{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:eab0a93c-ca63-5835-8773-bfc1adac123d", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@angular/platform-server", "purl": "pkg:npm/%40angular/platform-server@16.2.12-tuxcare.16", "type": "library", "bom-ref": "pkg:npm/%40angular/platform-server@16.2.12-tuxcare.16", "version": "16.2.12-tuxcare.16", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-59052", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@16.2.12-tuxcare.16" } ], "bom-ref": "urn:uuid:8b0a6d28-df8e-5b30-bef8-e1695cd4c35d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59052 is fixed in version 16.2.12-tuxcare.16 of @angular/platform-server." } }, { "id": "CVE-2025-66035", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@16.2.12-tuxcare.16" } ], "bom-ref": "urn:uuid:74f093d2-b81c-52c8-9ca2-7dae2dbda6c4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 16.2.12-tuxcare.16 of @angular/platform-server." } }, { "id": "CVE-2025-66412", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@16.2.12-tuxcare.16" } ], "bom-ref": "urn:uuid:8b1d99b0-d362-59eb-999f-0a47b2cf76b1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 16.2.12-tuxcare.16 of @angular/platform-server." } }, { "id": "CVE-2026-101895", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@16.2.12-tuxcare.16" } ], "bom-ref": "urn:uuid:fa038363-ab5d-505a-9f0f-f902b67f2ede", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-101895 is fixed in version 16.2.12-tuxcare.16 of @angular/platform-server." } }, { "id": "CVE-2026-101896", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@16.2.12-tuxcare.16" } ], "bom-ref": "urn:uuid:3916530a-6565-50aa-bbc3-a12c46a7e9f4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101896 affects version 16.2.12-tuxcare.16 of @angular/platform-server." } }, { "id": "CVE-2026-22610", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@16.2.12-tuxcare.16" } ], "bom-ref": "urn:uuid:afbac6a1-26ee-5ee4-bc0a-9a0369f19226", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22610 is fixed in version 16.2.12-tuxcare.16 of @angular/platform-server." } }, { "id": "CVE-2026-27970", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@16.2.12-tuxcare.16" } ], "bom-ref": "urn:uuid:fabbf63c-b3f1-5392-91ef-46ae1962a6bc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27970 is fixed in version 16.2.12-tuxcare.16 of @angular/platform-server." } }, { "id": "CVE-2026-46417", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@16.2.12-tuxcare.16" } ], "bom-ref": "urn:uuid:b2a0e5d1-9afa-5d77-88fc-bbece1866df9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46417 is fixed in version 16.2.12-tuxcare.16 of @angular/platform-server." } }, { "id": "CVE-2026-50168", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@16.2.12-tuxcare.16" } ], "bom-ref": "urn:uuid:0a0f180f-0932-5589-890a-eb54e77c6215", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50168 is fixed in version 16.2.12-tuxcare.16 of @angular/platform-server." } }, { "id": "CVE-2026-50169", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@16.2.12-tuxcare.16" } ], "bom-ref": "urn:uuid:8864ed8e-e8bf-5030-93e2-24979c63da02", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50169 is fixed in version 16.2.12-tuxcare.16 of @angular/platform-server." } }, { "id": "CVE-2026-50170", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@16.2.12-tuxcare.16" } ], "bom-ref": "urn:uuid:7f53559d-1f3b-5692-b8d7-382d639d2258", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50170 is fixed in version 16.2.12-tuxcare.16 of @angular/platform-server." } }, { "id": "CVE-2026-50171", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@16.2.12-tuxcare.16" } ], "bom-ref": "urn:uuid:44261839-c76d-539f-bcd0-5ad1bdb6db96", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50171 is fixed in version 16.2.12-tuxcare.16 of @angular/platform-server." } }, { "id": "CVE-2026-50184", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@16.2.12-tuxcare.16" } ], "bom-ref": "urn:uuid:5b2921f4-11c6-547c-bdba-62562525fa79", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50184 is fixed in version 16.2.12-tuxcare.16 of @angular/platform-server." } }, { "id": "CVE-2026-50555", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@16.2.12-tuxcare.16" } ], "bom-ref": "urn:uuid:232a1835-3b39-5dc1-9254-72d300fa5222", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50555 is fixed in version 16.2.12-tuxcare.16 of @angular/platform-server." } }, { "id": "CVE-2026-50556", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@16.2.12-tuxcare.16" } ], "bom-ref": "urn:uuid:9b44d55b-2405-5b1a-b3eb-12d1c234cea1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50556 is fixed in version 16.2.12-tuxcare.16 of @angular/platform-server." } }, { "id": "CVE-2026-50557", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@16.2.12-tuxcare.16" } ], "bom-ref": "urn:uuid:be469047-2f68-5a02-99a4-d16d8bde7db9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50557 is fixed in version 16.2.12-tuxcare.16 of @angular/platform-server." } }, { "id": "CVE-2026-52725", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@16.2.12-tuxcare.16" } ], "bom-ref": "urn:uuid:1b8dcf0d-3284-5a07-830a-7238c992c22c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-52725 is fixed in version 16.2.12-tuxcare.16 of @angular/platform-server." } }, { "id": "CVE-2026-54264", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@16.2.12-tuxcare.16" } ], "bom-ref": "urn:uuid:2b4a08bb-51cc-56b1-90c0-94ca20de5ea7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54264 is fixed in version 16.2.12-tuxcare.16 of @angular/platform-server." } }, { "id": "CVE-2026-54265", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@16.2.12-tuxcare.16" } ], "bom-ref": "urn:uuid:980dbc39-69d5-5342-b2cf-159ac001c8bb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54265 is fixed in version 16.2.12-tuxcare.16 of @angular/platform-server." } }, { "id": "CVE-2026-54266", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@16.2.12-tuxcare.16" } ], "bom-ref": "urn:uuid:2ed1637a-0c14-5b6f-95fd-b5736731207e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54266 is fixed in version 16.2.12-tuxcare.16 of @angular/platform-server." } }, { "id": "CVE-2026-54267", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@16.2.12-tuxcare.16" } ], "bom-ref": "urn:uuid:b59ddf0f-9cac-5a5d-b09f-64bb7e254999", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54267 is fixed in version 16.2.12-tuxcare.16 of @angular/platform-server." } }, { "id": "CVE-2026-54268", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@16.2.12-tuxcare.16" } ], "bom-ref": "urn:uuid:c98576d1-fc5c-5085-a4f6-326963a6b473", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54268 is fixed in version 16.2.12-tuxcare.16 of @angular/platform-server." } }, { "id": "CVE-2026-68945", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@16.2.12-tuxcare.16" } ], "bom-ref": "urn:uuid:6295945b-bde8-51cb-9c21-af4e242820d6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-68945 is fixed in version 16.2.12-tuxcare.16 of @angular/platform-server." } }, { "id": "CVE-2026-69149", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@16.2.12-tuxcare.16" } ], "bom-ref": "urn:uuid:abdfef8e-83d2-5412-8689-fec68a5ce2eb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69149 is fixed in version 16.2.12-tuxcare.16 of @angular/platform-server." } }, { "id": "CVE-2026-69151", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@16.2.12-tuxcare.16" } ], "bom-ref": "urn:uuid:9b95f082-514c-52ea-87e1-5d0938b5dca7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69151 is fixed in version 16.2.12-tuxcare.16 of @angular/platform-server." } }, { "id": "CVE-2026-88056", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@16.2.12-tuxcare.16" } ], "bom-ref": "urn:uuid:17dbe561-84cc-5758-894b-9a11f37c358f", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88056 does not affect version 16.2.12-tuxcare.16 of @angular/platform-server. not_affected \u2014 CVE-2026-88056 affects Angular versions 20.3.x, 21.2.x, and 22.x where a refactored URL parsing utility added String.prototype.trim() that strips Unicode whitespace, enabling SSRF bypasses. The target (Angular 16.2.12-tuxcare.12) is based on Angular 16.2.x architecture, which predates the vulnerable code pattern entirely. TuxCare created url.ts fresh on June 24, 2026 for CVE-2026-50168, modelin...", "justification": "code_not_present" } }, { "id": "CVE-2026-88057", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@16.2.12-tuxcare.16" } ], "bom-ref": "urn:uuid:3c90c10f-a819-51c8-86f7-1e8ba32a56db", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88057 is fixed in version 16.2.12-tuxcare.16 of @angular/platform-server." } }, { "id": "CVE-2026-88058", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@16.2.12-tuxcare.16" } ], "bom-ref": "urn:uuid:3f798cb0-d3fb-59fd-8b67-8d366dfce9da", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88058 is fixed in version 16.2.12-tuxcare.16 of @angular/platform-server." } }, { "id": "CVE-2026-88059", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@16.2.12-tuxcare.16" } ], "bom-ref": "urn:uuid:63d8a831-aad5-50ac-bbf9-91ea1a8eebbd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88059 is fixed in version 16.2.12-tuxcare.16 of @angular/platform-server." } }, { "id": "CVE-2026-88060", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@16.2.12-tuxcare.16" } ], "bom-ref": "urn:uuid:1ce3b4b0-f784-56a1-ba12-0fcfb7099a4b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88060 is fixed in version 16.2.12-tuxcare.16 of @angular/platform-server." } } ], "dependencies": [ { "ref": "pkg:npm/%40angular/platform-server@16.2.12-tuxcare.16" } ] }