{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:49a7e709-2b55-5d48-ac87-80ffb5446947", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@angular/router", "purl": "pkg:npm/%40angular/router@17.3.12-tuxcare.17", "type": "library", "bom-ref": "pkg:npm/%40angular/router@17.3.12-tuxcare.17", "version": "17.3.12-tuxcare.17", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-59052", "affects": [ { "ref": "pkg:npm/%40angular/router@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:b5f08f82-b237-51e3-892f-84690d99f3e2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59052 is fixed in version 17.3.12-tuxcare.17 of @angular/router." } }, { "id": "CVE-2025-66035", "affects": [ { "ref": "pkg:npm/%40angular/router@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:c6713616-29a0-5dc1-a9e9-3e110c9f265c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 17.3.12-tuxcare.17 of @angular/router." } }, { "id": "CVE-2025-66412", "affects": [ { "ref": "pkg:npm/%40angular/router@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:a3d36ad9-a49b-583e-bc13-bf86da5569f8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 17.3.12-tuxcare.17 of @angular/router." } }, { "id": "CVE-2026-101895", "affects": [ { "ref": "pkg:npm/%40angular/router@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:f776c4e8-10db-54ca-bef7-add6d53bd2b5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101895 affects version 17.3.12-tuxcare.17 of @angular/router, and is fixed in 17.3.12-tuxcare.18." } }, { "id": "CVE-2026-101896", "affects": [ { "ref": "pkg:npm/%40angular/router@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:d142e3e9-6591-5820-ad32-11a92f511fc0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101896 affects version 17.3.12-tuxcare.17 of @angular/router." } }, { "id": "CVE-2026-22610", "affects": [ { "ref": "pkg:npm/%40angular/router@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:89b6e7b6-f852-5f19-93b8-6eed24619027", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22610 is fixed in version 17.3.12-tuxcare.17 of @angular/router." } }, { "id": "CVE-2026-27970", "affects": [ { "ref": "pkg:npm/%40angular/router@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:ebdc9939-6733-5e4a-b558-02d4d7bdbeb4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27970 is fixed in version 17.3.12-tuxcare.17 of @angular/router." } }, { "id": "CVE-2026-32635", "affects": [ { "ref": "pkg:npm/%40angular/router@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:fe764def-e725-5c0d-a389-8857b9011d38", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-32635 is fixed in version 17.3.12-tuxcare.17 of @angular/router." } }, { "id": "CVE-2026-46417", "affects": [ { "ref": "pkg:npm/%40angular/router@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:0b2ccf97-42c8-51be-9af2-9ed740d33b6a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46417 is fixed in version 17.3.12-tuxcare.17 of @angular/router." } }, { "id": "CVE-2026-50168", "affects": [ { "ref": "pkg:npm/%40angular/router@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:575f5575-a907-5c76-b9e8-6672f5a4634e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50168 is fixed in version 17.3.12-tuxcare.17 of @angular/router." } }, { "id": "CVE-2026-50169", "affects": [ { "ref": "pkg:npm/%40angular/router@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:8ce17c03-60ea-587b-a9df-ac38758ad9c5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50169 is fixed in version 17.3.12-tuxcare.17 of @angular/router." } }, { "id": "CVE-2026-50170", "affects": [ { "ref": "pkg:npm/%40angular/router@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:953baa70-fbe1-5a5c-ad9c-ccd82dd00db0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50170 is fixed in version 17.3.12-tuxcare.17 of @angular/router." } }, { "id": "CVE-2026-50171", "affects": [ { "ref": "pkg:npm/%40angular/router@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:e2353377-edf8-5e90-9fbb-b2992d322fcc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50171 is fixed in version 17.3.12-tuxcare.17 of @angular/router." } }, { "id": "CVE-2026-50184", "affects": [ { "ref": "pkg:npm/%40angular/router@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:ff7eaf4e-f055-5fa4-af31-b625bf81d529", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50184 is fixed in version 17.3.12-tuxcare.17 of @angular/router." } }, { "id": "CVE-2026-50555", "affects": [ { "ref": "pkg:npm/%40angular/router@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:1c2ea884-749c-5ae3-ab53-92d5db29b511", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50555 is fixed in version 17.3.12-tuxcare.17 of @angular/router." } }, { "id": "CVE-2026-50556", "affects": [ { "ref": "pkg:npm/%40angular/router@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:edfaaf44-f26c-5a84-852b-5f8b97737b9a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50556 is fixed in version 17.3.12-tuxcare.17 of @angular/router." } }, { "id": "CVE-2026-50557", "affects": [ { "ref": "pkg:npm/%40angular/router@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:fd542b73-2ec5-55aa-aaca-1c3274d38704", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50557 is fixed in version 17.3.12-tuxcare.17 of @angular/router." } }, { "id": "CVE-2026-52725", "affects": [ { "ref": "pkg:npm/%40angular/router@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:19ec9eb3-9079-58cf-a939-efefc715876d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-52725 is fixed in version 17.3.12-tuxcare.17 of @angular/router." } }, { "id": "CVE-2026-54264", "affects": [ { "ref": "pkg:npm/%40angular/router@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:10a46f52-612e-5eda-b0b4-37be2c7cd7a1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54264 is fixed in version 17.3.12-tuxcare.17 of @angular/router." } }, { "id": "CVE-2026-54265", "affects": [ { "ref": "pkg:npm/%40angular/router@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:d0c64f00-dff7-581c-b23c-44d1fca97c51", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54265 is fixed in version 17.3.12-tuxcare.17 of @angular/router." } }, { "id": "CVE-2026-54266", "affects": [ { "ref": "pkg:npm/%40angular/router@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:d918f834-e737-5ea9-9942-a0678564a799", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54266 is fixed in version 17.3.12-tuxcare.17 of @angular/router." } }, { "id": "CVE-2026-54267", "affects": [ { "ref": "pkg:npm/%40angular/router@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:ab7f874a-0926-51f4-b88d-5663a74d72ae", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54267 is fixed in version 17.3.12-tuxcare.17 of @angular/router." } }, { "id": "CVE-2026-54268", "affects": [ { "ref": "pkg:npm/%40angular/router@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:f8a4eaf6-cddc-5816-9359-1057b8a29fda", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54268 is fixed in version 17.3.12-tuxcare.17 of @angular/router." } }, { "id": "CVE-2026-68945", "affects": [ { "ref": "pkg:npm/%40angular/router@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:9b3e0d22-75cb-5cc7-bd6b-4ca0f6b2bc6a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-68945 is fixed in version 17.3.12-tuxcare.17 of @angular/router." } }, { "id": "CVE-2026-69149", "affects": [ { "ref": "pkg:npm/%40angular/router@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:7bafda49-bf1a-5df1-af8e-41242ad521db", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69149 is fixed in version 17.3.12-tuxcare.17 of @angular/router." } }, { "id": "CVE-2026-69151", "affects": [ { "ref": "pkg:npm/%40angular/router@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:b38dfab2-5143-553b-bcb3-0d1119585a1f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69151 is fixed in version 17.3.12-tuxcare.17 of @angular/router." } }, { "id": "CVE-2026-88056", "affects": [ { "ref": "pkg:npm/%40angular/router@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:9a0c4a60-03df-5e7b-affb-9444bfcd23ac", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88056 does not affect version 17.3.12-tuxcare.17 of @angular/router. not_affected \u2014 Version 17.3.12 is not affected by CVE-2026-88056. The vulnerability involves String.prototype.trim() being applied during URL resolution in Angular's platform-server, converting validated same-origin URLs with Unicode whitespace into cross-origin protocol-relative URLs, leading to SSRF. This vulnerable code pattern was introduced in newer Angular versions (v20+) and does not exist in version 1...", "justification": "code_not_present" } }, { "id": "CVE-2026-88057", "affects": [ { "ref": "pkg:npm/%40angular/router@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:66286c4a-ae22-5110-8e04-a38c2d1a2aa5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88057 is fixed in version 17.3.12-tuxcare.17 of @angular/router." } }, { "id": "CVE-2026-88058", "affects": [ { "ref": "pkg:npm/%40angular/router@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:ba5f1c95-0658-529b-899e-e155eefbf7c4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88058 is fixed in version 17.3.12-tuxcare.17 of @angular/router." } }, { "id": "CVE-2026-88059", "affects": [ { "ref": "pkg:npm/%40angular/router@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:0cc61efe-9118-55ad-add7-c57e734aab49", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88059 is fixed in version 17.3.12-tuxcare.17 of @angular/router." } }, { "id": "CVE-2026-88060", "affects": [ { "ref": "pkg:npm/%40angular/router@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:6e336f8d-49b9-557e-b9d1-63c04e57d7f0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88060 is fixed in version 17.3.12-tuxcare.17 of @angular/router." } } ], "dependencies": [ { "ref": "pkg:npm/%40angular/router@17.3.12-tuxcare.17" } ] }