{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:93668ab3-e9b7-5694-a0b3-97bdfb8a6d9e", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@angular/platform-server", "purl": "pkg:npm/%40angular/platform-server@17.3.12-tuxcare.18", "type": "library", "bom-ref": "pkg:npm/%40angular/platform-server@17.3.12-tuxcare.18", "version": "17.3.12-tuxcare.18", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-59052", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:ca9abff2-b87a-5078-bf1c-8e5ece0df7da", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59052 is fixed in version 17.3.12-tuxcare.18 of @angular/platform-server." } }, { "id": "CVE-2025-66035", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:6ae62b75-04f0-5f3c-86fd-423201557861", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 17.3.12-tuxcare.18 of @angular/platform-server." } }, { "id": "CVE-2025-66412", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:110559d7-ca52-5c4c-bb26-613b91174b97", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 17.3.12-tuxcare.18 of @angular/platform-server." } }, { "id": "CVE-2026-101895", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:ae7e7920-1a1b-56a3-ba92-fe2de8decdda", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-101895 is fixed in version 17.3.12-tuxcare.18 of @angular/platform-server." } }, { "id": "CVE-2026-101896", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:819ba108-e92a-5c10-9ba8-9a2ca6ca98fa", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101896 affects version 17.3.12-tuxcare.18 of @angular/platform-server." } }, { "id": "CVE-2026-22610", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:a472ae9d-eed2-5eb9-91ad-7e67a874f138", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22610 is fixed in version 17.3.12-tuxcare.18 of @angular/platform-server." } }, { "id": "CVE-2026-27970", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:a48aad7f-84c7-5e81-bdf4-b9cb0a67c7fc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27970 is fixed in version 17.3.12-tuxcare.18 of @angular/platform-server." } }, { "id": "CVE-2026-32635", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:dc25b59a-407e-56f1-81af-d3b3a0eb8cd6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-32635 is fixed in version 17.3.12-tuxcare.18 of @angular/platform-server." } }, { "id": "CVE-2026-46417", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:0d542f32-1e77-5845-85b7-23c8b5f6a2f8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46417 is fixed in version 17.3.12-tuxcare.18 of @angular/platform-server." } }, { "id": "CVE-2026-50168", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:f02764e9-a6bb-58b2-a76f-db7e5adb4baa", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50168 is fixed in version 17.3.12-tuxcare.18 of @angular/platform-server." } }, { "id": "CVE-2026-50169", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:11a87261-4171-5f66-a8b6-f0300496339d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50169 is fixed in version 17.3.12-tuxcare.18 of @angular/platform-server." } }, { "id": "CVE-2026-50170", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:6744e2d7-3e1c-5a1c-bc51-b60fb151d0fe", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50170 is fixed in version 17.3.12-tuxcare.18 of @angular/platform-server." } }, { "id": "CVE-2026-50171", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:09bc68cf-3708-5bf4-b11c-9c0088bba4eb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50171 is fixed in version 17.3.12-tuxcare.18 of @angular/platform-server." } }, { "id": "CVE-2026-50184", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:a4c28c7d-4134-5d0f-a04f-64e0a096c8da", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50184 is fixed in version 17.3.12-tuxcare.18 of @angular/platform-server." } }, { "id": "CVE-2026-50555", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:0508bf52-e510-5778-8be3-ec4cfe2730e9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50555 is fixed in version 17.3.12-tuxcare.18 of @angular/platform-server." } }, { "id": "CVE-2026-50556", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:84ac6124-990d-5e3c-912f-ec95ec1db519", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50556 is fixed in version 17.3.12-tuxcare.18 of @angular/platform-server." } }, { "id": "CVE-2026-50557", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:135fe810-f7dd-55fc-b13c-77c4b5564e81", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50557 is fixed in version 17.3.12-tuxcare.18 of @angular/platform-server." } }, { "id": "CVE-2026-52725", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:ddcdbf4f-2166-5d88-8f9e-3dc2ae017b8e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-52725 is fixed in version 17.3.12-tuxcare.18 of @angular/platform-server." } }, { "id": "CVE-2026-54264", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:7c7e2d6a-cd52-565f-a79a-f3845dbd3e23", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54264 is fixed in version 17.3.12-tuxcare.18 of @angular/platform-server." } }, { "id": "CVE-2026-54265", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:69c8a2a0-1e3d-569b-92e6-d0f3287c3e51", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54265 is fixed in version 17.3.12-tuxcare.18 of @angular/platform-server." } }, { "id": "CVE-2026-54266", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:9a758380-8813-5315-8d58-30a45bc0b5dc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54266 is fixed in version 17.3.12-tuxcare.18 of @angular/platform-server." } }, { "id": "CVE-2026-54267", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:cb6ff3cf-bb00-53e1-81f0-105b71acd04e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54267 is fixed in version 17.3.12-tuxcare.18 of @angular/platform-server." } }, { "id": "CVE-2026-54268", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:491bfe62-6d17-504a-8caf-b63fd9201b04", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54268 is fixed in version 17.3.12-tuxcare.18 of @angular/platform-server." } }, { "id": "CVE-2026-68945", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:f0801ca8-607e-58e2-8fa3-21ceacf38ccb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-68945 is fixed in version 17.3.12-tuxcare.18 of @angular/platform-server." } }, { "id": "CVE-2026-69149", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:6ec1213f-2f59-5fa2-bff4-df44c2c651d5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69149 is fixed in version 17.3.12-tuxcare.18 of @angular/platform-server." } }, { "id": "CVE-2026-69151", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:86ac6028-a699-5532-bbc7-84aab3fab5f1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69151 is fixed in version 17.3.12-tuxcare.18 of @angular/platform-server." } }, { "id": "CVE-2026-88056", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:54d2403b-0de7-5ec3-829e-5ab342205418", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88056 does not affect version 17.3.12-tuxcare.18 of @angular/platform-server. not_affected \u2014 Version 17.3.12 is not affected by CVE-2026-88056. The vulnerability involves String.prototype.trim() being applied during URL resolution in Angular's platform-server, converting validated same-origin URLs with Unicode whitespace into cross-origin protocol-relative URLs, leading to SSRF. This vulnerable code pattern was introduced in newer Angular versions (v20+) and does not exist in version 1...", "justification": "code_not_present" } }, { "id": "CVE-2026-88057", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:5a67cfc2-560a-5655-8e66-c028cf3dec96", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88057 is fixed in version 17.3.12-tuxcare.18 of @angular/platform-server." } }, { "id": "CVE-2026-88058", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:64e8af79-9d95-575c-872d-e06af4e0018f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88058 is fixed in version 17.3.12-tuxcare.18 of @angular/platform-server." } }, { "id": "CVE-2026-88059", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:43af0334-3fa5-5817-a009-4ae98a61d6a6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88059 is fixed in version 17.3.12-tuxcare.18 of @angular/platform-server." } }, { "id": "CVE-2026-88060", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:a8f97ba1-31e4-5d07-a1f2-74cde47db3d7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88060 is fixed in version 17.3.12-tuxcare.18 of @angular/platform-server." } } ], "dependencies": [ { "ref": "pkg:npm/%40angular/platform-server@17.3.12-tuxcare.18" } ] }