{
  "@id": "urn:uuid:c38ff215-25b2-4575-9d63-68ea41fcdb2b",
  "role": "Document Creator",
  "author": "https://tuxcare.com",
  "version": 5,
  "@context": "https://openvex.dev/ns/v0.2.0",
  "timestamp": "2026-11-10T16:19:57.234753+00:00",
  "statements": [
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:npm/%40angular/core@15.2.1",
          "identifiers": {
            "purl": "pkg:npm/%40angular/core@15.2.1"
          }
        }
      ],
      "timestamp": "2026-11-03T21:24:00.071698+00:00",
      "status_notes": "Vulnerability CVE-2021-4231 does not affect version 15.2.1 of @angular/core. not_affected \u2014 Angular 15.2.1-tuxcare.7 is not affected by CVE-2021-4231. The vulnerability, which allows XSS through unescaped HTML comment delimiters, was fixed in upstream Angular by Misko Hevery on January 22, 2021 (commit 6bf99e0edaedc6b67e765faa996da867420bf3e7), well before the Angular 15.2.1 release. The fix introduces the escapeCommentText() function that wraps comment delimiters with zero-width spac...",
      "justification": "vulnerable_code_not_present",
      "vulnerability": {
        "name": "CVE-2021-4231"
      },
      "impact_statement": "not_affected \u2014 Angular 15.2.1-tuxcare.7 is not affected by CVE-2021-4231. The vulnerability, which allows XSS through unescaped HTML comment delimiters, was fixed in upstream Angular by Misko Hevery on January 22, 2021 (commit 6bf99e0edaedc6b67e765faa996da867420bf3e7), well before the Angular 15.2.1 release. The fix introduces the escapeCommentText() function that wraps comment delimiters with zero-width spac..."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/%40angular/core@15.2.1",
          "identifiers": {
            "purl": "pkg:npm/%40angular/core@15.2.1"
          }
        }
      ],
      "timestamp": "2026-10-18T17:38:00.197291+00:00",
      "status_notes": "Vulnerability CVE-2026-22610 affects version 15.2.1 of @angular/core, and is fixed in 15.2.1-tuxcare.2.",
      "vulnerability": {
        "name": "CVE-2026-22610"
      },
      "action_statement": "Vulnerability CVE-2026-22610 affects version 15.2.1 of @angular/core, and is fixed in 15.2.1-tuxcare.2."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/%40angular/core@15.2.1",
          "identifiers": {
            "purl": "pkg:npm/%40angular/core@15.2.1"
          }
        }
      ],
      "timestamp": "2026-10-18T17:38:00.197291+00:00",
      "status_notes": "Vulnerability CVE-2026-27970 affects version 15.2.1 of @angular/core, and is fixed in 15.2.1-tuxcare.2.",
      "vulnerability": {
        "name": "CVE-2026-27970"
      },
      "action_statement": "Vulnerability CVE-2026-27970 affects version 15.2.1 of @angular/core, and is fixed in 15.2.1-tuxcare.2."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/%40angular/core@15.2.1",
          "identifiers": {
            "purl": "pkg:npm/%40angular/core@15.2.1"
          }
        }
      ],
      "timestamp": "2026-10-29T18:19:40.837381+00:00",
      "status_notes": "Vulnerability CVE-2026-32635 affects version 15.2.1 of @angular/core.",
      "vulnerability": {
        "name": "CVE-2026-32635"
      },
      "action_statement": "Vulnerability CVE-2026-32635 affects version 15.2.1 of @angular/core."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/%40angular/core@15.2.1",
          "identifiers": {
            "purl": "pkg:npm/%40angular/core@15.2.1"
          }
        }
      ],
      "timestamp": "2026-10-18T17:38:00.197291+00:00",
      "status_notes": "Vulnerability CVE-2026-50557 affects version 15.2.1 of @angular/core, and is fixed in 15.2.1-tuxcare.2.",
      "vulnerability": {
        "name": "CVE-2026-50557"
      },
      "action_statement": "Vulnerability CVE-2026-50557 affects version 15.2.1 of @angular/core, and is fixed in 15.2.1-tuxcare.2."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/%40angular/core@15.2.1",
          "identifiers": {
            "purl": "pkg:npm/%40angular/core@15.2.1"
          }
        }
      ],
      "timestamp": "2026-10-18T17:38:00.197291+00:00",
      "status_notes": "Vulnerability CVE-2026-52725 affects version 15.2.1 of @angular/core, and is fixed in 15.2.1-tuxcare.2.",
      "vulnerability": {
        "name": "CVE-2026-52725"
      },
      "action_statement": "Vulnerability CVE-2026-52725 affects version 15.2.1 of @angular/core, and is fixed in 15.2.1-tuxcare.2."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/%40angular/core@15.2.1",
          "identifiers": {
            "purl": "pkg:npm/%40angular/core@15.2.1"
          }
        }
      ],
      "timestamp": "2026-10-18T17:38:00.197291+00:00",
      "status_notes": "Vulnerability CVE-2026-54267 affects version 15.2.1 of @angular/core, and is fixed in 15.2.1-tuxcare.2.",
      "vulnerability": {
        "name": "CVE-2026-54267"
      },
      "action_statement": "Vulnerability CVE-2026-54267 affects version 15.2.1 of @angular/core, and is fixed in 15.2.1-tuxcare.2."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/%40angular/core@15.2.1",
          "identifiers": {
            "purl": "pkg:npm/%40angular/core@15.2.1"
          }
        }
      ],
      "timestamp": "2026-10-18T17:38:00.197291+00:00",
      "status_notes": "Vulnerability CVE-2026-69151 affects version 15.2.1 of @angular/core, and is fixed in 15.2.1-tuxcare.3.",
      "vulnerability": {
        "name": "CVE-2026-69151"
      },
      "action_statement": "Vulnerability CVE-2026-69151 affects version 15.2.1 of @angular/core, and is fixed in 15.2.1-tuxcare.3."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/%40angular/core@15.2.1",
          "identifiers": {
            "purl": "pkg:npm/%40angular/core@15.2.1"
          }
        }
      ],
      "timestamp": "2026-10-18T17:38:00.197291+00:00",
      "status_notes": "Vulnerability CVE-2026-88057 affects version 15.2.1 of @angular/core, and is fixed in 15.2.1-tuxcare.4.",
      "vulnerability": {
        "name": "CVE-2026-88057"
      },
      "action_statement": "Vulnerability CVE-2026-88057 affects version 15.2.1 of @angular/core, and is fixed in 15.2.1-tuxcare.4."
    }
  ]
}