{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:061e3e80-ba45-5c08-86e7-2ce7a51d9a40", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@angular/platform-server", "purl": "pkg:npm/%40angular/platform-server@18.2.14-tuxcare.17", "type": "library", "bom-ref": "pkg:npm/%40angular/platform-server@18.2.14-tuxcare.17", "version": "18.2.14-tuxcare.17", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-66035", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:8833c820-bcf5-52d3-a56a-0f98470add00", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 18.2.14-tuxcare.17 of @angular/platform-server." } }, { "id": "CVE-2025-66412", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:1e5e465e-dd52-50fc-8ec4-2a403cb23cbd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 18.2.14-tuxcare.17 of @angular/platform-server." } }, { "id": "CVE-2026-101895", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:78e410e1-f760-5164-9348-e5f940d8044d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-101895 is fixed in version 18.2.14-tuxcare.17 of @angular/platform-server." } }, { "id": "CVE-2026-101896", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:374d1b24-3f7b-5bc8-b646-e93e9105f468", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101896 affects version 18.2.14-tuxcare.17 of @angular/platform-server." } }, { "id": "CVE-2026-22610", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:8e0ec8b4-b5a5-5948-9993-89fdde74d3b8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22610 is fixed in version 18.2.14-tuxcare.17 of @angular/platform-server." } }, { "id": "CVE-2026-27970", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:d95dc8e6-377a-5446-afd0-9b74015e7789", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27970 is fixed in version 18.2.14-tuxcare.17 of @angular/platform-server." } }, { "id": "CVE-2026-32635", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:813f1948-ae9f-5660-a323-8e71ca3e441e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-32635 is fixed in version 18.2.14-tuxcare.17 of @angular/platform-server." } }, { "id": "CVE-2026-46417", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:b705edf8-8f25-5882-9ac7-a5ba6a5e7233", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46417 is fixed in version 18.2.14-tuxcare.17 of @angular/platform-server." } }, { "id": "CVE-2026-50168", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:678c4427-1f02-5bd5-8c4e-ec4e808bc7dc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50168 is fixed in version 18.2.14-tuxcare.17 of @angular/platform-server." } }, { "id": "CVE-2026-50169", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:780dc8db-4f74-52c3-b644-8911827bcbfb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50169 is fixed in version 18.2.14-tuxcare.17 of @angular/platform-server." } }, { "id": "CVE-2026-50170", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:2d65a639-35dc-579f-ba2a-b8bc8257ecf2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50170 is fixed in version 18.2.14-tuxcare.17 of @angular/platform-server." } }, { "id": "CVE-2026-50171", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:f43d6d65-8112-5d75-ab8a-aeb7a675891f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50171 is fixed in version 18.2.14-tuxcare.17 of @angular/platform-server." } }, { "id": "CVE-2026-50184", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:82c35235-5f76-56d7-9baf-69d575b19b41", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50184 is fixed in version 18.2.14-tuxcare.17 of @angular/platform-server." } }, { "id": "CVE-2026-50555", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:548961c6-2236-5630-932e-2d9de4e34704", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50555 is fixed in version 18.2.14-tuxcare.17 of @angular/platform-server." } }, { "id": "CVE-2026-50556", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:df4c9616-8cc1-59f7-87e2-6cb372d08d85", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50556 is fixed in version 18.2.14-tuxcare.17 of @angular/platform-server." } }, { "id": "CVE-2026-50557", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:db2a17b7-d858-5992-abc5-85e9b23b5a7c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50557 is fixed in version 18.2.14-tuxcare.17 of @angular/platform-server." } }, { "id": "CVE-2026-52725", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:a8715d08-70d6-540d-8a8e-e21e833f7dae", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-52725 is fixed in version 18.2.14-tuxcare.17 of @angular/platform-server." } }, { "id": "CVE-2026-54264", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:23b6b045-2e76-5d6e-884a-444534b7d61f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54264 is fixed in version 18.2.14-tuxcare.17 of @angular/platform-server." } }, { "id": "CVE-2026-54265", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:266275fa-b9fe-5c52-acab-1f1b9db69780", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54265 is fixed in version 18.2.14-tuxcare.17 of @angular/platform-server." } }, { "id": "CVE-2026-54266", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:5048e595-cdcf-539a-801e-2ea102b42006", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54266 is fixed in version 18.2.14-tuxcare.17 of @angular/platform-server." } }, { "id": "CVE-2026-54267", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:40cb1eaf-8e0c-56c1-afdc-fbe770eb96f1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54267 is fixed in version 18.2.14-tuxcare.17 of @angular/platform-server." } }, { "id": "CVE-2026-54268", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:bef63b29-aa9a-5ac7-921a-23c944e92447", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54268 is fixed in version 18.2.14-tuxcare.17 of @angular/platform-server." } }, { "id": "CVE-2026-68945", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:a8ecf5e7-2ae6-5dde-9fd2-53cccd03d991", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-68945 is fixed in version 18.2.14-tuxcare.17 of @angular/platform-server." } }, { "id": "CVE-2026-69149", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:04f15e0a-c368-5eb5-a290-9530d8c739ca", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69149 is fixed in version 18.2.14-tuxcare.17 of @angular/platform-server." } }, { "id": "CVE-2026-69151", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:38f2b060-5556-5ac3-b263-3a29e56809b1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69151 is fixed in version 18.2.14-tuxcare.17 of @angular/platform-server." } }, { "id": "CVE-2026-88056", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:73c7a066-71f5-5be2-be17-a113cdee9407", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88056 does not affect version 18.2.14-tuxcare.17 of @angular/platform-server. not_affected \u2014 The target version 18.2.14-tuxcare.13 is NOT affected by CVE-2026-88056. The vulnerable code pattern (calling String.prototype.trim() on URL strings before resolution) was never present in this version. The target uses a refactored parseUrl() implementation introduced via commit 49a60f6045 (May 2026) that correctly handles Unicode whitespace by percent-encoding it rather than stripping it, main...", "justification": "code_not_present" } }, { "id": "CVE-2026-88057", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:679c7bf2-5e20-53c7-aa25-1b035b1d071d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88057 is fixed in version 18.2.14-tuxcare.17 of @angular/platform-server." } }, { "id": "CVE-2026-88058", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:4cacfa92-17b6-52be-ad8f-a052080a2159", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88058 is fixed in version 18.2.14-tuxcare.17 of @angular/platform-server." } }, { "id": "CVE-2026-88059", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:400d7caf-24b4-50ae-be70-70747c41a03b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88059 is fixed in version 18.2.14-tuxcare.17 of @angular/platform-server." } }, { "id": "CVE-2026-88060", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:ee57f6b2-2afe-5774-b203-637121421c78", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88060 is fixed in version 18.2.14-tuxcare.17 of @angular/platform-server." } } ], "dependencies": [ { "ref": "pkg:npm/%40angular/platform-server@18.2.14-tuxcare.17" } ] }