{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:59697437-eab3-5154-b4dd-c7d9c07195b6", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@angular/service-worker", "purl": "pkg:npm/%40angular/service-worker@17.3.12-tuxcare.15", "type": "library", "bom-ref": "pkg:npm/%40angular/service-worker@17.3.12-tuxcare.15", "version": "17.3.12-tuxcare.15", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-59052", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:c307d836-4e27-5f15-bddc-52643de8dde4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59052 is fixed in version 17.3.12-tuxcare.15 of @angular/service-worker." } }, { "id": "CVE-2025-66035", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:045a186b-c50f-5e74-8a97-f2eaa321a6d7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 17.3.12-tuxcare.15 of @angular/service-worker." } }, { "id": "CVE-2025-66412", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:c9375aba-7ce9-5d63-8c61-fc1572ff481b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 17.3.12-tuxcare.15 of @angular/service-worker." } }, { "id": "CVE-2026-22610", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:842f6015-60c8-5513-8e71-639783d521a3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22610 is fixed in version 17.3.12-tuxcare.15 of @angular/service-worker." } }, { "id": "CVE-2026-27970", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:0351800e-bb3e-5f90-9950-2291f3d68e8c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27970 is fixed in version 17.3.12-tuxcare.15 of @angular/service-worker." } }, { "id": "CVE-2026-32635", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:520f2f26-a1aa-5605-bb22-abcd01d897e5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-32635 is fixed in version 17.3.12-tuxcare.15 of @angular/service-worker." } }, { "id": "CVE-2026-46417", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:03c9a47d-018d-5520-a2be-7fe4de7b6fd2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46417 is fixed in version 17.3.12-tuxcare.15 of @angular/service-worker." } }, { "id": "CVE-2026-50168", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:ebda2a9a-1ec4-5026-854f-5ac5be739c65", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50168 is fixed in version 17.3.12-tuxcare.15 of @angular/service-worker." } }, { "id": "CVE-2026-50169", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:192405dd-db65-55a7-b704-601ebc5633f4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50169 is fixed in version 17.3.12-tuxcare.15 of @angular/service-worker." } }, { "id": "CVE-2026-50170", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:321986cf-50e2-571b-a7d1-df021793766b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50170 is fixed in version 17.3.12-tuxcare.15 of @angular/service-worker." } }, { "id": "CVE-2026-50171", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:b60ac3b6-0347-5b23-a7d8-2b6267710b94", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50171 is fixed in version 17.3.12-tuxcare.15 of @angular/service-worker." } }, { "id": "CVE-2026-50184", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:330e9be9-9e29-5489-9f1d-4126c148cda0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50184 is fixed in version 17.3.12-tuxcare.15 of @angular/service-worker." } }, { "id": "CVE-2026-50555", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:a6101523-d43f-5d44-8934-e362ae82e117", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50555 is fixed in version 17.3.12-tuxcare.15 of @angular/service-worker." } }, { "id": "CVE-2026-50556", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:cc68b4fc-e5c1-5468-bc7b-a63ca21ec7f4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50556 is fixed in version 17.3.12-tuxcare.15 of @angular/service-worker." } }, { "id": "CVE-2026-50557", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:ad6feee3-0e00-5d30-a04d-be98a3ecbd69", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50557 is fixed in version 17.3.12-tuxcare.15 of @angular/service-worker." } }, { "id": "CVE-2026-52725", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:81297cd9-0d27-5872-84b4-26c417069d24", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-52725 is fixed in version 17.3.12-tuxcare.15 of @angular/service-worker." } }, { "id": "CVE-2026-54264", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:b6603267-8c0e-568d-850f-c71be50ffb96", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54264 is fixed in version 17.3.12-tuxcare.15 of @angular/service-worker." } }, { "id": "CVE-2026-54265", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:ef185ed1-492a-5431-b260-6af5173b1cd5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54265 is fixed in version 17.3.12-tuxcare.15 of @angular/service-worker." } }, { "id": "CVE-2026-54266", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:3e7f3ff2-ea9a-5469-ba5c-802cf53e8320", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54266 is fixed in version 17.3.12-tuxcare.15 of @angular/service-worker." } }, { "id": "CVE-2026-54267", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:3122076b-4b3e-50f5-b54f-b172983a7dcd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54267 is fixed in version 17.3.12-tuxcare.15 of @angular/service-worker." } }, { "id": "CVE-2026-54268", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:9834ab8c-1000-5417-a039-a1cb3e9119dc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54268 is fixed in version 17.3.12-tuxcare.15 of @angular/service-worker." } }, { "id": "CVE-2026-68945", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:e60a8958-3060-5d00-8021-d9fda49d8161", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-68945 is fixed in version 17.3.12-tuxcare.15 of @angular/service-worker." } }, { "id": "CVE-2026-69149", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:e7fe6d18-abe8-5d20-8370-2cca6cc49512", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69149 is fixed in version 17.3.12-tuxcare.15 of @angular/service-worker." } }, { "id": "CVE-2026-69151", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:35796c6d-abc9-5ae3-8baf-ae94b81282f1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69151 is fixed in version 17.3.12-tuxcare.15 of @angular/service-worker." } }, { "id": "CVE-2026-88056", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:8effbce5-b043-566e-bfbe-999d31edb1c4", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88056 does not affect version 17.3.12-tuxcare.15 of @angular/service-worker. not_affected \u2014 Version 17.3.12 is not affected by CVE-2026-88056. The vulnerability involves String.prototype.trim() being applied during URL resolution in Angular's platform-server, converting validated same-origin URLs with Unicode whitespace into cross-origin protocol-relative URLs, leading to SSRF. This vulnerable code pattern was introduced in newer Angular versions (v20+) and does not exist in version 1...", "justification": "code_not_present" } }, { "id": "CVE-2026-88057", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:d470c22d-c6fc-5f53-9f65-74d25a44b03a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88057 affects version 17.3.12-tuxcare.15 of @angular/service-worker." } }, { "id": "CVE-2026-88059", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:68b75540-57ed-5011-a3ac-fa3fb4cfa681", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88059 affects version 17.3.12-tuxcare.15 of @angular/service-worker." } }, { "id": "CVE-2026-88060", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:27f52866-7ff1-56f1-848d-6fee4697b14f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88060 affects version 17.3.12-tuxcare.15 of @angular/service-worker." } } ], "dependencies": [ { "ref": "pkg:npm/%40angular/service-worker@17.3.12-tuxcare.15" } ] }