{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:e5f0fc3b-a92a-5730-b89a-de166b2bcaec", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@angular/language-service", "purl": "pkg:npm/%40angular/language-service@17.3.12-tuxcare.15", "type": "library", "bom-ref": "pkg:npm/%40angular/language-service@17.3.12-tuxcare.15", "version": "17.3.12-tuxcare.15", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-59052", "affects": [ { "ref": "pkg:npm/%40angular/language-service@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:c6429296-3d39-527e-b92f-5257f94378a3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59052 is fixed in version 17.3.12-tuxcare.15 of @angular/language-service." } }, { "id": "CVE-2025-66035", "affects": [ { "ref": "pkg:npm/%40angular/language-service@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:d8125a5e-1453-5530-b8d5-0b9c1e9bc33d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 17.3.12-tuxcare.15 of @angular/language-service." } }, { "id": "CVE-2025-66412", "affects": [ { "ref": "pkg:npm/%40angular/language-service@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:a8efda9d-e9d1-52c1-ad75-cb52c5754074", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 17.3.12-tuxcare.15 of @angular/language-service." } }, { "id": "CVE-2026-22610", "affects": [ { "ref": "pkg:npm/%40angular/language-service@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:66db4cc3-016d-58b4-b082-25a08a889ea6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22610 is fixed in version 17.3.12-tuxcare.15 of @angular/language-service." } }, { "id": "CVE-2026-27970", "affects": [ { "ref": "pkg:npm/%40angular/language-service@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:64ec7aac-23d1-59c4-a794-85b07f66192c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27970 is fixed in version 17.3.12-tuxcare.15 of @angular/language-service." } }, { "id": "CVE-2026-32635", "affects": [ { "ref": "pkg:npm/%40angular/language-service@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:e7263880-c0c3-5fa1-bc6a-8a2695d92105", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-32635 is fixed in version 17.3.12-tuxcare.15 of @angular/language-service." } }, { "id": "CVE-2026-46417", "affects": [ { "ref": "pkg:npm/%40angular/language-service@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:c9f632c2-bf8f-528b-876a-bb496416202f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46417 is fixed in version 17.3.12-tuxcare.15 of @angular/language-service." } }, { "id": "CVE-2026-50168", "affects": [ { "ref": "pkg:npm/%40angular/language-service@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:409c14d9-9ce5-5635-a585-9524c6b415d0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50168 is fixed in version 17.3.12-tuxcare.15 of @angular/language-service." } }, { "id": "CVE-2026-50169", "affects": [ { "ref": "pkg:npm/%40angular/language-service@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:f98fcb59-739e-543e-a28b-7b3e6077d0f7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50169 is fixed in version 17.3.12-tuxcare.15 of @angular/language-service." } }, { "id": "CVE-2026-50170", "affects": [ { "ref": "pkg:npm/%40angular/language-service@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:b43cd1f6-1431-5dac-9450-d8235c57d33e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50170 is fixed in version 17.3.12-tuxcare.15 of @angular/language-service." } }, { "id": "CVE-2026-50171", "affects": [ { "ref": "pkg:npm/%40angular/language-service@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:11ecfd1e-64a8-51d7-8339-13cfcb96a657", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50171 is fixed in version 17.3.12-tuxcare.15 of @angular/language-service." } }, { "id": "CVE-2026-50184", "affects": [ { "ref": "pkg:npm/%40angular/language-service@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:9751b80e-e0f3-5ef9-8357-c8501d7da134", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50184 is fixed in version 17.3.12-tuxcare.15 of @angular/language-service." } }, { "id": "CVE-2026-50555", "affects": [ { "ref": "pkg:npm/%40angular/language-service@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:d28190ad-f280-5ae5-a0cd-0d85ffbbf078", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50555 is fixed in version 17.3.12-tuxcare.15 of @angular/language-service." } }, { "id": "CVE-2026-50556", "affects": [ { "ref": "pkg:npm/%40angular/language-service@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:a6528ff8-dd5b-5a3f-b5b3-647f16f61ebc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50556 is fixed in version 17.3.12-tuxcare.15 of @angular/language-service." } }, { "id": "CVE-2026-50557", "affects": [ { "ref": "pkg:npm/%40angular/language-service@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:5d223d86-eacc-5ee2-9af0-d299bdb3c59a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50557 is fixed in version 17.3.12-tuxcare.15 of @angular/language-service." } }, { "id": "CVE-2026-52725", "affects": [ { "ref": "pkg:npm/%40angular/language-service@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:d8df0f90-4267-5771-972b-abd89cb2614f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-52725 is fixed in version 17.3.12-tuxcare.15 of @angular/language-service." } }, { "id": "CVE-2026-54264", "affects": [ { "ref": "pkg:npm/%40angular/language-service@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:dc9d5204-500f-5470-9831-69238eef1e3a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54264 is fixed in version 17.3.12-tuxcare.15 of @angular/language-service." } }, { "id": "CVE-2026-54265", "affects": [ { "ref": "pkg:npm/%40angular/language-service@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:e32f2d26-9d24-5178-91b4-336fc5f543fc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54265 is fixed in version 17.3.12-tuxcare.15 of @angular/language-service." } }, { "id": "CVE-2026-54266", "affects": [ { "ref": "pkg:npm/%40angular/language-service@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:8a06dcc0-6dbb-5a7b-8b7b-757708b8e7d1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54266 is fixed in version 17.3.12-tuxcare.15 of @angular/language-service." } }, { "id": "CVE-2026-54267", "affects": [ { "ref": "pkg:npm/%40angular/language-service@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:e93abc4f-f45e-5f39-b0eb-813400b5a4a3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54267 is fixed in version 17.3.12-tuxcare.15 of @angular/language-service." } }, { "id": "CVE-2026-54268", "affects": [ { "ref": "pkg:npm/%40angular/language-service@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:62a669eb-8d2a-5e86-88db-e5e3c9e2ac76", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54268 is fixed in version 17.3.12-tuxcare.15 of @angular/language-service." } }, { "id": "CVE-2026-68945", "affects": [ { "ref": "pkg:npm/%40angular/language-service@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:6d30026d-238b-57bc-bfd0-ffe450aed55c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-68945 is fixed in version 17.3.12-tuxcare.15 of @angular/language-service." } }, { "id": "CVE-2026-69149", "affects": [ { "ref": "pkg:npm/%40angular/language-service@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:55d07b94-f603-584b-97f4-72f4f1c88d9b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69149 is fixed in version 17.3.12-tuxcare.15 of @angular/language-service." } }, { "id": "CVE-2026-69151", "affects": [ { "ref": "pkg:npm/%40angular/language-service@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:dd35327a-aeb2-5c49-a543-b43063d6b209", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69151 is fixed in version 17.3.12-tuxcare.15 of @angular/language-service." } }, { "id": "CVE-2026-88056", "affects": [ { "ref": "pkg:npm/%40angular/language-service@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:fb59a8be-819b-5354-97fd-341030e15507", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88056 does not affect version 17.3.12-tuxcare.15 of @angular/language-service. not_affected \u2014 Version 17.3.12 is not affected by CVE-2026-88056. The vulnerability involves String.prototype.trim() being applied during URL resolution in Angular's platform-server, converting validated same-origin URLs with Unicode whitespace into cross-origin protocol-relative URLs, leading to SSRF. This vulnerable code pattern was introduced in newer Angular versions (v20+) and does not exist in version 1...", "justification": "code_not_present" } }, { "id": "CVE-2026-88057", "affects": [ { "ref": "pkg:npm/%40angular/language-service@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:f2d9899b-1e55-5161-8f01-c78d7bc26048", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88057 affects version 17.3.12-tuxcare.15 of @angular/language-service." } }, { "id": "CVE-2026-88059", "affects": [ { "ref": "pkg:npm/%40angular/language-service@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:19951bf9-4adc-5860-ad66-bfcfce015a29", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88059 affects version 17.3.12-tuxcare.15 of @angular/language-service." } }, { "id": "CVE-2026-88060", "affects": [ { "ref": "pkg:npm/%40angular/language-service@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:28676167-cad9-5428-b86e-36efa7b81261", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88060 affects version 17.3.12-tuxcare.15 of @angular/language-service." } } ], "dependencies": [ { "ref": "pkg:npm/%40angular/language-service@17.3.12-tuxcare.15" } ] }