{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:920de0fd-91d1-5291-85d7-5086b367b26f", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@angular/service-worker", "purl": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.16", "type": "library", "bom-ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.16", "version": "18.2.14-tuxcare.16", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-66035", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:57e7fcef-21ad-584d-b906-89348192c7ab", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 18.2.14-tuxcare.16 of @angular/service-worker." } }, { "id": "CVE-2025-66412", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:79bc9936-12b6-5435-94e6-ef5217da92dc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 18.2.14-tuxcare.16 of @angular/service-worker." } }, { "id": "CVE-2026-101895", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:bdd1c08c-d26b-5f9f-8b81-d668637bc0a6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101895 affects version 18.2.14-tuxcare.16 of @angular/service-worker, and is fixed in 18.2.14-tuxcare.17." } }, { "id": "CVE-2026-101896", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:f64d8222-ba03-5b60-b4fe-75e6709404bf", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101896 affects version 18.2.14-tuxcare.16 of @angular/service-worker." } }, { "id": "CVE-2026-22610", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:363ccecb-36fd-5546-a3b2-84539829563a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22610 is fixed in version 18.2.14-tuxcare.16 of @angular/service-worker." } }, { "id": "CVE-2026-27970", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:b0625ecc-cec5-5dd2-84a0-e6aee5ea31e6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27970 is fixed in version 18.2.14-tuxcare.16 of @angular/service-worker." } }, { "id": "CVE-2026-32635", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:1af53747-44bc-57ee-abfd-f6707bcfbdc7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-32635 is fixed in version 18.2.14-tuxcare.16 of @angular/service-worker." } }, { "id": "CVE-2026-46417", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:3a88463b-b542-5ebb-a568-2fba4d56acd3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46417 is fixed in version 18.2.14-tuxcare.16 of @angular/service-worker." } }, { "id": "CVE-2026-50168", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:06b291ff-f738-5f44-a20b-35d15d1f9a7b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50168 is fixed in version 18.2.14-tuxcare.16 of @angular/service-worker." } }, { "id": "CVE-2026-50169", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:15c96b5c-d441-5014-9b99-24889a941c83", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50169 is fixed in version 18.2.14-tuxcare.16 of @angular/service-worker." } }, { "id": "CVE-2026-50170", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:7790cb26-a73e-5fbf-a622-6c349174422a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50170 is fixed in version 18.2.14-tuxcare.16 of @angular/service-worker." } }, { "id": "CVE-2026-50171", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:4cda1a77-0ca9-592f-901c-b622730e98f5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50171 is fixed in version 18.2.14-tuxcare.16 of @angular/service-worker." } }, { "id": "CVE-2026-50184", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:5e683bfd-b0eb-541c-8914-8f20e8fd4990", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50184 is fixed in version 18.2.14-tuxcare.16 of @angular/service-worker." } }, { "id": "CVE-2026-50555", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:a2823151-5d01-50a8-861e-7534d3fd05b7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50555 is fixed in version 18.2.14-tuxcare.16 of @angular/service-worker." } }, { "id": "CVE-2026-50556", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:2cef94f9-47be-511b-bd6b-11092141e2d3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50556 is fixed in version 18.2.14-tuxcare.16 of @angular/service-worker." } }, { "id": "CVE-2026-50557", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:2266fe87-c858-5e57-b44e-de3ade27c970", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50557 is fixed in version 18.2.14-tuxcare.16 of @angular/service-worker." } }, { "id": "CVE-2026-52725", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:311bc929-3f90-5a7c-89b2-0689091a5d0b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-52725 is fixed in version 18.2.14-tuxcare.16 of @angular/service-worker." } }, { "id": "CVE-2026-54264", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:3e52f8ac-c232-5a9f-a869-22ca52580490", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54264 is fixed in version 18.2.14-tuxcare.16 of @angular/service-worker." } }, { "id": "CVE-2026-54265", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:28107144-0484-5a07-b22f-96e71235de3e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54265 is fixed in version 18.2.14-tuxcare.16 of @angular/service-worker." } }, { "id": "CVE-2026-54266", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:8e0d9f4a-152d-518a-930a-501998104a34", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54266 is fixed in version 18.2.14-tuxcare.16 of @angular/service-worker." } }, { "id": "CVE-2026-54267", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:c3d869e2-1ad7-50f5-991e-4bc447a35885", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54267 is fixed in version 18.2.14-tuxcare.16 of @angular/service-worker." } }, { "id": "CVE-2026-54268", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:4375483e-0921-5da6-bba3-ef2bb6812ea7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54268 is fixed in version 18.2.14-tuxcare.16 of @angular/service-worker." } }, { "id": "CVE-2026-68945", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:57b48f03-f29c-598d-b22f-3a56052d1ba6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-68945 is fixed in version 18.2.14-tuxcare.16 of @angular/service-worker." } }, { "id": "CVE-2026-69149", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:48fd45d8-46df-528d-8cba-71349660a987", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69149 is fixed in version 18.2.14-tuxcare.16 of @angular/service-worker." } }, { "id": "CVE-2026-69151", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:70e55892-37a9-512f-a0f6-4fae2304ca4b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69151 is fixed in version 18.2.14-tuxcare.16 of @angular/service-worker." } }, { "id": "CVE-2026-88056", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:e7a86263-b5a1-57e6-83a5-e89207e7d92b", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88056 does not affect version 18.2.14-tuxcare.16 of @angular/service-worker. not_affected \u2014 The target version 18.2.14-tuxcare.13 is NOT affected by CVE-2026-88056. The vulnerable code pattern (calling String.prototype.trim() on URL strings before resolution) was never present in this version. The target uses a refactored parseUrl() implementation introduced via commit 49a60f6045 (May 2026) that correctly handles Unicode whitespace by percent-encoding it rather than stripping it, main...", "justification": "code_not_present" } }, { "id": "CVE-2026-88057", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:fb4ec808-86d0-5b40-93d4-329a24346c74", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88057 is fixed in version 18.2.14-tuxcare.16 of @angular/service-worker." } }, { "id": "CVE-2026-88058", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:900fbaaa-eed7-5e15-9ca9-f0e752084c44", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88058 is fixed in version 18.2.14-tuxcare.16 of @angular/service-worker." } }, { "id": "CVE-2026-88059", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:c8afa0b0-fc93-5676-a6d0-889988ba89a3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88059 is fixed in version 18.2.14-tuxcare.16 of @angular/service-worker." } }, { "id": "CVE-2026-88060", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.16" } ], "bom-ref": "urn:uuid:43374d7b-7bd4-542c-857b-6f1e5cff00ae", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88060 is fixed in version 18.2.14-tuxcare.16 of @angular/service-worker." } } ], "dependencies": [ { "ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.16" } ] }