{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:119bd949-fd4f-5bca-a0d7-502f6cca4967", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@angular/animations", "purl": "pkg:npm/%40angular/animations@12.2.17-tuxcare.10", "type": "library", "bom-ref": "pkg:npm/%40angular/animations@12.2.17-tuxcare.10", "version": "12.2.17-tuxcare.10", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-66035", "affects": [ { "ref": "pkg:npm/%40angular/animations@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:956989c1-5aae-5f94-8870-4c86f05f92ee", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 12.2.17-tuxcare.10 of @angular/animations." } }, { "id": "CVE-2025-66412", "affects": [ { "ref": "pkg:npm/%40angular/animations@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:828bca64-14a2-5201-ab92-c5afef70e1ce", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 12.2.17-tuxcare.10 of @angular/animations." } }, { "id": "CVE-2026-22610", "affects": [ { "ref": "pkg:npm/%40angular/animations@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:bc73dfb4-60c4-5f89-9102-05a8bf4b96a8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22610 is fixed in version 12.2.17-tuxcare.10 of @angular/animations." } }, { "id": "CVE-2026-27970", "affects": [ { "ref": "pkg:npm/%40angular/animations@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:334cccd0-a14a-5301-81a2-6c318639d7e0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27970 is fixed in version 12.2.17-tuxcare.10 of @angular/animations." } }, { "id": "CVE-2026-46417", "affects": [ { "ref": "pkg:npm/%40angular/animations@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:903cef48-4cd0-530c-be3a-3c7716f0092d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46417 is fixed in version 12.2.17-tuxcare.10 of @angular/animations." } }, { "id": "CVE-2026-50168", "affects": [ { "ref": "pkg:npm/%40angular/animations@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:0f5cb2a7-be60-501f-84a2-5f13d43ea532", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50168 is fixed in version 12.2.17-tuxcare.10 of @angular/animations." } }, { "id": "CVE-2026-50169", "affects": [ { "ref": "pkg:npm/%40angular/animations@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:e64c846e-4754-5e42-a08a-d2b2a97d4164", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50169 is fixed in version 12.2.17-tuxcare.10 of @angular/animations." } }, { "id": "CVE-2026-50170", "affects": [ { "ref": "pkg:npm/%40angular/animations@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:b37946d5-c5e7-553e-8359-d33e158f06f7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50170 is fixed in version 12.2.17-tuxcare.10 of @angular/animations." } }, { "id": "CVE-2026-50171", "affects": [ { "ref": "pkg:npm/%40angular/animations@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:c614fc44-f0a8-55dd-ab23-3c13350bf3db", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50171 is fixed in version 12.2.17-tuxcare.10 of @angular/animations." } }, { "id": "CVE-2026-50184", "affects": [ { "ref": "pkg:npm/%40angular/animations@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:5709c8bf-583c-570b-8155-4cc305ba7790", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50184 is fixed in version 12.2.17-tuxcare.10 of @angular/animations." } }, { "id": "CVE-2026-50555", "affects": [ { "ref": "pkg:npm/%40angular/animations@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:d519ed1e-5b0c-53f3-a181-c9c984b161ba", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50555 is fixed in version 12.2.17-tuxcare.10 of @angular/animations." } }, { "id": "CVE-2026-50556", "affects": [ { "ref": "pkg:npm/%40angular/animations@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:670c987d-2c43-508d-a416-29ae95581b65", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50556 is fixed in version 12.2.17-tuxcare.10 of @angular/animations." } }, { "id": "CVE-2026-50557", "affects": [ { "ref": "pkg:npm/%40angular/animations@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:b8256af3-2178-53b2-9ab1-04e96d4b6512", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50557 is fixed in version 12.2.17-tuxcare.10 of @angular/animations." } }, { "id": "CVE-2026-52725", "affects": [ { "ref": "pkg:npm/%40angular/animations@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:ba13f06f-19e2-50ba-b0b2-df8f06558c39", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-52725 is fixed in version 12.2.17-tuxcare.10 of @angular/animations." } }, { "id": "CVE-2026-54264", "affects": [ { "ref": "pkg:npm/%40angular/animations@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:e6494724-bd56-566c-a916-e53fe7175125", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54264 is fixed in version 12.2.17-tuxcare.10 of @angular/animations." } }, { "id": "CVE-2026-54265", "affects": [ { "ref": "pkg:npm/%40angular/animations@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:ab27f4b8-2781-5fe3-8791-1ef34e18fd34", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54265 is fixed in version 12.2.17-tuxcare.10 of @angular/animations." } }, { "id": "CVE-2026-54266", "affects": [ { "ref": "pkg:npm/%40angular/animations@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:463d7e9a-5aeb-55e2-828e-6c2e5e0c827e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54266 is fixed in version 12.2.17-tuxcare.10 of @angular/animations." } }, { "id": "CVE-2026-54267", "affects": [ { "ref": "pkg:npm/%40angular/animations@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:72fc7e38-f59f-51ce-946a-42be15b2cc18", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54267 is fixed in version 12.2.17-tuxcare.10 of @angular/animations." } }, { "id": "CVE-2026-54268", "affects": [ { "ref": "pkg:npm/%40angular/animations@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:168dc51a-43ee-5022-8adb-ae4c4f1c6e2c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54268 is fixed in version 12.2.17-tuxcare.10 of @angular/animations." } }, { "id": "CVE-2026-68945", "affects": [ { "ref": "pkg:npm/%40angular/animations@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:9d67b82d-830b-5806-85cb-ebaf2cf9ec3f", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-68945 does not affect version 12.2.17-tuxcare.10 of @angular/animations. not_affected \u2014 Angular 12.2.17 does not contain the HttpTransferCache feature affected by CVE-2026-68945. HttpTransferCache, which caches HTTP requests during Server-Side Rendering (SSR), was first introduced in Angular 16.0.0\u2014approximately 4 major versions after the target version. The vulnerability concerns cache-key collision when repeated HTTP parameters are serialized, but since the entire HttpTransferCa...", "justification": "code_not_present" } }, { "id": "CVE-2026-69149", "affects": [ { "ref": "pkg:npm/%40angular/animations@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:412bfc5a-7b8e-5794-89dc-513eea880d79", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69149 is fixed in version 12.2.17-tuxcare.10 of @angular/animations." } }, { "id": "CVE-2026-69151", "affects": [ { "ref": "pkg:npm/%40angular/animations@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:09e30a4a-6cff-552c-9d63-a07455987dab", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69151 is fixed in version 12.2.17-tuxcare.10 of @angular/animations." } }, { "id": "CVE-2026-88056", "affects": [ { "ref": "pkg:npm/%40angular/animations@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:dee6dc08-69c1-5d77-9979-3074239bb287", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88056 affects version 12.2.17-tuxcare.10 of @angular/animations." } }, { "id": "CVE-2026-88057", "affects": [ { "ref": "pkg:npm/%40angular/animations@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:7b779038-8d42-5ec2-b8e8-9917e6258b3a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88057 affects version 12.2.17-tuxcare.10 of @angular/animations." } }, { "id": "CVE-2026-88059", "affects": [ { "ref": "pkg:npm/%40angular/animations@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:5d928472-bfa4-5eb5-b393-1023cee3758a", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88059 does not affect version 12.2.17-tuxcare.10 of @angular/animations. not_affected \u2014 Angular 12.2.17-tuxcare.9 is not affected by CVE-2026-88059. The vulnerability requires HttpTransferCache, withRequestsMadeViaParent(), and provideClientHydration() features which were introduced in Angular 16.0.0. This version uses the older module-based HttpClientModule system and lacks the entire SSR hydration transfer-cache infrastructure. The vulnerable code pattern described in the CVE do...", "justification": "code_not_present" } }, { "id": "CVE-2026-88060", "affects": [ { "ref": "pkg:npm/%40angular/animations@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:a9a3a56f-dc3f-5d2c-bf7d-303536a7b894", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88060 affects version 12.2.17-tuxcare.10 of @angular/animations." } } ], "dependencies": [ { "ref": "pkg:npm/%40angular/animations@12.2.17-tuxcare.10" } ] }