is fixed in version 18.2.14-tuxcare.17 of @angular/platform-browser." } }, { "id": "CVE-2026-101896", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:fdfad6ee-8983-555d-b1d0-25f2669d3059", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101896 affects version 18.2.14-tuxcare.17 of @angular/platform-browser." } }, { "id": "CVE-2026-22610", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:bcea9d7e-6bc8-514f-8e7d-ba0ce434a0e0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22610 is fixed in version 18.2.14-tuxcare.17 of @angular/platform-browser." } }, { "id": "CVE-2026-27970", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:36496964-b866-5f22-ad55-2f4b5eba903c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27970 is fixed in version 18.2.14-tuxcare.17 of @angular/platform-browser." } }, { "id": "CVE-2026-32635", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:5bfbd658-e66c-5257-9939-270214fbf5ee", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-32635 is fixed in version 18.2.14-tuxcare.17 of @angular/platform-browser." } }, { "id": "CVE-2026-46417", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:f62fb8fe-8824-5fd5-b14f-e2fe333bb5b6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46417 is fixed in version 18.2.14-tuxcare.17 of @angular/platform-browser." } }, { "id": "CVE-2026-50168", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:ab5914ea-56ce-53cb-aaca-5f235f7245a8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50168 is fixed in version 18.2.14-tuxcare.17 of @angular/platform-browser." } }, { "id": "CVE-2026-50169", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:a3df220f-b322-5682-af96-dc85206b0aad", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50169 is fixed in version 18.2.14-tuxcare.17 of @angular/platform-browser." } }, { "id": "CVE-2026-50170", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:0a3b1520-9c5c-5dce-a8b3-9784ad1fb014", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50170 is fixed in version 18.2.14-tuxcare.17 of @angular/platform-browser." } }, { "id": "CVE-2026-50171", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:696d5fa5-cd94-522b-86c6-ac8f0d87a67f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50171 is fixed in version 18.2.14-tuxcare.17 of @angular/platform-browser." } }, { "id": "CVE-2026-50184", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:594da758-cc3e-56f6-9273-1d485bbea9a9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50184 is fixed in version 18.2.14-tuxcare.17 of @angular/platform-browser." } }, { "id": "CVE-2026-50555", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:7ea43578-fdca-5641-bceb-c3c65be25791", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50555 is fixed in version 18.2.14-tuxcare.17 of @angular/platform-browser." } }, { "id": "CVE-2026-50556", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:b896c612-2b47-5a03-adf5-4c79d4d19c11", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50556 is fixed in version 18.2.14-tuxcare.17 of @angular/platform-browser." } }, { "id": "CVE-2026-50557", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:89a9bb8b-ebfa-5e9f-bf8b-a14ab155cecb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50557 is fixed in version 18.2.14-tuxcare.17 of @angular/platform-browser." } }, { "id": "CVE-2026-52725", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:cf5b3e91-5933-5f81-84fd-7f30e26a5289", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-52725 is fixed in version 18.2.14-tuxcare.17 of @angular/platform-browser." } }, { "id": "CVE-2026-54264", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:a1b494f4-76cc-581e-96ac-e8328de92680", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54264 is fixed in version 18.2.14-tuxcare.17 of @angular/platform-browser." } }, { "id": "CVE-2026-54265", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:52447a6e-9d44-5d46-81af-36ca7f374f77", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54265 is fixed in version 18.2.14-tuxcare.17 of @angular/platform-browser." } }, { "id": "CVE-2026-54266", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:0ad3acff-baa9-5378-8638-73a2308a1fe5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54266 is fixed in version 18.2.14-tuxcare.17 of @angular/platform-browser." } }, { "id": "CVE-2026-54267", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:c2208d2b-5946-55ae-a604-070a6f0632b5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54267 is fixed in version 18.2.14-tuxcare.17 of @angular/platform-browser." } }, { "id": "CVE-2026-54268", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:12e31b2e-9ab9-5356-8f5a-d3d471dbc351", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54268 is fixed in version 18.2.14-tuxcare.17 of @angular/platform-browser." } }, { "id": "CVE-2026-68945", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:3993e3c9-5095-56c4-88db-785ebc25faf9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-68945 is fixed in version 18.2.14-tuxcare.17 of @angular/platform-browser." } }, { "id": "CVE-2026-69149", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:7600c9a2-976b-59db-aa97-5f381d7c46c3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69149 is fixed in version 18.2.14-tuxcare.17 of @angular/platform-browser." } }, { "id": "CVE-2026-69151", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:fc0f3969-724b-5d70-9e1f-8581609b7f4f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69151 is fixed in version 18.2.14-tuxcare.17 of @angular/platform-browser." } }, { "id": "CVE-2026-88056", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:18c03552-7381-53fa-afa1-8014ffb4b213", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88056 does not affect version 18.2.14-tuxcare.17 of @angular/platform-browser. not_affected \u2014 The target version 18.2.14-tuxcare.13 is NOT affected by CVE-2026-88056. The vulnerable code pattern (calling String.prototype.trim() on URL strings before resolution) was never present in this version. The target uses a refactored parseUrl() implementation introduced via commit 49a60f6045 (May 2026) that correctly handles Unicode whitespace by percent-encoding it rather than stripping it, main...", "justification": "code_not_present" } }, { "id": "CVE-2026-88057", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:44f1409f-3c53-5a7d-a2c0-623bfb6e5493", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88057 is fixed in version 18.2.14-tuxcare.17 of @angular/platform-browser." } }, { "id": "CVE-2026-88058", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:0f71df47-2b9d-59eb-ab9d-2c27081244da", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88058 is fixed in version 18.2.14-tuxcare.17 of @angular/platform-browser." } }, { "id": "CVE-2026-88059", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:84154f5e-1e65-5bb3-9653-ee9468871cf1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88059 is fixed in version 18.2.14-tuxcare.17 of @angular/platform-browser." } }, { "id": "CVE-2026-88060", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:fb0a3083-f677-539d-810b-1f42852868da", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88060 is fixed in version 18.2.14-tuxcare.17 of @angular/platform-browser." } } ], "dependencies": [ { "ref": "pkg:npm/%40angular/platform-browser@18.2.14-tuxcare.17" } ] }