{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:0108960b-23ba-5cf2-b5df-977fd8621daa", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@angular/compiler-cli", "purl": "pkg:npm/%40angular/compiler-cli@17.3.12-tuxcare.15", "type": "library", "bom-ref": "pkg:npm/%40angular/compiler-cli@17.3.12-tuxcare.15", "version": "17.3.12-tuxcare.15", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-59052", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:0af9f25c-39b3-5137-a268-e66eb86cfa73", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59052 is fixed in version 17.3.12-tuxcare.15 of @angular/compiler-cli." } }, { "id": "CVE-2025-66035", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:3fe03071-8492-5d15-a655-2d3f79c1867c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 17.3.12-tuxcare.15 of @angular/compiler-cli." } }, { "id": "CVE-2025-66412", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:0468c92d-d84f-536c-a43b-50928ac62e93", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 17.3.12-tuxcare.15 of @angular/compiler-cli." } }, { "id": "CVE-2026-22610", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:5a60561d-7c2f-5636-9f46-a1e7e8a50436", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22610 is fixed in version 17.3.12-tuxcare.15 of @angular/compiler-cli." } }, { "id": "CVE-2026-27970", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:410a367d-76b5-554e-be37-e9012cb279c7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27970 is fixed in version 17.3.12-tuxcare.15 of @angular/compiler-cli." } }, { "id": "CVE-2026-32635", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:f2b6dd63-1e26-501e-b758-670fd0693fb9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-32635 is fixed in version 17.3.12-tuxcare.15 of @angular/compiler-cli." } }, { "id": "CVE-2026-46417", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:a68459f4-0d8e-5321-8557-0eed282f81aa", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46417 is fixed in version 17.3.12-tuxcare.15 of @angular/compiler-cli." } }, { "id": "CVE-2026-50168", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:6f1f9bfc-e015-52a4-a506-bc5ea22ba12f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50168 is fixed in version 17.3.12-tuxcare.15 of @angular/compiler-cli." } }, { "id": "CVE-2026-50169", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:2750c41e-77d9-5f8e-8bef-c57e2fe9174f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50169 is fixed in version 17.3.12-tuxcare.15 of @angular/compiler-cli." } }, { "id": "CVE-2026-50170", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:07622996-c272-517d-8043-d0828997d42d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50170 is fixed in version 17.3.12-tuxcare.15 of @angular/compiler-cli." } }, { "id": "CVE-2026-50171", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:d2005374-56fe-5e2d-9432-90ef432d5d68", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50171 is fixed in version 17.3.12-tuxcare.15 of @angular/compiler-cli." } }, { "id": "CVE-2026-50184", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:2e730dac-b40d-5ee1-a3eb-d8bc58054164", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50184 is fixed in version 17.3.12-tuxcare.15 of @angular/compiler-cli." } }, { "id": "CVE-2026-50555", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:fa1f9389-22d4-5d42-a48b-71f7ece89fba", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50555 is fixed in version 17.3.12-tuxcare.15 of @angular/compiler-cli." } }, { "id": "CVE-2026-50556", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:7b4e5486-0486-54d1-a2b5-524785efc2ae", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50556 is fixed in version 17.3.12-tuxcare.15 of @angular/compiler-cli." } }, { "id": "CVE-2026-50557", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:e2e1bbb5-7496-517b-b836-713bf7c332f5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50557 is fixed in version 17.3.12-tuxcare.15 of @angular/compiler-cli." } }, { "id": "CVE-2026-52725", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:7bb4a7ba-10cf-5142-a06f-8d99f3d2fe09", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-52725 is fixed in version 17.3.12-tuxcare.15 of @angular/compiler-cli." } }, { "id": "CVE-2026-54264", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:d9d0dd25-b192-5bc9-a256-589d82af968e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54264 is fixed in version 17.3.12-tuxcare.15 of @angular/compiler-cli." } }, { "id": "CVE-2026-54265", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:5465031c-96b8-598b-97ec-e7e0f20dd9a5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54265 is fixed in version 17.3.12-tuxcare.15 of @angular/compiler-cli." } }, { "id": "CVE-2026-54266", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:7b52db1d-6942-5925-9ee6-24895ea669e1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54266 is fixed in version 17.3.12-tuxcare.15 of @angular/compiler-cli." } }, { "id": "CVE-2026-54267", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:5ae3b971-078c-557f-a296-5e961634681d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54267 is fixed in version 17.3.12-tuxcare.15 of @angular/compiler-cli." } }, { "id": "CVE-2026-54268", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:47b1b366-9e8b-56f8-a15a-0477769d4a35", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54268 is fixed in version 17.3.12-tuxcare.15 of @angular/compiler-cli." } }, { "id": "CVE-2026-68945", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:db600cc9-a2c0-5b6c-bf05-7b268bbbb29b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-68945 is fixed in version 17.3.12-tuxcare.15 of @angular/compiler-cli." } }, { "id": "CVE-2026-69149", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:088f7bcc-fe56-5c62-910b-d153e0083a05", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69149 is fixed in version 17.3.12-tuxcare.15 of @angular/compiler-cli." } }, { "id": "CVE-2026-69151", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:db9b5f7a-29d5-545d-8489-f754a1c7bf1f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69151 is fixed in version 17.3.12-tuxcare.15 of @angular/compiler-cli." } }, { "id": "CVE-2026-88056", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:de879522-53fa-52cf-86a4-2b9207d08320", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88056 does not affect version 17.3.12-tuxcare.15 of @angular/compiler-cli. not_affected \u2014 Version 17.3.12 is not affected by CVE-2026-88056. The vulnerability involves String.prototype.trim() being applied during URL resolution in Angular's platform-server, converting validated same-origin URLs with Unicode whitespace into cross-origin protocol-relative URLs, leading to SSRF. This vulnerable code pattern was introduced in newer Angular versions (v20+) and does not exist in version 1...", "justification": "code_not_present" } }, { "id": "CVE-2026-88057", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:a67a0b9d-198f-57b2-94ad-61bd0c9aab57", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88057 affects version 17.3.12-tuxcare.15 of @angular/compiler-cli." } }, { "id": "CVE-2026-88059", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:5e35728f-7e4c-5674-b1cb-dea8b1c3ac7a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88059 affects version 17.3.12-tuxcare.15 of @angular/compiler-cli." } }, { "id": "CVE-2026-88060", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:6fd31948-caae-5e2e-b2cf-bcab169c0247", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88060 affects version 17.3.12-tuxcare.15 of @angular/compiler-cli." } } ], "dependencies": [ { "ref": "pkg:npm/%40angular/compiler-cli@17.3.12-tuxcare.15" } ] }