{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:d92225f6-cacf-5a46-b136-05ae329ad2fa", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@angular/localize", "purl": "pkg:npm/%40angular/localize@18.2.14-tuxcare.14", "type": "library", "bom-ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.14", "version": "18.2.14-tuxcare.14", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-66035", "affects": [ { "ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.14" } ], "bom-ref": "urn:uuid:0cc079e0-57e6-5f02-bb22-c1a4b377bc38", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 18.2.14-tuxcare.14 of @angular/localize." } }, { "id": "CVE-2025-66412", "affects": [ { "ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.14" } ], "bom-ref": "urn:uuid:810a6eba-f5f2-574a-bb5c-6f760a68d9d6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 18.2.14-tuxcare.14 of @angular/localize." } }, { "id": "CVE-2026-22610", "affects": [ { "ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.14" } ], "bom-ref": "urn:uuid:fabd84b5-dd96-5415-83c5-7fadf5e20064", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22610 is fixed in version 18.2.14-tuxcare.14 of @angular/localize." } }, { "id": "CVE-2026-27970", "affects": [ { "ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.14" } ], "bom-ref": "urn:uuid:c72256f1-4f50-5f51-a3ef-ead40421f556", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27970 is fixed in version 18.2.14-tuxcare.14 of @angular/localize." } }, { "id": "CVE-2026-32635", "affects": [ { "ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.14" } ], "bom-ref": "urn:uuid:4ab3deea-ed56-532e-837b-2a7171e2abbe", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-32635 is fixed in version 18.2.14-tuxcare.14 of @angular/localize." } }, { "id": "CVE-2026-46417", "affects": [ { "ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.14" } ], "bom-ref": "urn:uuid:0adfa88d-e8e8-59a9-95b9-744e047d7017", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46417 is fixed in version 18.2.14-tuxcare.14 of @angular/localize." } }, { "id": "CVE-2026-50168", "affects": [ { "ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.14" } ], "bom-ref": "urn:uuid:ff5e7126-acbf-56a0-8f2e-7dc7cea8be8d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50168 is fixed in version 18.2.14-tuxcare.14 of @angular/localize." } }, { "id": "CVE-2026-50169", "affects": [ { "ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.14" } ], "bom-ref": "urn:uuid:b1d11329-3790-5a73-a521-2172689d8b76", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50169 is fixed in version 18.2.14-tuxcare.14 of @angular/localize." } }, { "id": "CVE-2026-50170", "affects": [ { "ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.14" } ], "bom-ref": "urn:uuid:c9bd247c-555e-5b86-a8a9-c7c4f3a6e649", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50170 is fixed in version 18.2.14-tuxcare.14 of @angular/localize." } }, { "id": "CVE-2026-50171", "affects": [ { "ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.14" } ], "bom-ref": "urn:uuid:b74b672e-db2f-518e-83a7-fc297c793752", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50171 is fixed in version 18.2.14-tuxcare.14 of @angular/localize." } }, { "id": "CVE-2026-50184", "affects": [ { "ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.14" } ], "bom-ref": "urn:uuid:4263ff21-883e-5129-b82b-efaede3bbe0a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50184 is fixed in version 18.2.14-tuxcare.14 of @angular/localize." } }, { "id": "CVE-2026-50555", "affects": [ { "ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.14" } ], "bom-ref": "urn:uuid:6b655617-477a-56c9-a52d-3a34b24a8b11", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50555 is fixed in version 18.2.14-tuxcare.14 of @angular/localize." } }, { "id": "CVE-2026-50556", "affects": [ { "ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.14" } ], "bom-ref": "urn:uuid:61a2a660-24a5-573c-b908-d74697973f4e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50556 is fixed in version 18.2.14-tuxcare.14 of @angular/localize." } }, { "id": "CVE-2026-50557", "affects": [ { "ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.14" } ], "bom-ref": "urn:uuid:45c824ad-ac72-57f9-85bf-39f05224929b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50557 is fixed in version 18.2.14-tuxcare.14 of @angular/localize." } }, { "id": "CVE-2026-52725", "affects": [ { "ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.14" } ], "bom-ref": "urn:uuid:9f4739cb-0d0a-5d3e-929a-af015f4a105a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-52725 is fixed in version 18.2.14-tuxcare.14 of @angular/localize." } }, { "id": "CVE-2026-54264", "affects": [ { "ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.14" } ], "bom-ref": "urn:uuid:f59e6feb-590b-54ff-928b-8d9d53a0edc0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54264 is fixed in version 18.2.14-tuxcare.14 of @angular/localize." } }, { "id": "CVE-2026-54265", "affects": [ { "ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.14" } ], "bom-ref": "urn:uuid:9fee9477-4df1-5716-ba3d-771b794ebaf6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54265 is fixed in version 18.2.14-tuxcare.14 of @angular/localize." } }, { "id": "CVE-2026-54266", "affects": [ { "ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.14" } ], "bom-ref": "urn:uuid:d56b8eba-51d2-5680-8bfd-df3abcc25831", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54266 is fixed in version 18.2.14-tuxcare.14 of @angular/localize." } }, { "id": "CVE-2026-54267", "affects": [ { "ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.14" } ], "bom-ref": "urn:uuid:10f740d0-e0b2-56d1-9469-18c104ce0386", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54267 is fixed in version 18.2.14-tuxcare.14 of @angular/localize." } }, { "id": "CVE-2026-54268", "affects": [ { "ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.14" } ], "bom-ref": "urn:uuid:817a0b0d-20fe-57e4-97c0-b5a58f5c5316", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54268 is fixed in version 18.2.14-tuxcare.14 of @angular/localize." } }, { "id": "CVE-2026-68945", "affects": [ { "ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.14" } ], "bom-ref": "urn:uuid:42837707-bb75-512d-a60f-f483a2017db2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-68945 is fixed in version 18.2.14-tuxcare.14 of @angular/localize." } }, { "id": "CVE-2026-69149", "affects": [ { "ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.14" } ], "bom-ref": "urn:uuid:56b4071f-db4a-5fa2-a4c4-7be88844b790", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69149 is fixed in version 18.2.14-tuxcare.14 of @angular/localize." } }, { "id": "CVE-2026-69151", "affects": [ { "ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.14" } ], "bom-ref": "urn:uuid:ddd26a1f-ce74-5cf0-84eb-138ef1dd61de", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69151 is fixed in version 18.2.14-tuxcare.14 of @angular/localize." } }, { "id": "CVE-2026-88056", "affects": [ { "ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.14" } ], "bom-ref": "urn:uuid:6a63c96e-a6b7-553d-9e92-b4fb9806d888", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88056 does not affect version 18.2.14-tuxcare.14 of @angular/localize. not_affected \u2014 The target version 18.2.14-tuxcare.13 is NOT affected by CVE-2026-88056. The vulnerable code pattern (calling String.prototype.trim() on URL strings before resolution) was never present in this version. The target uses a refactored parseUrl() implementation introduced via commit 49a60f6045 (May 2026) that correctly handles Unicode whitespace by percent-encoding it rather than stripping it, main...", "justification": "code_not_present" } }, { "id": "CVE-2026-88057", "affects": [ { "ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.14" } ], "bom-ref": "urn:uuid:e925db35-ca18-5e9b-a5f0-65a992d5a360", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88057 affects version 18.2.14-tuxcare.14 of @angular/localize." } }, { "id": "CVE-2026-88059", "affects": [ { "ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.14" } ], "bom-ref": "urn:uuid:a6f87770-02f9-544e-975f-2064ffebc7f0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88059 affects version 18.2.14-tuxcare.14 of @angular/localize." } }, { "id": "CVE-2026-88060", "affects": [ { "ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.14" } ], "bom-ref": "urn:uuid:21f9ac7e-1deb-50a6-ac81-32519f4801eb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88060 affects version 18.2.14-tuxcare.14 of @angular/localize." } } ], "dependencies": [ { "ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.14" } ] }