{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:e46709d9-f20f-50e5-b651-4bfe2b352169", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@angular/compiler-cli", "purl": "pkg:npm/%40angular/compiler-cli@16.2.11-tuxcare.3", "type": "library", "bom-ref": "pkg:npm/%40angular/compiler-cli@16.2.11-tuxcare.3", "version": "16.2.11-tuxcare.3", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-59052", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@16.2.11-tuxcare.3" } ], "bom-ref": "urn:uuid:a6b2bee7-6169-5637-b2fb-f84f6d0c45e4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-59052 affects version 16.2.11-tuxcare.3 of @angular/compiler-cli." } }, { "id": "CVE-2025-66035", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@16.2.11-tuxcare.3" } ], "bom-ref": "urn:uuid:acec2fdb-505f-59c4-820e-2a515dbe3e40", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 16.2.11-tuxcare.3 of @angular/compiler-cli." } }, { "id": "CVE-2025-66412", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@16.2.11-tuxcare.3" } ], "bom-ref": "urn:uuid:ac7c36c2-0274-51fc-9040-c45ad69d1656", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 16.2.11-tuxcare.3 of @angular/compiler-cli." } }, { "id": "CVE-2026-22610", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@16.2.11-tuxcare.3" } ], "bom-ref": "urn:uuid:fcdf57a7-9993-55a1-a61a-0ad3dd863e39", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22610 is fixed in version 16.2.11-tuxcare.3 of @angular/compiler-cli." } }, { "id": "CVE-2026-27970", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@16.2.11-tuxcare.3" } ], "bom-ref": "urn:uuid:2a481804-b402-5fcb-9177-63e063068e28", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27970 is fixed in version 16.2.11-tuxcare.3 of @angular/compiler-cli." } }, { "id": "CVE-2026-41423", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@16.2.11-tuxcare.3" } ], "bom-ref": "urn:uuid:bacaa794-4ca1-552a-858e-e44f5355beeb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41423 is fixed in version 16.2.11-tuxcare.3 of @angular/compiler-cli." } }, { "id": "CVE-2026-46417", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@16.2.11-tuxcare.3" } ], "bom-ref": "urn:uuid:e96ca4c8-386f-5fd7-b9c8-4abd627f2c72", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46417 is fixed in version 16.2.11-tuxcare.3 of @angular/compiler-cli." } }, { "id": "CVE-2026-50168", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@16.2.11-tuxcare.3" } ], "bom-ref": "urn:uuid:087facea-2cd8-56bc-9e88-18995b1a893a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50168 is fixed in version 16.2.11-tuxcare.3 of @angular/compiler-cli." } }, { "id": "CVE-2026-50169", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@16.2.11-tuxcare.3" } ], "bom-ref": "urn:uuid:a33d86ad-e4ad-51c0-98d5-fe7a6772cb8a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50169 is fixed in version 16.2.11-tuxcare.3 of @angular/compiler-cli." } }, { "id": "CVE-2026-50170", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@16.2.11-tuxcare.3" } ], "bom-ref": "urn:uuid:adf510ad-f9e1-57af-8ee2-aa220a10c2c5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50170 is fixed in version 16.2.11-tuxcare.3 of @angular/compiler-cli." } }, { "id": "CVE-2026-50171", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@16.2.11-tuxcare.3" } ], "bom-ref": "urn:uuid:91429231-5769-532e-a029-35db16eed154", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50171 is fixed in version 16.2.11-tuxcare.3 of @angular/compiler-cli." } }, { "id": "CVE-2026-50184", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@16.2.11-tuxcare.3" } ], "bom-ref": "urn:uuid:72168624-f0c0-53ba-aee7-350278a02687", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50184 is fixed in version 16.2.11-tuxcare.3 of @angular/compiler-cli." } }, { "id": "CVE-2026-50555", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@16.2.11-tuxcare.3" } ], "bom-ref": "urn:uuid:4120c49f-805d-51c9-9b37-73f1fa79ac35", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50555 is fixed in version 16.2.11-tuxcare.3 of @angular/compiler-cli." } }, { "id": "CVE-2026-50556", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@16.2.11-tuxcare.3" } ], "bom-ref": "urn:uuid:00f26643-0f15-51b9-8874-6e10df5b09fa", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50556 is fixed in version 16.2.11-tuxcare.3 of @angular/compiler-cli." } }, { "id": "CVE-2026-50557", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@16.2.11-tuxcare.3" } ], "bom-ref": "urn:uuid:26b8d3d5-07b6-54f1-8777-fcf0120efc32", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50557 is fixed in version 16.2.11-tuxcare.3 of @angular/compiler-cli." } }, { "id": "CVE-2026-52725", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@16.2.11-tuxcare.3" } ], "bom-ref": "urn:uuid:3ee2feb6-5002-574a-b76f-996430e42dac", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-52725 is fixed in version 16.2.11-tuxcare.3 of @angular/compiler-cli." } }, { "id": "CVE-2026-54264", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@16.2.11-tuxcare.3" } ], "bom-ref": "urn:uuid:3565eb2b-790b-5af8-a48f-cd49b92e4720", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54264 is fixed in version 16.2.11-tuxcare.3 of @angular/compiler-cli." } }, { "id": "CVE-2026-54265", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@16.2.11-tuxcare.3" } ], "bom-ref": "urn:uuid:1783c76a-7085-5935-92cf-393199f9972d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54265 is fixed in version 16.2.11-tuxcare.3 of @angular/compiler-cli." } }, { "id": "CVE-2026-54266", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@16.2.11-tuxcare.3" } ], "bom-ref": "urn:uuid:7dac4205-f8ce-528f-9b8d-a112945c0839", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54266 is fixed in version 16.2.11-tuxcare.3 of @angular/compiler-cli." } }, { "id": "CVE-2026-54267", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@16.2.11-tuxcare.3" } ], "bom-ref": "urn:uuid:464189f7-e16e-5c59-b7dd-9670178a92e6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54267 is fixed in version 16.2.11-tuxcare.3 of @angular/compiler-cli." } }, { "id": "CVE-2026-54268", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@16.2.11-tuxcare.3" } ], "bom-ref": "urn:uuid:2f09aecc-c000-5b32-8c14-eab88ae11723", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54268 is fixed in version 16.2.11-tuxcare.3 of @angular/compiler-cli." } }, { "id": "CVE-2026-68945", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@16.2.11-tuxcare.3" } ], "bom-ref": "urn:uuid:08c63495-8a7e-5623-9658-01967eeafb3d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-68945 is fixed in version 16.2.11-tuxcare.3 of @angular/compiler-cli." } }, { "id": "CVE-2026-69149", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@16.2.11-tuxcare.3" } ], "bom-ref": "urn:uuid:cce6bc42-552c-50b5-8849-7e6b661a6443", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69149 is fixed in version 16.2.11-tuxcare.3 of @angular/compiler-cli." } }, { "id": "CVE-2026-69151", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@16.2.11-tuxcare.3" } ], "bom-ref": "urn:uuid:b23d1c05-998d-56d2-acf5-25564d7e9303", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69151 is fixed in version 16.2.11-tuxcare.3 of @angular/compiler-cli." } }, { "id": "CVE-2026-88056", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@16.2.11-tuxcare.3" } ], "bom-ref": "urn:uuid:d562cde6-bef9-5652-9e11-0cc463c15bb1", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88056 does not affect version 16.2.11-tuxcare.3 of @angular/compiler-cli. not_affected \u2014 Angular 16.2.11-tuxcare.2 is NOT affected by CVE-2026-88056. The vulnerability requires WHATWG URL validation combined with String.prototype.trim() on URLs during SSR, creating a discrepancy that enables SSRF. While the target uses WHATWG URL parsing (backported in commit c03fbfd7cc for CVE-2026-50168), it does NOT call String.prototype.trim() on URLs. The attack chain is broken at the trim() s...", "justification": "code_not_reachable" } }, { "id": "CVE-2026-88057", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@16.2.11-tuxcare.3" } ], "bom-ref": "urn:uuid:73cbc7cc-9413-592f-87b3-c983b89bb741", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88057 affects version 16.2.11-tuxcare.3 of @angular/compiler-cli." } }, { "id": "CVE-2026-88059", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@16.2.11-tuxcare.3" } ], "bom-ref": "urn:uuid:afe961fc-f729-5486-b318-c216a3d425b5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88059 affects version 16.2.11-tuxcare.3 of @angular/compiler-cli." } }, { "id": "CVE-2026-88060", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@16.2.11-tuxcare.3" } ], "bom-ref": "urn:uuid:eb66fb59-2910-5334-bba8-600c226d319e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88060 affects version 16.2.11-tuxcare.3 of @angular/compiler-cli." } } ], "dependencies": [ { "ref": "pkg:npm/%40angular/compiler-cli@16.2.11-tuxcare.3" } ] }