{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:5b98d9f0-ff07-54fd-b041-9f9460cf1b5f", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@angular/elements", "purl": "pkg:npm/%40angular/elements@12.2.17-tuxcare.10", "type": "library", "bom-ref": "pkg:npm/%40angular/elements@12.2.17-tuxcare.10", "version": "12.2.17-tuxcare.10", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-66035", "affects": [ { "ref": "pkg:npm/%40angular/elements@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:4578c928-c15e-503f-a08c-7d0d6c1e51da", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 12.2.17-tuxcare.10 of @angular/elements." } }, { "id": "CVE-2025-66412", "affects": [ { "ref": "pkg:npm/%40angular/elements@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:adf6c047-c74e-5811-9f0f-6aceed46f07d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 12.2.17-tuxcare.10 of @angular/elements." } }, { "id": "CVE-2026-22610", "affects": [ { "ref": "pkg:npm/%40angular/elements@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:aa8195c6-be9f-5f87-afb3-fc2766b66bbc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22610 is fixed in version 12.2.17-tuxcare.10 of @angular/elements." } }, { "id": "CVE-2026-27970", "affects": [ { "ref": "pkg:npm/%40angular/elements@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:f3038fa7-3186-51e3-afea-e0024458d4db", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27970 is fixed in version 12.2.17-tuxcare.10 of @angular/elements." } }, { "id": "CVE-2026-46417", "affects": [ { "ref": "pkg:npm/%40angular/elements@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:d28379c8-9eea-5800-bd8b-47a6721b8305", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46417 is fixed in version 12.2.17-tuxcare.10 of @angular/elements." } }, { "id": "CVE-2026-50168", "affects": [ { "ref": "pkg:npm/%40angular/elements@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:99805c8b-874c-5211-afc6-8228381f755e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50168 is fixed in version 12.2.17-tuxcare.10 of @angular/elements." } }, { "id": "CVE-2026-50169", "affects": [ { "ref": "pkg:npm/%40angular/elements@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:2e235f48-88f1-59fb-873e-ff923a066173", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50169 is fixed in version 12.2.17-tuxcare.10 of @angular/elements." } }, { "id": "CVE-2026-50170", "affects": [ { "ref": "pkg:npm/%40angular/elements@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:bb5dde3a-17ec-538b-9ef6-3cfc76883ad5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50170 is fixed in version 12.2.17-tuxcare.10 of @angular/elements." } }, { "id": "CVE-2026-50171", "affects": [ { "ref": "pkg:npm/%40angular/elements@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:4b898f54-9ba2-566f-b672-c31189d5c97e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50171 is fixed in version 12.2.17-tuxcare.10 of @angular/elements." } }, { "id": "CVE-2026-50184", "affects": [ { "ref": "pkg:npm/%40angular/elements@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:5b63b629-bb38-5198-99cc-a252800dbcc4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50184 is fixed in version 12.2.17-tuxcare.10 of @angular/elements." } }, { "id": "CVE-2026-50555", "affects": [ { "ref": "pkg:npm/%40angular/elements@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:bb6fc529-0d9f-5971-86e9-c8d52fdc9b89", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50555 is fixed in version 12.2.17-tuxcare.10 of @angular/elements." } }, { "id": "CVE-2026-50556", "affects": [ { "ref": "pkg:npm/%40angular/elements@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:fd0529a8-7f5c-5d4d-a67e-72e0337c430a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50556 is fixed in version 12.2.17-tuxcare.10 of @angular/elements." } }, { "id": "CVE-2026-50557", "affects": [ { "ref": "pkg:npm/%40angular/elements@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:2099fb54-765c-5665-a277-d5db96c498f5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50557 is fixed in version 12.2.17-tuxcare.10 of @angular/elements." } }, { "id": "CVE-2026-52725", "affects": [ { "ref": "pkg:npm/%40angular/elements@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:78f075d8-ffd9-5ced-a711-cd58e1ddc1bb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-52725 is fixed in version 12.2.17-tuxcare.10 of @angular/elements." } }, { "id": "CVE-2026-54264", "affects": [ { "ref": "pkg:npm/%40angular/elements@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:dc4d2f23-675f-5370-a127-0c3894ab92a4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54264 is fixed in version 12.2.17-tuxcare.10 of @angular/elements." } }, { "id": "CVE-2026-54265", "affects": [ { "ref": "pkg:npm/%40angular/elements@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:c7da7174-804c-5283-811a-b789723b1753", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54265 is fixed in version 12.2.17-tuxcare.10 of @angular/elements." } }, { "id": "CVE-2026-54266", "affects": [ { "ref": "pkg:npm/%40angular/elements@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:913b1bd5-a50a-5f4f-9aec-71c6100547b6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54266 is fixed in version 12.2.17-tuxcare.10 of @angular/elements." } }, { "id": "CVE-2026-54267", "affects": [ { "ref": "pkg:npm/%40angular/elements@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:b0cf9bbd-ef48-50dd-877f-cb9a83685c99", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54267 is fixed in version 12.2.17-tuxcare.10 of @angular/elements." } }, { "id": "CVE-2026-54268", "affects": [ { "ref": "pkg:npm/%40angular/elements@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:ab16753c-8fed-5785-8707-a86fd4348e56", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54268 is fixed in version 12.2.17-tuxcare.10 of @angular/elements." } }, { "id": "CVE-2026-68945", "affects": [ { "ref": "pkg:npm/%40angular/elements@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:83ca8e89-f1ec-50a7-94b4-d98ca641ad4d", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-68945 does not affect version 12.2.17-tuxcare.10 of @angular/elements. not_affected \u2014 Angular 12.2.17 does not contain the HttpTransferCache feature affected by CVE-2026-68945. HttpTransferCache, which caches HTTP requests during Server-Side Rendering (SSR), was first introduced in Angular 16.0.0\u2014approximately 4 major versions after the target version. The vulnerability concerns cache-key collision when repeated HTTP parameters are serialized, but since the entire HttpTransferCa...", "justification": "code_not_present" } }, { "id": "CVE-2026-69149", "affects": [ { "ref": "pkg:npm/%40angular/elements@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:bff02680-23c3-599e-a39b-1e40fe8943ee", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69149 is fixed in version 12.2.17-tuxcare.10 of @angular/elements." } }, { "id": "CVE-2026-69151", "affects": [ { "ref": "pkg:npm/%40angular/elements@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:b394b272-0dba-5ff3-82ee-5a236f2f2aac", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69151 is fixed in version 12.2.17-tuxcare.10 of @angular/elements." } }, { "id": "CVE-2026-88056", "affects": [ { "ref": "pkg:npm/%40angular/elements@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:59a66538-6226-5924-98b8-987db7e9f645", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88056 affects version 12.2.17-tuxcare.10 of @angular/elements." } }, { "id": "CVE-2026-88057", "affects": [ { "ref": "pkg:npm/%40angular/elements@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:acfc1971-5340-5342-b467-85cd8d76b13f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88057 affects version 12.2.17-tuxcare.10 of @angular/elements." } }, { "id": "CVE-2026-88059", "affects": [ { "ref": "pkg:npm/%40angular/elements@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:b6928f89-388e-539a-b639-d0205afd5d58", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88059 does not affect version 12.2.17-tuxcare.10 of @angular/elements. not_affected \u2014 Angular 12.2.17-tuxcare.9 is not affected by CVE-2026-88059. The vulnerability requires HttpTransferCache, withRequestsMadeViaParent(), and provideClientHydration() features which were introduced in Angular 16.0.0. This version uses the older module-based HttpClientModule system and lacks the entire SSR hydration transfer-cache infrastructure. The vulnerable code pattern described in the CVE do...", "justification": "code_not_present" } }, { "id": "CVE-2026-88060", "affects": [ { "ref": "pkg:npm/%40angular/elements@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:fa62aaca-9817-5fad-9de8-8499f0a9b07e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88060 affects version 12.2.17-tuxcare.10 of @angular/elements." } } ], "dependencies": [ { "ref": "pkg:npm/%40angular/elements@12.2.17-tuxcare.10" } ] }