{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:c8e29a5a-54a2-5ebb-a109-91a90ce6412f", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:npm/%40angular/platform-webworker@5.1.2-tuxcare.4", "type": "library", "name": "@angular/platform-webworker", "version": "5.1.2-tuxcare.4", "purl": "pkg:npm/%40angular/platform-webworker@5.1.2-tuxcare.4" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:0e87a4dc-37e4-5426-b1bd-6f6e802447c1", "id": "CVE-2021-4231", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-4231 is fixed in version 5.1.2-tuxcare.4 of @angular/platform-webworker." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@5.1.2-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:3c25b2d3-5393-5b51-84cc-4a048f26d4ac", "id": "CVE-2025-66035", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 5.1.2-tuxcare.4 of @angular/platform-webworker." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@5.1.2-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:491e3e60-53b3-5dd5-8ae6-978168fac24e", "id": "CVE-2025-66412", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 5.1.2-tuxcare.4 of @angular/platform-webworker." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@5.1.2-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:f8025729-fd2a-50de-a3e7-51eedcbf6960", "id": "CVE-2026-22610", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22610 is fixed in version 5.1.2-tuxcare.4 of @angular/platform-webworker." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@5.1.2-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:10745262-b1b6-5873-acd1-773653a93acf", "id": "CVE-2026-27970", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27970 is fixed in version 5.1.2-tuxcare.4 of @angular/platform-webworker." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@5.1.2-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:d26c56e1-920f-5156-a4b8-1de43cd37eea", "id": "CVE-2026-41423", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41423 does not affect version 5.1.2-tuxcare.4 of @angular/platform-webworker. not_affected \u2014 Angular version 5.1.2 is not affected by CVE-2026-41423. The vulnerability requires the WHATWG URL API which exhibits hostname override behavior with protocol-relative URLs. The target uses Node.js's legacy url.parse() API which does not have this behavior." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@5.1.2-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:d868a3e6-7243-5694-906a-74121215a602", "id": "CVE-2026-46417", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46417 is fixed in version 5.1.2-tuxcare.4 of @angular/platform-webworker." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@5.1.2-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:7d521641-1e23-568a-92fc-8b0ab1439d7a", "id": "CVE-2026-50168", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50168 is fixed in version 5.1.2-tuxcare.4 of @angular/platform-webworker." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@5.1.2-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:96ea652a-074f-576f-b05c-2fd478ccb19d", "id": "CVE-2026-50169", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50169 is fixed in version 5.1.2-tuxcare.4 of @angular/platform-webworker." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@5.1.2-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:13dfe9f7-b206-5121-9e0a-05e59c19439b", "id": "CVE-2026-50170", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-50170 does not affect version 5.1.2-tuxcare.4 of @angular/platform-webworker. not_affected \u2014 no evidence captured" }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@5.1.2-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:592a5eff-b68a-5629-9b39-05f39e91a292", "id": "CVE-2026-50171", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50171 is fixed in version 5.1.2-tuxcare.4 of @angular/platform-webworker." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@5.1.2-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:22c9e9db-f09b-5ccd-a6cb-e073822a6e47", "id": "CVE-2026-50184", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50184 is fixed in version 5.1.2-tuxcare.4 of @angular/platform-webworker." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@5.1.2-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:e9896ffd-eb39-583f-8501-50ed7a24b7ae", "id": "CVE-2026-50555", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50555 is fixed in version 5.1.2-tuxcare.4 of @angular/platform-webworker." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@5.1.2-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:6b27f18e-1e2f-5793-8aa4-9e2fb04b5b80", "id": "CVE-2026-50556", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50556 is fixed in version 5.1.2-tuxcare.4 of @angular/platform-webworker." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@5.1.2-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:2d764cf5-707b-5459-9d41-43de5e312479", "id": "CVE-2026-50557", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50557 is fixed in version 5.1.2-tuxcare.4 of @angular/platform-webworker." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@5.1.2-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:2c1a34e2-5f63-5a04-a8d5-5cba0089a7a8", "id": "CVE-2026-52725", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-52725 is fixed in version 5.1.2-tuxcare.4 of @angular/platform-webworker." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@5.1.2-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:91a81559-a871-5781-ba19-5e1cc0d48e4e", "id": "CVE-2026-54264", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-54264 does not affect version 5.1.2-tuxcare.4 of @angular/platform-webworker. not_affected \u2014 Angular v5.1.2-tuxcare.1 is NOT affected by CVE-2026-54264. The vulnerability requires a `newRequestWithMetadata` function that copies request headers, which does not exist in this version. The service worker reconstructs asset requests from URLs only using bare `adapter.newRequest(url)` calls, never copying or forwarding request headers. Therefore, credential headers cannot be leaked on cross-..." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@5.1.2-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:7659339f-8765-5569-9ae5-d72733affd73", "id": "CVE-2026-54265", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-54265 does not affect version 5.1.2-tuxcare.4 of @angular/platform-webworker. not_affected \u2014 Angular 5.1.2 uses the View Engine compiler architecture, which does not have the TwoWayProperty operation kind that is vulnerable in the Ivy compiler. In View Engine, two-way bindings desugar through the same parsePropertyBinding() code path as one-way bindings, ensuring both receive identical security context resolution and sanitization. The vulnerability pattern described in CVE-2026-54265 c..." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@5.1.2-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:efb3cd3d-0d1b-5fbd-99fb-40c6f407bdd7", "id": "CVE-2026-54266", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-54266 does not affect version 5.1.2-tuxcare.4 of @angular/platform-webworker. not_affected \u2014 Angular 5.1.2 is not affected by CVE-2026-54266. The vulnerable HttpTransferCache feature that generates cache keys using a weak 32-bit DJB2 hash does not exist in this version. This feature was introduced in Angular v16+, while the target is v5.1.2. Although TransferState exists in this version for basic state transfer, there is no integration with HttpClient for automatic response caching, no..." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@5.1.2-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:18a2abf9-9259-5ab8-a251-3a89ca35091b", "id": "CVE-2026-54267", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54267 is fixed in version 5.1.2-tuxcare.4 of @angular/platform-webworker." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@5.1.2-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:fe82a541-00b5-5763-aca6-8eb2a864fd7c", "id": "CVE-2026-54268", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54268 is fixed in version 5.1.2-tuxcare.4 of @angular/platform-webworker." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@5.1.2-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:e8009945-e9a1-5cb2-b3d7-96e7d2885b40", "id": "CVE-2026-68945", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-68945 does not affect version 5.1.2-tuxcare.4 of @angular/platform-webworker. not_affected \u2014 Angular 5.1.2 is not affected by CVE-2026-68945. The vulnerable component HttpTransferCache does not exist in this version. HttpTransferCache was introduced in Angular v16 (circa 2022), while this target is Angular 5.1.2 (2017-2018 era). Although Angular 5.1.2 has TransferState for basic SSR state transfer and HttpClient with HttpParams, it lacks the HTTP response caching mechanism during SSR t..." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@5.1.2-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:4867a362-0be9-532d-82bd-6c2ba39ec66b", "id": "CVE-2026-69149", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69149 is fixed in version 5.1.2-tuxcare.4 of @angular/platform-webworker." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@5.1.2-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:833a89a1-78eb-5be1-8dcc-b43e049a65cc", "id": "CVE-2026-69151", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69151 is fixed in version 5.1.2-tuxcare.4 of @angular/platform-webworker." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@5.1.2-tuxcare.4" } ] } ], "dependencies": [ { "ref": "pkg:npm/%40angular/platform-webworker@5.1.2-tuxcare.4" } ] }