{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:0a0275e3-a9b6-5a91-a911-2e7980f34d75", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@angular/animations", "purl": "pkg:npm/%40angular/animations@17.3.12-tuxcare.15", "type": "library", "bom-ref": "pkg:npm/%40angular/animations@17.3.12-tuxcare.15", "version": "17.3.12-tuxcare.15", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-59052", "affects": [ { "ref": "pkg:npm/%40angular/animations@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:7586f426-6f91-5707-802a-3a51fbfbf84b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59052 is fixed in version 17.3.12-tuxcare.15 of @angular/animations." } }, { "id": "CVE-2025-66035", "affects": [ { "ref": "pkg:npm/%40angular/animations@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:96de6f54-0b6b-569d-b8ec-43f3e2ffd962", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 17.3.12-tuxcare.15 of @angular/animations." } }, { "id": "CVE-2025-66412", "affects": [ { "ref": "pkg:npm/%40angular/animations@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:83645e3f-7b8d-5900-864c-e24c7a2b38ce", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 17.3.12-tuxcare.15 of @angular/animations." } }, { "id": "CVE-2026-22610", "affects": [ { "ref": "pkg:npm/%40angular/animations@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:3d3fb942-9604-564f-95e8-cb7610e7a100", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22610 is fixed in version 17.3.12-tuxcare.15 of @angular/animations." } }, { "id": "CVE-2026-27970", "affects": [ { "ref": "pkg:npm/%40angular/animations@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:904588c8-ac58-5009-8cac-ecdfd186f60e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27970 is fixed in version 17.3.12-tuxcare.15 of @angular/animations." } }, { "id": "CVE-2026-32635", "affects": [ { "ref": "pkg:npm/%40angular/animations@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:c60ef790-948b-5572-a9ad-9afa8cb9b643", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-32635 is fixed in version 17.3.12-tuxcare.15 of @angular/animations." } }, { "id": "CVE-2026-46417", "affects": [ { "ref": "pkg:npm/%40angular/animations@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:667f69aa-1b00-5485-bf17-81a8ca7d0b55", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46417 is fixed in version 17.3.12-tuxcare.15 of @angular/animations." } }, { "id": "CVE-2026-50168", "affects": [ { "ref": "pkg:npm/%40angular/animations@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:da346806-9f7e-5126-a042-cdc0c673e8b6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50168 is fixed in version 17.3.12-tuxcare.15 of @angular/animations." } }, { "id": "CVE-2026-50169", "affects": [ { "ref": "pkg:npm/%40angular/animations@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:344c336b-c34f-5cfc-81c3-79ad5c4f94df", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50169 is fixed in version 17.3.12-tuxcare.15 of @angular/animations." } }, { "id": "CVE-2026-50170", "affects": [ { "ref": "pkg:npm/%40angular/animations@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:e02ee9f9-13c2-51aa-9b07-44b4ca74ebfa", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50170 is fixed in version 17.3.12-tuxcare.15 of @angular/animations." } }, { "id": "CVE-2026-50171", "affects": [ { "ref": "pkg:npm/%40angular/animations@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:378c7a37-dc84-59d9-8b12-0b6f8490b2eb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50171 is fixed in version 17.3.12-tuxcare.15 of @angular/animations." } }, { "id": "CVE-2026-50184", "affects": [ { "ref": "pkg:npm/%40angular/animations@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:3966af1b-d6f8-5a72-adda-4ef6583ca97d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50184 is fixed in version 17.3.12-tuxcare.15 of @angular/animations." } }, { "id": "CVE-2026-50555", "affects": [ { "ref": "pkg:npm/%40angular/animations@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:07eb5bd5-dad7-5925-b63a-d2e930a6a8ff", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50555 is fixed in version 17.3.12-tuxcare.15 of @angular/animations." } }, { "id": "CVE-2026-50556", "affects": [ { "ref": "pkg:npm/%40angular/animations@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:25935cf8-76b4-5977-ab17-e52458ebf978", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50556 is fixed in version 17.3.12-tuxcare.15 of @angular/animations." } }, { "id": "CVE-2026-50557", "affects": [ { "ref": "pkg:npm/%40angular/animations@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:99ef0435-e354-5ef5-9043-f1ba9a2105ef", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50557 is fixed in version 17.3.12-tuxcare.15 of @angular/animations." } }, { "id": "CVE-2026-52725", "affects": [ { "ref": "pkg:npm/%40angular/animations@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:6718e4b3-1685-5dab-805e-2da99fd6539d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-52725 is fixed in version 17.3.12-tuxcare.15 of @angular/animations." } }, { "id": "CVE-2026-54264", "affects": [ { "ref": "pkg:npm/%40angular/animations@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:5a8d7620-2bec-5ddc-9b8c-053d6e8699a1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54264 is fixed in version 17.3.12-tuxcare.15 of @angular/animations." } }, { "id": "CVE-2026-54265", "affects": [ { "ref": "pkg:npm/%40angular/animations@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:ae7aacf6-80aa-5abc-b37e-0570187ef303", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54265 is fixed in version 17.3.12-tuxcare.15 of @angular/animations." } }, { "id": "CVE-2026-54266", "affects": [ { "ref": "pkg:npm/%40angular/animations@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:e45c2a1a-096e-5632-9c1b-efa5a30834e0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54266 is fixed in version 17.3.12-tuxcare.15 of @angular/animations." } }, { "id": "CVE-2026-54267", "affects": [ { "ref": "pkg:npm/%40angular/animations@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:8cd65f80-40ef-5070-8489-151012da85ac", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54267 is fixed in version 17.3.12-tuxcare.15 of @angular/animations." } }, { "id": "CVE-2026-54268", "affects": [ { "ref": "pkg:npm/%40angular/animations@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:a6b65aff-b248-5816-bf00-98ef69e3b9e8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54268 is fixed in version 17.3.12-tuxcare.15 of @angular/animations." } }, { "id": "CVE-2026-68945", "affects": [ { "ref": "pkg:npm/%40angular/animations@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:227b0959-a102-5350-b957-62e962563f34", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-68945 is fixed in version 17.3.12-tuxcare.15 of @angular/animations." } }, { "id": "CVE-2026-69149", "affects": [ { "ref": "pkg:npm/%40angular/animations@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:b56aafa9-fe6a-5ba0-92c4-f1e10fbfedb4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69149 is fixed in version 17.3.12-tuxcare.15 of @angular/animations." } }, { "id": "CVE-2026-69151", "affects": [ { "ref": "pkg:npm/%40angular/animations@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:0dac47cd-cb1c-56da-b933-dba0ecb20788", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69151 is fixed in version 17.3.12-tuxcare.15 of @angular/animations." } }, { "id": "CVE-2026-88056", "affects": [ { "ref": "pkg:npm/%40angular/animations@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:2a3c3fc4-1ab8-576f-903a-f8d212983332", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88056 does not affect version 17.3.12-tuxcare.15 of @angular/animations. not_affected \u2014 Version 17.3.12 is not affected by CVE-2026-88056. The vulnerability involves String.prototype.trim() being applied during URL resolution in Angular's platform-server, converting validated same-origin URLs with Unicode whitespace into cross-origin protocol-relative URLs, leading to SSRF. This vulnerable code pattern was introduced in newer Angular versions (v20+) and does not exist in version 1...", "justification": "code_not_present" } }, { "id": "CVE-2026-88057", "affects": [ { "ref": "pkg:npm/%40angular/animations@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:5f8656f7-0ee1-5f35-83bd-38eeffabae30", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88057 affects version 17.3.12-tuxcare.15 of @angular/animations." } }, { "id": "CVE-2026-88059", "affects": [ { "ref": "pkg:npm/%40angular/animations@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:5095dc33-b553-5e5a-baf2-c0d5a6f8006f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88059 affects version 17.3.12-tuxcare.15 of @angular/animations." } }, { "id": "CVE-2026-88060", "affects": [ { "ref": "pkg:npm/%40angular/animations@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:b0061751-0581-5163-8f4f-7bf3128741f8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88060 affects version 17.3.12-tuxcare.15 of @angular/animations." } } ], "dependencies": [ { "ref": "pkg:npm/%40angular/animations@17.3.12-tuxcare.15" } ] }