{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:698b41f2-6938-5b57-aa18-0e09c7aa10bc", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@angular/forms", "purl": "pkg:npm/%40angular/forms@18.2.14-tuxcare.14", "type": "library", "bom-ref": "pkg:npm/%40angular/forms@18.2.14-tuxcare.14", "version": "18.2.14-tuxcare.14", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-66035", "affects": [ { "ref": "pkg:npm/%40angular/forms@18.2.14-tuxcare.14" } ], "bom-ref": "urn:uuid:6791430c-bc8c-5b54-a7da-63b5e9e76390", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 18.2.14-tuxcare.14 of @angular/forms." } }, { "id": "CVE-2025-66412", "affects": [ { "ref": "pkg:npm/%40angular/forms@18.2.14-tuxcare.14" } ], "bom-ref": "urn:uuid:bf07d90c-86e7-5eea-8e18-844ad21ec0e8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 18.2.14-tuxcare.14 of @angular/forms." } }, { "id": "CVE-2026-22610", "affects": [ { "ref": "pkg:npm/%40angular/forms@18.2.14-tuxcare.14" } ], "bom-ref": "urn:uuid:04b366ff-75d7-5ef9-a66b-e3b5ea7942e2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22610 is fixed in version 18.2.14-tuxcare.14 of @angular/forms." } }, { "id": "CVE-2026-27970", "affects": [ { "ref": "pkg:npm/%40angular/forms@18.2.14-tuxcare.14" } ], "bom-ref": "urn:uuid:edcb956e-50fd-594d-b048-9bc147a790d0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27970 is fixed in version 18.2.14-tuxcare.14 of @angular/forms." } }, { "id": "CVE-2026-32635", "affects": [ { "ref": "pkg:npm/%40angular/forms@18.2.14-tuxcare.14" } ], "bom-ref": "urn:uuid:3656eca3-ba81-5cc0-aabd-18cacf1f96f9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-32635 is fixed in version 18.2.14-tuxcare.14 of @angular/forms." } }, { "id": "CVE-2026-46417", "affects": [ { "ref": "pkg:npm/%40angular/forms@18.2.14-tuxcare.14" } ], "bom-ref": "urn:uuid:16c8ba29-4051-56aa-97a0-3a4447be7e7e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46417 is fixed in version 18.2.14-tuxcare.14 of @angular/forms." } }, { "id": "CVE-2026-50168", "affects": [ { "ref": "pkg:npm/%40angular/forms@18.2.14-tuxcare.14" } ], "bom-ref": "urn:uuid:fe428a0d-52cf-5e30-bb05-52958dbc2299", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50168 is fixed in version 18.2.14-tuxcare.14 of @angular/forms." } }, { "id": "CVE-2026-50169", "affects": [ { "ref": "pkg:npm/%40angular/forms@18.2.14-tuxcare.14" } ], "bom-ref": "urn:uuid:71942fc7-2e1a-5206-a311-9e0b9d08c846", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50169 is fixed in version 18.2.14-tuxcare.14 of @angular/forms." } }, { "id": "CVE-2026-50170", "affects": [ { "ref": "pkg:npm/%40angular/forms@18.2.14-tuxcare.14" } ], "bom-ref": "urn:uuid:8635c3c6-db76-5c07-ad4b-928753d09b9c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50170 is fixed in version 18.2.14-tuxcare.14 of @angular/forms." } }, { "id": "CVE-2026-50171", "affects": [ { "ref": "pkg:npm/%40angular/forms@18.2.14-tuxcare.14" } ], "bom-ref": "urn:uuid:fb072954-1402-5cb6-9379-4243838145c5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50171 is fixed in version 18.2.14-tuxcare.14 of @angular/forms." } }, { "id": "CVE-2026-50184", "affects": [ { "ref": "pkg:npm/%40angular/forms@18.2.14-tuxcare.14" } ], "bom-ref": "urn:uuid:cd1809b8-b00e-526e-abf7-44f81d4e3ad9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50184 is fixed in version 18.2.14-tuxcare.14 of @angular/forms." } }, { "id": "CVE-2026-50555", "affects": [ { "ref": "pkg:npm/%40angular/forms@18.2.14-tuxcare.14" } ], "bom-ref": "urn:uuid:ba51497d-1d29-5427-b3d6-741397a671ba", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50555 is fixed in version 18.2.14-tuxcare.14 of @angular/forms." } }, { "id": "CVE-2026-50556", "affects": [ { "ref": "pkg:npm/%40angular/forms@18.2.14-tuxcare.14" } ], "bom-ref": "urn:uuid:62c2707f-ce18-557d-ba81-2d2e70f4a0fe", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50556 is fixed in version 18.2.14-tuxcare.14 of @angular/forms." } }, { "id": "CVE-2026-50557", "affects": [ { "ref": "pkg:npm/%40angular/forms@18.2.14-tuxcare.14" } ], "bom-ref": "urn:uuid:a726b8f4-b2f7-553e-8929-2ac24ef9e8d7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50557 is fixed in version 18.2.14-tuxcare.14 of @angular/forms." } }, { "id": "CVE-2026-52725", "affects": [ { "ref": "pkg:npm/%40angular/forms@18.2.14-tuxcare.14" } ], "bom-ref": "urn:uuid:9e54a3ec-acd1-59c7-a2fd-5a4eee2cc5a0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-52725 is fixed in version 18.2.14-tuxcare.14 of @angular/forms." } }, { "id": "CVE-2026-54264", "affects": [ { "ref": "pkg:npm/%40angular/forms@18.2.14-tuxcare.14" } ], "bom-ref": "urn:uuid:669ff0a8-3413-5b08-b702-1109e111dacd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54264 is fixed in version 18.2.14-tuxcare.14 of @angular/forms." } }, { "id": "CVE-2026-54265", "affects": [ { "ref": "pkg:npm/%40angular/forms@18.2.14-tuxcare.14" } ], "bom-ref": "urn:uuid:eefc38f1-a1c7-5aff-9673-e62ac70faaed", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54265 is fixed in version 18.2.14-tuxcare.14 of @angular/forms." } }, { "id": "CVE-2026-54266", "affects": [ { "ref": "pkg:npm/%40angular/forms@18.2.14-tuxcare.14" } ], "bom-ref": "urn:uuid:411c6248-8dfa-5ea0-a16c-65a3b4236795", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54266 is fixed in version 18.2.14-tuxcare.14 of @angular/forms." } }, { "id": "CVE-2026-54267", "affects": [ { "ref": "pkg:npm/%40angular/forms@18.2.14-tuxcare.14" } ], "bom-ref": "urn:uuid:2c9d9afb-87bc-5627-a124-fb1c54de5d9e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54267 is fixed in version 18.2.14-tuxcare.14 of @angular/forms." } }, { "id": "CVE-2026-54268", "affects": [ { "ref": "pkg:npm/%40angular/forms@18.2.14-tuxcare.14" } ], "bom-ref": "urn:uuid:f17db306-1349-5e67-a958-82e7cf074074", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54268 is fixed in version 18.2.14-tuxcare.14 of @angular/forms." } }, { "id": "CVE-2026-68945", "affects": [ { "ref": "pkg:npm/%40angular/forms@18.2.14-tuxcare.14" } ], "bom-ref": "urn:uuid:74656951-ac16-5e56-9050-34225b2e7d07", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-68945 is fixed in version 18.2.14-tuxcare.14 of @angular/forms." } }, { "id": "CVE-2026-69149", "affects": [ { "ref": "pkg:npm/%40angular/forms@18.2.14-tuxcare.14" } ], "bom-ref": "urn:uuid:c1d20c9b-e6c0-53e7-94d6-c60427fb9c8c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69149 is fixed in version 18.2.14-tuxcare.14 of @angular/forms." } }, { "id": "CVE-2026-69151", "affects": [ { "ref": "pkg:npm/%40angular/forms@18.2.14-tuxcare.14" } ], "bom-ref": "urn:uuid:41b48c52-fce8-59d7-af56-48744801e1f8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69151 is fixed in version 18.2.14-tuxcare.14 of @angular/forms." } }, { "id": "CVE-2026-88056", "affects": [ { "ref": "pkg:npm/%40angular/forms@18.2.14-tuxcare.14" } ], "bom-ref": "urn:uuid:abd34ab3-ffa3-5d29-a2b9-c1afa1915eb9", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88056 does not affect version 18.2.14-tuxcare.14 of @angular/forms. not_affected \u2014 The target version 18.2.14-tuxcare.13 is NOT affected by CVE-2026-88056. The vulnerable code pattern (calling String.prototype.trim() on URL strings before resolution) was never present in this version. The target uses a refactored parseUrl() implementation introduced via commit 49a60f6045 (May 2026) that correctly handles Unicode whitespace by percent-encoding it rather than stripping it, main...", "justification": "code_not_present" } }, { "id": "CVE-2026-88057", "affects": [ { "ref": "pkg:npm/%40angular/forms@18.2.14-tuxcare.14" } ], "bom-ref": "urn:uuid:ecc4befa-45dd-5bf6-8742-e6d365f19b7a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88057 affects version 18.2.14-tuxcare.14 of @angular/forms." } }, { "id": "CVE-2026-88059", "affects": [ { "ref": "pkg:npm/%40angular/forms@18.2.14-tuxcare.14" } ], "bom-ref": "urn:uuid:7f0f81bb-6572-5d1d-a083-12c67f6e1cbd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88059 affects version 18.2.14-tuxcare.14 of @angular/forms." } }, { "id": "CVE-2026-88060", "affects": [ { "ref": "pkg:npm/%40angular/forms@18.2.14-tuxcare.14" } ], "bom-ref": "urn:uuid:1adfcce3-f89f-54dd-bffa-dcbc65b5b791", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88060 affects version 18.2.14-tuxcare.14 of @angular/forms." } } ], "dependencies": [ { "ref": "pkg:npm/%40angular/forms@18.2.14-tuxcare.14" } ] }