{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:16859a78-33ec-5fc8-91c2-ebac5cf1273d", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@angular/platform-server", "purl": "pkg:npm/%40angular/platform-server@12.2.17-tuxcare.10", "type": "library", "bom-ref": "pkg:npm/%40angular/platform-server@12.2.17-tuxcare.10", "version": "12.2.17-tuxcare.10", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-66035", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:9970985a-87f5-5c78-83d0-cc714ab4e115", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 12.2.17-tuxcare.10 of @angular/platform-server." } }, { "id": "CVE-2025-66412", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:88620b42-d962-5cf9-b4f6-32f132510cd0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 12.2.17-tuxcare.10 of @angular/platform-server." } }, { "id": "CVE-2026-22610", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:af2ca1a7-6fcf-5455-bcee-cae86d2cc956", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22610 is fixed in version 12.2.17-tuxcare.10 of @angular/platform-server." } }, { "id": "CVE-2026-27970", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:f7d5139e-4064-5e5f-93e9-d77bf9cd72c8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27970 is fixed in version 12.2.17-tuxcare.10 of @angular/platform-server." } }, { "id": "CVE-2026-46417", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:83a3e90d-817f-5c44-92f7-84df769ebb3f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46417 is fixed in version 12.2.17-tuxcare.10 of @angular/platform-server." } }, { "id": "CVE-2026-50168", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:bd3c39c0-44c5-56d6-82e1-4578497e2425", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50168 is fixed in version 12.2.17-tuxcare.10 of @angular/platform-server." } }, { "id": "CVE-2026-50169", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:80eba562-6676-508a-9b0b-c371ba6a7424", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50169 is fixed in version 12.2.17-tuxcare.10 of @angular/platform-server." } }, { "id": "CVE-2026-50170", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:56b10582-c5e5-5a11-94aa-a5f7baa39795", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50170 is fixed in version 12.2.17-tuxcare.10 of @angular/platform-server." } }, { "id": "CVE-2026-50171", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:7776dafa-10ff-5f64-b408-5813fdc9caa6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50171 is fixed in version 12.2.17-tuxcare.10 of @angular/platform-server." } }, { "id": "CVE-2026-50184", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:750a7961-be77-50cd-9241-7b6ac928a603", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50184 is fixed in version 12.2.17-tuxcare.10 of @angular/platform-server." } }, { "id": "CVE-2026-50555", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:fc0243c4-5e55-526a-85b1-c4f5b4f1c399", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50555 is fixed in version 12.2.17-tuxcare.10 of @angular/platform-server." } }, { "id": "CVE-2026-50556", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:7bbef0b5-0bc5-5d1b-bf43-9101319a90bd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50556 is fixed in version 12.2.17-tuxcare.10 of @angular/platform-server." } }, { "id": "CVE-2026-50557", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:d0d9b11f-ecc3-5045-a24c-f2a658591b3e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50557 is fixed in version 12.2.17-tuxcare.10 of @angular/platform-server." } }, { "id": "CVE-2026-52725", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:896b50df-2046-5a7d-936c-249a5ebf964e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-52725 is fixed in version 12.2.17-tuxcare.10 of @angular/platform-server." } }, { "id": "CVE-2026-54264", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:da0dee7f-c29a-539b-8b93-c975efc12347", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54264 is fixed in version 12.2.17-tuxcare.10 of @angular/platform-server." } }, { "id": "CVE-2026-54265", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:caa66cf3-9931-5368-80ce-63fd5e388905", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54265 is fixed in version 12.2.17-tuxcare.10 of @angular/platform-server." } }, { "id": "CVE-2026-54266", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:0e2dee2b-8a2d-5f6c-86f5-fb6ddfb6ab74", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54266 is fixed in version 12.2.17-tuxcare.10 of @angular/platform-server." } }, { "id": "CVE-2026-54267", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:88e006e6-8c3e-5150-bfb6-c7f39d192c8b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54267 is fixed in version 12.2.17-tuxcare.10 of @angular/platform-server." } }, { "id": "CVE-2026-54268", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:48936479-ed31-54de-8daa-556a14f27731", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54268 is fixed in version 12.2.17-tuxcare.10 of @angular/platform-server." } }, { "id": "CVE-2026-68945", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:468bf866-fdcc-55e8-9bd0-3a2a0cd493cf", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-68945 does not affect version 12.2.17-tuxcare.10 of @angular/platform-server. not_affected \u2014 Angular 12.2.17 does not contain the HttpTransferCache feature affected by CVE-2026-68945. HttpTransferCache, which caches HTTP requests during Server-Side Rendering (SSR), was first introduced in Angular 16.0.0\u2014approximately 4 major versions after the target version. The vulnerability concerns cache-key collision when repeated HTTP parameters are serialized, but since the entire HttpTransferCa...", "justification": "code_not_present" } }, { "id": "CVE-2026-69149", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:27bf88fc-abf1-57b8-a1b1-cf9df8bde4e9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69149 is fixed in version 12.2.17-tuxcare.10 of @angular/platform-server." } }, { "id": "CVE-2026-69151", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:13c190e6-1f54-5e1e-b1d9-00036a3f188e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69151 is fixed in version 12.2.17-tuxcare.10 of @angular/platform-server." } }, { "id": "CVE-2026-88056", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:0bba734b-4cdf-5481-858b-b72d1ae76ee7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88056 affects version 12.2.17-tuxcare.10 of @angular/platform-server." } }, { "id": "CVE-2026-88057", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:6cad0065-b375-5077-8a22-98f464b9bb0d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88057 affects version 12.2.17-tuxcare.10 of @angular/platform-server." } }, { "id": "CVE-2026-88059", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:04d6c743-cc7c-532e-95ce-e56f07d0babf", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88059 does not affect version 12.2.17-tuxcare.10 of @angular/platform-server. not_affected \u2014 Angular 12.2.17-tuxcare.9 is not affected by CVE-2026-88059. The vulnerability requires HttpTransferCache, withRequestsMadeViaParent(), and provideClientHydration() features which were introduced in Angular 16.0.0. This version uses the older module-based HttpClientModule system and lacks the entire SSR hydration transfer-cache infrastructure. The vulnerable code pattern described in the CVE do...", "justification": "code_not_present" } }, { "id": "CVE-2026-88060", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:12ff261f-9a72-5cdb-a5d9-e6a78e89f22f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88060 affects version 12.2.17-tuxcare.10 of @angular/platform-server." } } ], "dependencies": [ { "ref": "pkg:npm/%40angular/platform-server@12.2.17-tuxcare.10" } ] }