{
  "@id": "urn:uuid:2a2de366-1d64-4e68-b96b-e730aaed705b",
  "role": "Document Creator",
  "author": "https://tuxcare.com",
  "version": 4,
  "@context": "https://openvex.dev/ns/v0.2.0",
  "timestamp": "2026-11-10T16:19:57.234753+00:00",
  "statements": [
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/%40angular/core@5.2.7-tuxcare.2",
          "identifiers": {
            "purl": "pkg:npm/%40angular/core@5.2.7-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-10-18T17:38:00.197291+00:00",
      "status_notes": "Vulnerability CVE-2021-4231 affects version 5.2.7-tuxcare.2 of @angular/core, and is fixed in 5.2.7-tuxcare.4.",
      "vulnerability": {
        "name": "CVE-2021-4231"
      },
      "action_statement": "Vulnerability CVE-2021-4231 affects version 5.2.7-tuxcare.2 of @angular/core, and is fixed in 5.2.7-tuxcare.4."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/%40angular/core@5.2.7-tuxcare.2",
          "identifiers": {
            "purl": "pkg:npm/%40angular/core@5.2.7-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-10-18T17:38:00.197291+00:00",
      "status_notes": "Vulnerability CVE-2026-22610 affects version 5.2.7-tuxcare.2 of @angular/core, and is fixed in 5.2.7-tuxcare.4.",
      "vulnerability": {
        "name": "CVE-2026-22610"
      },
      "action_statement": "Vulnerability CVE-2026-22610 affects version 5.2.7-tuxcare.2 of @angular/core, and is fixed in 5.2.7-tuxcare.4."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/%40angular/core@5.2.7-tuxcare.2",
          "identifiers": {
            "purl": "pkg:npm/%40angular/core@5.2.7-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-10-25T10:52:00.208068+00:00",
      "status_notes": "Vulnerability CVE-2026-27970 affects version 5.2.7-tuxcare.2 of @angular/core, and is fixed in 5.2.7-tuxcare.12.",
      "vulnerability": {
        "name": "CVE-2026-27970"
      },
      "action_statement": "Vulnerability CVE-2026-27970 affects version 5.2.7-tuxcare.2 of @angular/core, and is fixed in 5.2.7-tuxcare.12."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/%40angular/core@5.2.7-tuxcare.2",
          "identifiers": {
            "purl": "pkg:npm/%40angular/core@5.2.7-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-10-29T18:20:10.184134+00:00",
      "status_notes": "Vulnerability CVE-2026-32635 affects version 5.2.7-tuxcare.2 of @angular/core.",
      "vulnerability": {
        "name": "CVE-2026-32635"
      },
      "action_statement": "Vulnerability CVE-2026-32635 affects version 5.2.7-tuxcare.2 of @angular/core."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/%40angular/core@5.2.7-tuxcare.2",
          "identifiers": {
            "purl": "pkg:npm/%40angular/core@5.2.7-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-10-18T17:38:00.197291+00:00",
      "status_notes": "Vulnerability CVE-2026-50557 affects version 5.2.7-tuxcare.2 of @angular/core, and is fixed in 5.2.7-tuxcare.3.",
      "vulnerability": {
        "name": "CVE-2026-50557"
      },
      "action_statement": "Vulnerability CVE-2026-50557 affects version 5.2.7-tuxcare.2 of @angular/core, and is fixed in 5.2.7-tuxcare.3."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/%40angular/core@5.2.7-tuxcare.2",
          "identifiers": {
            "purl": "pkg:npm/%40angular/core@5.2.7-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-10-18T17:38:00.197291+00:00",
      "status_notes": "Vulnerability CVE-2026-52725 affects version 5.2.7-tuxcare.2 of @angular/core, and is fixed in 5.2.7-tuxcare.3.",
      "vulnerability": {
        "name": "CVE-2026-52725"
      },
      "action_statement": "Vulnerability CVE-2026-52725 affects version 5.2.7-tuxcare.2 of @angular/core, and is fixed in 5.2.7-tuxcare.3."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/%40angular/core@5.2.7-tuxcare.2",
          "identifiers": {
            "purl": "pkg:npm/%40angular/core@5.2.7-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-10-18T17:38:00.197291+00:00",
      "status_notes": "Vulnerability CVE-2026-54267 affects version 5.2.7-tuxcare.2 of @angular/core, and is fixed in 5.2.7-tuxcare.3.",
      "vulnerability": {
        "name": "CVE-2026-54267"
      },
      "action_statement": "Vulnerability CVE-2026-54267 affects version 5.2.7-tuxcare.2 of @angular/core, and is fixed in 5.2.7-tuxcare.3."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/%40angular/core@5.2.7-tuxcare.2",
          "identifiers": {
            "purl": "pkg:npm/%40angular/core@5.2.7-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-10-18T17:38:00.197291+00:00",
      "status_notes": "Vulnerability CVE-2026-69151 affects version 5.2.7-tuxcare.2 of @angular/core, and is fixed in 5.2.7-tuxcare.5.",
      "vulnerability": {
        "name": "CVE-2026-69151"
      },
      "action_statement": "Vulnerability CVE-2026-69151 affects version 5.2.7-tuxcare.2 of @angular/core, and is fixed in 5.2.7-tuxcare.5."
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:npm/%40angular/core@5.2.7-tuxcare.2",
          "identifiers": {
            "purl": "pkg:npm/%40angular/core@5.2.7-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-10-18T17:38:00.197291+00:00",
      "status_notes": "Vulnerability CVE-2026-88057 does not affect version 5.2.7-tuxcare.2 of @angular/core. not_affected \u2014 Angular 5.2.7 is not affected by CVE-2026-88057. The vulnerability pattern described in the CVE (compiler using directive selector instead of concrete host element for SecurityContext determination in host bindings) does not exist in this version. Angular 5.2.7 correctly uses the element name when determining SecurityContext for directive host bindings, as evidenced in template_parser.ts and bi...",
      "justification": "vulnerable_code_not_present",
      "vulnerability": {
        "name": "CVE-2026-88057"
      },
      "impact_statement": "not_affected \u2014 Angular 5.2.7 is not affected by CVE-2026-88057. The vulnerability pattern described in the CVE (compiler using directive selector instead of concrete host element for SecurityContext determination in host bindings) does not exist in this version. Angular 5.2.7 correctly uses the element name when determining SecurityContext for directive host bindings, as evidenced in template_parser.ts and bi..."
    }
  ]
}