{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:38e93be7-8fe3-5ea8-9413-a00b752eb18c", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@angular/common", "purl": "pkg:npm/%40angular/common@17.3.12-tuxcare.15", "type": "library", "bom-ref": "pkg:npm/%40angular/common@17.3.12-tuxcare.15", "version": "17.3.12-tuxcare.15", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-59052", "affects": [ { "ref": "pkg:npm/%40angular/common@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:2194271b-6ebb-570b-99f6-c2abf4adcde8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59052 is fixed in version 17.3.12-tuxcare.15 of @angular/common." } }, { "id": "CVE-2025-66035", "affects": [ { "ref": "pkg:npm/%40angular/common@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:875cb8d5-a371-5a0d-a549-c1e0846b8218", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 17.3.12-tuxcare.15 of @angular/common." } }, { "id": "CVE-2025-66412", "affects": [ { "ref": "pkg:npm/%40angular/common@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:6f7fed7f-09b3-5fc6-a94b-b806f0f422ad", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 17.3.12-tuxcare.15 of @angular/common." } }, { "id": "CVE-2026-22610", "affects": [ { "ref": "pkg:npm/%40angular/common@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:1f9c4b20-4a73-5868-9b9e-7d7fb96a5262", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22610 is fixed in version 17.3.12-tuxcare.15 of @angular/common." } }, { "id": "CVE-2026-27970", "affects": [ { "ref": "pkg:npm/%40angular/common@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:c32f1d89-e4f8-583a-b5b2-b836a2829767", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27970 is fixed in version 17.3.12-tuxcare.15 of @angular/common." } }, { "id": "CVE-2026-32635", "affects": [ { "ref": "pkg:npm/%40angular/common@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:ee9389b3-02f3-5f73-b1c0-5cb31e11b8c0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-32635 is fixed in version 17.3.12-tuxcare.15 of @angular/common." } }, { "id": "CVE-2026-46417", "affects": [ { "ref": "pkg:npm/%40angular/common@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:b2caeca5-cb5c-5e8d-ac26-4edc26917689", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46417 is fixed in version 17.3.12-tuxcare.15 of @angular/common." } }, { "id": "CVE-2026-50168", "affects": [ { "ref": "pkg:npm/%40angular/common@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:9dbaf1fd-261e-5411-86d5-1915513303ea", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50168 is fixed in version 17.3.12-tuxcare.15 of @angular/common." } }, { "id": "CVE-2026-50169", "affects": [ { "ref": "pkg:npm/%40angular/common@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:621fff33-17a5-5dc0-b9d4-74e560ff36e5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50169 is fixed in version 17.3.12-tuxcare.15 of @angular/common." } }, { "id": "CVE-2026-50170", "affects": [ { "ref": "pkg:npm/%40angular/common@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:6c36bbb9-6f7c-514f-a64d-543928bbded1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50170 is fixed in version 17.3.12-tuxcare.15 of @angular/common." } }, { "id": "CVE-2026-50171", "affects": [ { "ref": "pkg:npm/%40angular/common@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:e39b5fc5-01eb-5423-88da-f06cae9a955f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50171 is fixed in version 17.3.12-tuxcare.15 of @angular/common." } }, { "id": "CVE-2026-50184", "affects": [ { "ref": "pkg:npm/%40angular/common@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:255d8e98-ab39-5266-9941-196f22845b44", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50184 is fixed in version 17.3.12-tuxcare.15 of @angular/common." } }, { "id": "CVE-2026-50555", "affects": [ { "ref": "pkg:npm/%40angular/common@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:dad64e7e-403b-5bc1-9ff1-0b6e6daaffb3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50555 is fixed in version 17.3.12-tuxcare.15 of @angular/common." } }, { "id": "CVE-2026-50556", "affects": [ { "ref": "pkg:npm/%40angular/common@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:13ea4db0-e6bd-5ac3-8e39-0e165c4171b3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50556 is fixed in version 17.3.12-tuxcare.15 of @angular/common." } }, { "id": "CVE-2026-50557", "affects": [ { "ref": "pkg:npm/%40angular/common@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:5cd3c99c-a58e-596b-ac16-8ddbba6cacf3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50557 is fixed in version 17.3.12-tuxcare.15 of @angular/common." } }, { "id": "CVE-2026-52725", "affects": [ { "ref": "pkg:npm/%40angular/common@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:87019efe-7bb5-5c23-88ac-937b5cb870a0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-52725 is fixed in version 17.3.12-tuxcare.15 of @angular/common." } }, { "id": "CVE-2026-54264", "affects": [ { "ref": "pkg:npm/%40angular/common@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:ade61132-da81-5460-ac45-3cc10db15c9a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54264 is fixed in version 17.3.12-tuxcare.15 of @angular/common." } }, { "id": "CVE-2026-54265", "affects": [ { "ref": "pkg:npm/%40angular/common@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:d25bce95-de5b-57b3-ab8d-f3f21c2d0bd6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54265 is fixed in version 17.3.12-tuxcare.15 of @angular/common." } }, { "id": "CVE-2026-54266", "affects": [ { "ref": "pkg:npm/%40angular/common@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:8397e737-fe09-59cd-909d-9969ae0dda7a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54266 is fixed in version 17.3.12-tuxcare.15 of @angular/common." } }, { "id": "CVE-2026-54267", "affects": [ { "ref": "pkg:npm/%40angular/common@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:c916cb2b-c579-5861-9992-b81050dbc45b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54267 is fixed in version 17.3.12-tuxcare.15 of @angular/common." } }, { "id": "CVE-2026-54268", "affects": [ { "ref": "pkg:npm/%40angular/common@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:019cf669-b2d8-5710-8553-633ecdeab714", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54268 is fixed in version 17.3.12-tuxcare.15 of @angular/common." } }, { "id": "CVE-2026-68945", "affects": [ { "ref": "pkg:npm/%40angular/common@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:b430360b-e65b-52d0-98ae-bf385ba5e786", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-68945 is fixed in version 17.3.12-tuxcare.15 of @angular/common." } }, { "id": "CVE-2026-69149", "affects": [ { "ref": "pkg:npm/%40angular/common@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:6f687b79-43d0-5a83-a422-a6667cc7ecdb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69149 is fixed in version 17.3.12-tuxcare.15 of @angular/common." } }, { "id": "CVE-2026-69151", "affects": [ { "ref": "pkg:npm/%40angular/common@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:50e83d2f-2e00-58a2-80c2-56ce3bfef332", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69151 is fixed in version 17.3.12-tuxcare.15 of @angular/common." } }, { "id": "CVE-2026-88056", "affects": [ { "ref": "pkg:npm/%40angular/common@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:08e6947e-54a1-57c3-9f95-381e1b36fa00", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88056 does not affect version 17.3.12-tuxcare.15 of @angular/common. not_affected \u2014 Version 17.3.12 is not affected by CVE-2026-88056. The vulnerability involves String.prototype.trim() being applied during URL resolution in Angular's platform-server, converting validated same-origin URLs with Unicode whitespace into cross-origin protocol-relative URLs, leading to SSRF. This vulnerable code pattern was introduced in newer Angular versions (v20+) and does not exist in version 1...", "justification": "code_not_present" } }, { "id": "CVE-2026-88057", "affects": [ { "ref": "pkg:npm/%40angular/common@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:f4927f2d-b62e-5d05-a95f-bbd54a34ab89", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88057 affects version 17.3.12-tuxcare.15 of @angular/common." } }, { "id": "CVE-2026-88059", "affects": [ { "ref": "pkg:npm/%40angular/common@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:9f692a3f-7dd4-56e8-a629-d3dd8b3dc89d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88059 affects version 17.3.12-tuxcare.15 of @angular/common." } }, { "id": "CVE-2026-88060", "affects": [ { "ref": "pkg:npm/%40angular/common@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:698496d8-51dd-5662-9d55-7ca8fa7e9313", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88060 affects version 17.3.12-tuxcare.15 of @angular/common." } } ], "dependencies": [ { "ref": "pkg:npm/%40angular/common@17.3.12-tuxcare.15" } ] }