{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:a1b1c1e9-22da-513a-bfa0-a121ef9852c5", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@angular/service-worker", "purl": "pkg:npm/%40angular/service-worker@17.3.12-tuxcare.17", "type": "library", "bom-ref": "pkg:npm/%40angular/service-worker@17.3.12-tuxcare.17", "version": "17.3.12-tuxcare.17", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-59052", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:ff6b9367-4a48-55d5-828e-76935ab3d5af", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59052 is fixed in version 17.3.12-tuxcare.17 of @angular/service-worker." } }, { "id": "CVE-2025-66035", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:f9631d47-a3a1-5193-95d2-a034914ba0ed", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 17.3.12-tuxcare.17 of @angular/service-worker." } }, { "id": "CVE-2025-66412", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:3944146a-5cdc-58c6-84c7-3b4cb526d58f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 17.3.12-tuxcare.17 of @angular/service-worker." } }, { "id": "CVE-2026-101895", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:d4994ce2-8e9b-5b35-8f4a-4d42fcd854ec", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101895 affects version 17.3.12-tuxcare.17 of @angular/service-worker, and is fixed in 17.3.12-tuxcare.18." } }, { "id": "CVE-2026-101896", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:ee4a7d08-e850-5f0c-80c8-9f835373b2eb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101896 affects version 17.3.12-tuxcare.17 of @angular/service-worker." } }, { "id": "CVE-2026-22610", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:b19da0e5-b106-5835-ad38-bc142785142b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22610 is fixed in version 17.3.12-tuxcare.17 of @angular/service-worker." } }, { "id": "CVE-2026-27970", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:53b381ff-26e0-5b10-b975-3f31c02ac777", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27970 is fixed in version 17.3.12-tuxcare.17 of @angular/service-worker." } }, { "id": "CVE-2026-32635", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:1b3a4708-c561-53c0-b2ba-4b767ed20811", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-32635 is fixed in version 17.3.12-tuxcare.17 of @angular/service-worker." } }, { "id": "CVE-2026-46417", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:3ac8e0c4-f76b-52c6-81ee-e22b7df47726", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46417 is fixed in version 17.3.12-tuxcare.17 of @angular/service-worker." } }, { "id": "CVE-2026-50168", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:cc2a96b0-1816-51d1-abd3-d3ef9f16ee7c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50168 is fixed in version 17.3.12-tuxcare.17 of @angular/service-worker." } }, { "id": "CVE-2026-50169", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:e871d93f-206b-522b-9baa-43c57bb8cf65", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50169 is fixed in version 17.3.12-tuxcare.17 of @angular/service-worker." } }, { "id": "CVE-2026-50170", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:29d62cc0-0aa4-5c9f-aca1-17efa89a7fbb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50170 is fixed in version 17.3.12-tuxcare.17 of @angular/service-worker." } }, { "id": "CVE-2026-50171", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:4bfc00aa-eb37-55a3-bf9e-699d242d7fcb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50171 is fixed in version 17.3.12-tuxcare.17 of @angular/service-worker." } }, { "id": "CVE-2026-50184", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:eaa77a96-7606-5f4f-a18e-6e0879ffc008", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50184 is fixed in version 17.3.12-tuxcare.17 of @angular/service-worker." } }, { "id": "CVE-2026-50555", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:0e83d888-1603-5b49-a882-b2da1d1d48f3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50555 is fixed in version 17.3.12-tuxcare.17 of @angular/service-worker." } }, { "id": "CVE-2026-50556", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:16d79fa4-abde-513c-8067-2071ad9d1316", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50556 is fixed in version 17.3.12-tuxcare.17 of @angular/service-worker." } }, { "id": "CVE-2026-50557", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:67135f06-c952-5734-ace0-f139bb389805", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50557 is fixed in version 17.3.12-tuxcare.17 of @angular/service-worker." } }, { "id": "CVE-2026-52725", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:e7c0d9a5-d8c1-5536-ab08-c3a4430b6461", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-52725 is fixed in version 17.3.12-tuxcare.17 of @angular/service-worker." } }, { "id": "CVE-2026-54264", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:ca72b949-f4b1-51b3-90fc-176d53e5a2b6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54264 is fixed in version 17.3.12-tuxcare.17 of @angular/service-worker." } }, { "id": "CVE-2026-54265", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:afb4eb51-2e67-554f-baf0-2d6f386aade4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54265 is fixed in version 17.3.12-tuxcare.17 of @angular/service-worker." } }, { "id": "CVE-2026-54266", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:5acabccd-3d47-5255-a137-e7a4a8fad57c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54266 is fixed in version 17.3.12-tuxcare.17 of @angular/service-worker." } }, { "id": "CVE-2026-54267", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:937049c8-b913-5668-88c9-0603b823d281", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54267 is fixed in version 17.3.12-tuxcare.17 of @angular/service-worker." } }, { "id": "CVE-2026-54268", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:47351d13-7317-5880-b82d-205f3fc9e9e6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54268 is fixed in version 17.3.12-tuxcare.17 of @angular/service-worker." } }, { "id": "CVE-2026-68945", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:559421fe-7ed1-5a37-bea2-0a09489633d0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-68945 is fixed in version 17.3.12-tuxcare.17 of @angular/service-worker." } }, { "id": "CVE-2026-69149", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:5e618008-1706-5c35-887d-d6a268d7e2e0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69149 is fixed in version 17.3.12-tuxcare.17 of @angular/service-worker." } }, { "id": "CVE-2026-69151", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:a5894f02-7fd4-5e78-bfa5-2b7237988b1c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69151 is fixed in version 17.3.12-tuxcare.17 of @angular/service-worker." } }, { "id": "CVE-2026-88056", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:7d496685-2069-59f9-bd9c-297c78fbf339", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88056 does not affect version 17.3.12-tuxcare.17 of @angular/service-worker. not_affected \u2014 Version 17.3.12 is not affected by CVE-2026-88056. The vulnerability involves String.prototype.trim() being applied during URL resolution in Angular's platform-server, converting validated same-origin URLs with Unicode whitespace into cross-origin protocol-relative URLs, leading to SSRF. This vulnerable code pattern was introduced in newer Angular versions (v20+) and does not exist in version 1...", "justification": "code_not_present" } }, { "id": "CVE-2026-88057", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:41c5141a-2d16-5218-b8d9-95962e47ecb5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88057 is fixed in version 17.3.12-tuxcare.17 of @angular/service-worker." } }, { "id": "CVE-2026-88058", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:4558dcb8-a323-5361-a52d-d4650aa8ee6b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88058 is fixed in version 17.3.12-tuxcare.17 of @angular/service-worker." } }, { "id": "CVE-2026-88059", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:27260198-37f9-5982-a888-c27eea577b97", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88059 is fixed in version 17.3.12-tuxcare.17 of @angular/service-worker." } }, { "id": "CVE-2026-88060", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@17.3.12-tuxcare.17" } ], "bom-ref": "urn:uuid:9a209017-a18f-58e9-b9d9-41a80793fe5b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88060 is fixed in version 17.3.12-tuxcare.17 of @angular/service-worker." } } ], "dependencies": [ { "ref": "pkg:npm/%40angular/service-worker@17.3.12-tuxcare.17" } ] }