{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:6a017e97-8613-5a14-aa01-99d7caf93b76", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@angular/service-worker", "purl": "pkg:npm/%40angular/service-worker@17.3.12-tuxcare.18", "type": "library", "bom-ref": "pkg:npm/%40angular/service-worker@17.3.12-tuxcare.18", "version": "17.3.12-tuxcare.18", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-59052", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:0ae1f4c4-0518-58da-8c20-7f71251e953a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59052 is fixed in version 17.3.12-tuxcare.18 of @angular/service-worker." } }, { "id": "CVE-2025-66035", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:e0fc7fd5-e5c9-5fe3-b0ef-18db5d66a4db", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 17.3.12-tuxcare.18 of @angular/service-worker." } }, { "id": "CVE-2025-66412", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:a0883d2b-a51a-55da-950d-7582b983f82f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 17.3.12-tuxcare.18 of @angular/service-worker." } }, { "id": "CVE-2026-101895", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:02e54906-b7df-5ff4-a90c-0e0289912d61", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-101895 is fixed in version 17.3.12-tuxcare.18 of @angular/service-worker." } }, { "id": "CVE-2026-101896", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:c91e93d5-d0f9-56f4-822f-e7f7f3185294", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101896 affects version 17.3.12-tuxcare.18 of @angular/service-worker." } }, { "id": "CVE-2026-22610", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:13802dc2-9dbc-534b-a9f3-65a53174c5e6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22610 is fixed in version 17.3.12-tuxcare.18 of @angular/service-worker." } }, { "id": "CVE-2026-27970", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:37afa4ca-bebd-5c06-bbe2-56102cac9b6d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27970 is fixed in version 17.3.12-tuxcare.18 of @angular/service-worker." } }, { "id": "CVE-2026-32635", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:8a2eef04-471d-5489-bdce-9091d59f42a7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-32635 is fixed in version 17.3.12-tuxcare.18 of @angular/service-worker." } }, { "id": "CVE-2026-46417", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:be9b2cf9-d4ec-5246-8359-2d2824487d01", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46417 is fixed in version 17.3.12-tuxcare.18 of @angular/service-worker." } }, { "id": "CVE-2026-50168", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:40acc0bb-224c-5eca-a32c-bcd01b12a5d1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50168 is fixed in version 17.3.12-tuxcare.18 of @angular/service-worker." } }, { "id": "CVE-2026-50169", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:6eb1adad-7508-5fcd-b3e5-d7d3ba2f89a8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50169 is fixed in version 17.3.12-tuxcare.18 of @angular/service-worker." } }, { "id": "CVE-2026-50170", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:2f19a495-3aa0-5b2d-8034-016793522910", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50170 is fixed in version 17.3.12-tuxcare.18 of @angular/service-worker." } }, { "id": "CVE-2026-50171", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:e32a6716-2d15-5e0d-b0d6-da6ec409fb84", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50171 is fixed in version 17.3.12-tuxcare.18 of @angular/service-worker." } }, { "id": "CVE-2026-50184", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:4d9d3ad8-a2f0-5808-89d1-b15c0441d8af", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50184 is fixed in version 17.3.12-tuxcare.18 of @angular/service-worker." } }, { "id": "CVE-2026-50555", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:f42e14fa-87c5-5544-8cdb-923db2cc694a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50555 is fixed in version 17.3.12-tuxcare.18 of @angular/service-worker." } }, { "id": "CVE-2026-50556", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:5c6b85a5-a5ee-511e-9450-b4bea5f02996", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50556 is fixed in version 17.3.12-tuxcare.18 of @angular/service-worker." } }, { "id": "CVE-2026-50557", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:4d68087a-18cb-5b52-b2de-cd22f576dbfd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50557 is fixed in version 17.3.12-tuxcare.18 of @angular/service-worker." } }, { "id": "CVE-2026-52725", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:3a9f9be9-b5ef-5624-af98-2370fe10d27a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-52725 is fixed in version 17.3.12-tuxcare.18 of @angular/service-worker." } }, { "id": "CVE-2026-54264", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:208be1ea-52ee-5f0a-b8bc-4def4a8918fc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54264 is fixed in version 17.3.12-tuxcare.18 of @angular/service-worker." } }, { "id": "CVE-2026-54265", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:42efce36-f8cd-5d5a-bda5-0d335858e3a2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54265 is fixed in version 17.3.12-tuxcare.18 of @angular/service-worker." } }, { "id": "CVE-2026-54266", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:302715fd-665c-5524-bdff-5d4373ac52a6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54266 is fixed in version 17.3.12-tuxcare.18 of @angular/service-worker." } }, { "id": "CVE-2026-54267", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:01598ed2-1f42-53b2-874a-f3f0c82a204c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54267 is fixed in version 17.3.12-tuxcare.18 of @angular/service-worker." } }, { "id": "CVE-2026-54268", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:2f3b96f3-4c2d-505e-80f3-3be8760b9bef", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54268 is fixed in version 17.3.12-tuxcare.18 of @angular/service-worker." } }, { "id": "CVE-2026-68945", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:75c934e5-fd09-5690-85c0-83b31dca2f7a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-68945 is fixed in version 17.3.12-tuxcare.18 of @angular/service-worker." } }, { "id": "CVE-2026-69149", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:8db20f15-898f-5242-ad38-d8b8b78df786", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69149 is fixed in version 17.3.12-tuxcare.18 of @angular/service-worker." } }, { "id": "CVE-2026-69151", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:ef8f3c2a-690f-5b26-8d1c-3c10bbc3619e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69151 is fixed in version 17.3.12-tuxcare.18 of @angular/service-worker." } }, { "id": "CVE-2026-88056", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:d85878b7-fa3d-5848-b0d6-161b6b437941", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88056 does not affect version 17.3.12-tuxcare.18 of @angular/service-worker. not_affected \u2014 Version 17.3.12 is not affected by CVE-2026-88056. The vulnerability involves String.prototype.trim() being applied during URL resolution in Angular's platform-server, converting validated same-origin URLs with Unicode whitespace into cross-origin protocol-relative URLs, leading to SSRF. This vulnerable code pattern was introduced in newer Angular versions (v20+) and does not exist in version 1...", "justification": "code_not_present" } }, { "id": "CVE-2026-88057", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:45d36bfb-611b-5623-befa-e6b8d795dac9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88057 is fixed in version 17.3.12-tuxcare.18 of @angular/service-worker." } }, { "id": "CVE-2026-88058", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:ecc00010-9050-5664-9d8b-64d63aa5465a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88058 is fixed in version 17.3.12-tuxcare.18 of @angular/service-worker." } }, { "id": "CVE-2026-88059", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:33aefbf5-0989-5513-9915-9a90c37223fe", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88059 is fixed in version 17.3.12-tuxcare.18 of @angular/service-worker." } }, { "id": "CVE-2026-88060", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@17.3.12-tuxcare.18" } ], "bom-ref": "urn:uuid:d70f947c-bbd9-5cdc-8a9e-1376db101925", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88060 is fixed in version 17.3.12-tuxcare.18 of @angular/service-worker." } } ], "dependencies": [ { "ref": "pkg:npm/%40angular/service-worker@17.3.12-tuxcare.18" } ] }