{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:ed32d10f-751d-5f22-a916-b75f75ad1894", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@angular/service-worker", "purl": "pkg:npm/%40angular/service-worker@12.2.17-tuxcare.12", "type": "library", "bom-ref": "pkg:npm/%40angular/service-worker@12.2.17-tuxcare.12", "version": "12.2.17-tuxcare.12", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-66035", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@12.2.17-tuxcare.12" } ], "bom-ref": "urn:uuid:7fd128a0-6aae-57b2-bc6d-bf0c0d02fa5d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 12.2.17-tuxcare.12 of @angular/service-worker." } }, { "id": "CVE-2025-66412", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@12.2.17-tuxcare.12" } ], "bom-ref": "urn:uuid:9b8e36fc-b4a1-5acb-b246-2c0ff3780a4a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 12.2.17-tuxcare.12 of @angular/service-worker." } }, { "id": "CVE-2026-101895", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@12.2.17-tuxcare.12" } ], "bom-ref": "urn:uuid:21654906-1dce-5a6a-b129-38a605ec069c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-101895 is fixed in version 12.2.17-tuxcare.12 of @angular/service-worker." } }, { "id": "CVE-2026-101896", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@12.2.17-tuxcare.12" } ], "bom-ref": "urn:uuid:d5a6d56e-e0b4-5a54-ad96-a3af15b3b5e4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101896 affects version 12.2.17-tuxcare.12 of @angular/service-worker." } }, { "id": "CVE-2026-22610", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@12.2.17-tuxcare.12" } ], "bom-ref": "urn:uuid:731a95ec-95d6-52e6-9b1d-178757fce0fa", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22610 is fixed in version 12.2.17-tuxcare.12 of @angular/service-worker." } }, { "id": "CVE-2026-27970", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@12.2.17-tuxcare.12" } ], "bom-ref": "urn:uuid:080e44c8-5941-5619-a44f-f81a1407556b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27970 is fixed in version 12.2.17-tuxcare.12 of @angular/service-worker." } }, { "id": "CVE-2026-46417", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@12.2.17-tuxcare.12" } ], "bom-ref": "urn:uuid:4d0d2234-0cd7-59b4-822e-b853a9d94cd7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46417 is fixed in version 12.2.17-tuxcare.12 of @angular/service-worker." } }, { "id": "CVE-2026-50168", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@12.2.17-tuxcare.12" } ], "bom-ref": "urn:uuid:dc6994f8-37d9-5df4-98c4-0d1104bca598", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50168 is fixed in version 12.2.17-tuxcare.12 of @angular/service-worker." } }, { "id": "CVE-2026-50169", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@12.2.17-tuxcare.12" } ], "bom-ref": "urn:uuid:b0f53c74-d5b7-53fb-a341-102bb67a2173", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50169 is fixed in version 12.2.17-tuxcare.12 of @angular/service-worker." } }, { "id": "CVE-2026-50170", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@12.2.17-tuxcare.12" } ], "bom-ref": "urn:uuid:65b19a17-d2dd-5ad5-aadc-88a0090f2f0b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50170 is fixed in version 12.2.17-tuxcare.12 of @angular/service-worker." } }, { "id": "CVE-2026-50171", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@12.2.17-tuxcare.12" } ], "bom-ref": "urn:uuid:2a405621-6cb3-5db8-955d-5f387e73cd15", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50171 is fixed in version 12.2.17-tuxcare.12 of @angular/service-worker." } }, { "id": "CVE-2026-50184", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@12.2.17-tuxcare.12" } ], "bom-ref": "urn:uuid:148ecfac-f5f4-51c2-9c5b-79f48bdc94fb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50184 is fixed in version 12.2.17-tuxcare.12 of @angular/service-worker." } }, { "id": "CVE-2026-50555", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@12.2.17-tuxcare.12" } ], "bom-ref": "urn:uuid:649af87c-db1a-5c09-b16f-b2878e6ead1e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50555 is fixed in version 12.2.17-tuxcare.12 of @angular/service-worker." } }, { "id": "CVE-2026-50556", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@12.2.17-tuxcare.12" } ], "bom-ref": "urn:uuid:0b884992-2666-56be-8992-113b9a5a1abd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50556 is fixed in version 12.2.17-tuxcare.12 of @angular/service-worker." } }, { "id": "CVE-2026-50557", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@12.2.17-tuxcare.12" } ], "bom-ref": "urn:uuid:1937dd12-4705-5063-91b4-61ffb8b65fbe", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50557 is fixed in version 12.2.17-tuxcare.12 of @angular/service-worker." } }, { "id": "CVE-2026-52725", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@12.2.17-tuxcare.12" } ], "bom-ref": "urn:uuid:4341495f-50c9-5507-8c7c-2dfd9a8a416a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-52725 is fixed in version 12.2.17-tuxcare.12 of @angular/service-worker." } }, { "id": "CVE-2026-54264", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@12.2.17-tuxcare.12" } ], "bom-ref": "urn:uuid:c7a506f2-94e3-5ddb-8eff-8d1e574f495e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54264 is fixed in version 12.2.17-tuxcare.12 of @angular/service-worker." } }, { "id": "CVE-2026-54265", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@12.2.17-tuxcare.12" } ], "bom-ref": "urn:uuid:d7a0ce5e-2804-5c5b-b92d-7fa5b909fbb1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54265 is fixed in version 12.2.17-tuxcare.12 of @angular/service-worker." } }, { "id": "CVE-2026-54266", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@12.2.17-tuxcare.12" } ], "bom-ref": "urn:uuid:0677867e-5b88-5f33-adbd-047012949cab", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54266 is fixed in version 12.2.17-tuxcare.12 of @angular/service-worker." } }, { "id": "CVE-2026-54267", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@12.2.17-tuxcare.12" } ], "bom-ref": "urn:uuid:9d89609c-a1c0-56a1-ad54-238000698271", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54267 is fixed in version 12.2.17-tuxcare.12 of @angular/service-worker." } }, { "id": "CVE-2026-54268", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@12.2.17-tuxcare.12" } ], "bom-ref": "urn:uuid:b2142ffd-b611-534e-aa6b-63f837db0962", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54268 is fixed in version 12.2.17-tuxcare.12 of @angular/service-worker." } }, { "id": "CVE-2026-68945", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@12.2.17-tuxcare.12" } ], "bom-ref": "urn:uuid:ad51c408-0939-5f77-8ea8-f36a84cdd30f", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-68945 does not affect version 12.2.17-tuxcare.12 of @angular/service-worker. not_affected \u2014 Angular 12.2.17 does not contain the HttpTransferCache feature affected by CVE-2026-68945. HttpTransferCache, which caches HTTP requests during Server-Side Rendering (SSR), was first introduced in Angular 16.0.0\u2014approximately 4 major versions after the target version. The vulnerability concerns cache-key collision when repeated HTTP parameters are serialized, but since the entire HttpTransferCa...", "justification": "code_not_present" } }, { "id": "CVE-2026-69149", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@12.2.17-tuxcare.12" } ], "bom-ref": "urn:uuid:03576efd-21e1-5739-9fff-9f82c2eac48b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69149 is fixed in version 12.2.17-tuxcare.12 of @angular/service-worker." } }, { "id": "CVE-2026-69151", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@12.2.17-tuxcare.12" } ], "bom-ref": "urn:uuid:3f5bb684-c09d-54e1-b3af-45f3c8394f9e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69151 is fixed in version 12.2.17-tuxcare.12 of @angular/service-worker." } }, { "id": "CVE-2026-88056", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@12.2.17-tuxcare.12" } ], "bom-ref": "urn:uuid:6a85ffe9-82c9-505e-b51d-372bea78d79f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88056 is fixed in version 12.2.17-tuxcare.12 of @angular/service-worker." } }, { "id": "CVE-2026-88057", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@12.2.17-tuxcare.12" } ], "bom-ref": "urn:uuid:6ca9f782-f39a-5b96-9d20-577aa80f338f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88057 is fixed in version 12.2.17-tuxcare.12 of @angular/service-worker." } }, { "id": "CVE-2026-88058", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@12.2.17-tuxcare.12" } ], "bom-ref": "urn:uuid:8d5c671f-c92d-5bab-9708-6d135b2116b8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88058 is fixed in version 12.2.17-tuxcare.12 of @angular/service-worker." } }, { "id": "CVE-2026-88059", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@12.2.17-tuxcare.12" } ], "bom-ref": "urn:uuid:15cfb05b-32cf-51dc-85cb-9be6dbfb6683", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88059 does not affect version 12.2.17-tuxcare.12 of @angular/service-worker. not_affected \u2014 Angular 12.2.17-tuxcare.9 is not affected by CVE-2026-88059. The vulnerability requires HttpTransferCache, withRequestsMadeViaParent(), and provideClientHydration() features which were introduced in Angular 16.0.0. This version uses the older module-based HttpClientModule system and lacks the entire SSR hydration transfer-cache infrastructure. The vulnerable code pattern described in the CVE do...", "justification": "code_not_present" } }, { "id": "CVE-2026-88060", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@12.2.17-tuxcare.12" } ], "bom-ref": "urn:uuid:2b9356be-f034-5c34-9077-672dfbcf32fb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88060 is fixed in version 12.2.17-tuxcare.12 of @angular/service-worker." } } ], "dependencies": [ { "ref": "pkg:npm/%40angular/service-worker@12.2.17-tuxcare.12" } ] }