{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:178d5dee-6f63-5b6e-a791-78b30824145f", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@angular/compiler-cli", "purl": "pkg:npm/%40angular/compiler-cli@17.3.12-tuxcare.19", "type": "library", "bom-ref": "pkg:npm/%40angular/compiler-cli@17.3.12-tuxcare.19", "version": "17.3.12-tuxcare.19", "pedigree": { "ancestors": [ { "name": "@angular/compiler-cli", "purl": "pkg:npm/%40angular/compiler-cli@17.3.12", "type": "library", "version": "17.3.12" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-59052", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@17.3.12-tuxcare.19" } ], "bom-ref": "urn:uuid:66dc45aa-7d09-5bfb-af1f-f3415ce4fb8e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59052 is fixed in version 17.3.12-tuxcare.19 of @angular/compiler-cli." } }, { "id": "CVE-2025-66035", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@17.3.12-tuxcare.19" } ], "bom-ref": "urn:uuid:d3f2f8c8-dfbd-5dd9-852f-4ae2537ab116", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 17.3.12-tuxcare.19 of @angular/compiler-cli." } }, { "id": "CVE-2025-66412", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@17.3.12-tuxcare.19" } ], "bom-ref": "urn:uuid:c84c3b64-7a02-5151-b3fe-3741fbf00250", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 17.3.12-tuxcare.19 of @angular/compiler-cli." } }, { "id": "CVE-2026-101895", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@17.3.12-tuxcare.19" } ], "bom-ref": "urn:uuid:88d79d13-2fe2-50b5-8527-fc4ed412cdda", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-101895 is fixed in version 17.3.12-tuxcare.19 of @angular/compiler-cli." } }, { "id": "CVE-2026-101896", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@17.3.12-tuxcare.19" } ], "bom-ref": "urn:uuid:6d476055-9cc4-5250-a363-9ec0dc0c01b4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101896 affects version 17.3.12-tuxcare.19 of @angular/compiler-cli." } }, { "id": "CVE-2026-22610", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@17.3.12-tuxcare.19" } ], "bom-ref": "urn:uuid:3d3d59e9-b2bf-519a-b286-fa412a3baa0a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22610 is fixed in version 17.3.12-tuxcare.19 of @angular/compiler-cli." } }, { "id": "CVE-2026-27970", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@17.3.12-tuxcare.19" } ], "bom-ref": "urn:uuid:fc895b4f-d492-5ff5-bb83-b70cf5b722c6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27970 is fixed in version 17.3.12-tuxcare.19 of @angular/compiler-cli." } }, { "id": "CVE-2026-32635", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@17.3.12-tuxcare.19" } ], "bom-ref": "urn:uuid:4dfec920-02ea-59f8-98d6-269f0ca0a0c7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-32635 is fixed in version 17.3.12-tuxcare.19 of @angular/compiler-cli." } }, { "id": "CVE-2026-46417", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@17.3.12-tuxcare.19" } ], "bom-ref": "urn:uuid:fb3eb71c-9cb7-548e-88f7-30ba00541f06", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46417 is fixed in version 17.3.12-tuxcare.19 of @angular/compiler-cli." } }, { "id": "CVE-2026-50168", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@17.3.12-tuxcare.19" } ], "bom-ref": "urn:uuid:da97931a-a5a0-50d1-84f7-03a657e91388", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50168 is fixed in version 17.3.12-tuxcare.19 of @angular/compiler-cli." } }, { "id": "CVE-2026-50169", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@17.3.12-tuxcare.19" } ], "bom-ref": "urn:uuid:96529224-d039-5f28-9c79-62b342497c08", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50169 is fixed in version 17.3.12-tuxcare.19 of @angular/compiler-cli." } }, { "id": "CVE-2026-50170", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@17.3.12-tuxcare.19" } ], "bom-ref": "urn:uuid:403dd0e1-7699-5b89-9f1b-a0643c2314bf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50170 is fixed in version 17.3.12-tuxcare.19 of @angular/compiler-cli." } }, { "id": "CVE-2026-50171", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@17.3.12-tuxcare.19" } ], "bom-ref": "urn:uuid:abc147af-3aa7-5a06-b562-fd5929c400df", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50171 is fixed in version 17.3.12-tuxcare.19 of @angular/compiler-cli." } }, { "id": "CVE-2026-50184", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@17.3.12-tuxcare.19" } ], "bom-ref": "urn:uuid:09f7f7fa-6c6e-517d-b306-fda2f98cd0f7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50184 is fixed in version 17.3.12-tuxcare.19 of @angular/compiler-cli." } }, { "id": "CVE-2026-50555", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@17.3.12-tuxcare.19" } ], "bom-ref": "urn:uuid:7c14d315-4f5a-5360-adfc-498ed2bb7c7d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50555 is fixed in version 17.3.12-tuxcare.19 of @angular/compiler-cli." } }, { "id": "CVE-2026-50556", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@17.3.12-tuxcare.19" } ], "bom-ref": "urn:uuid:468bccb5-6e75-5698-a9ef-5a5e5446375b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50556 is fixed in version 17.3.12-tuxcare.19 of @angular/compiler-cli." } }, { "id": "CVE-2026-50557", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@17.3.12-tuxcare.19" } ], "bom-ref": "urn:uuid:4c7ffae6-8a54-542c-a0b0-9d08fb0add16", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50557 is fixed in version 17.3.12-tuxcare.19 of @angular/compiler-cli." } }, { "id": "CVE-2026-52725", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@17.3.12-tuxcare.19" } ], "bom-ref": "urn:uuid:3781b8fd-b3e4-591a-bccd-457629d84897", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-52725 is fixed in version 17.3.12-tuxcare.19 of @angular/compiler-cli." } }, { "id": "CVE-2026-54264", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@17.3.12-tuxcare.19" } ], "bom-ref": "urn:uuid:e5880709-45d1-5f5d-8e61-064bb2aed9b8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54264 is fixed in version 17.3.12-tuxcare.19 of @angular/compiler-cli." } }, { "id": "CVE-2026-54265", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@17.3.12-tuxcare.19" } ], "bom-ref": "urn:uuid:661e4322-f313-5ecd-8cac-fcfcceda9d62", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54265 is fixed in version 17.3.12-tuxcare.19 of @angular/compiler-cli." } }, { "id": "CVE-2026-54266", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@17.3.12-tuxcare.19" } ], "bom-ref": "urn:uuid:7c599d69-dbb6-5059-9455-abb3d381faa5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54266 is fixed in version 17.3.12-tuxcare.19 of @angular/compiler-cli." } }, { "id": "CVE-2026-54267", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@17.3.12-tuxcare.19" } ], "bom-ref": "urn:uuid:10e82284-92da-5f8a-85bc-3cc481f6263a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54267 is fixed in version 17.3.12-tuxcare.19 of @angular/compiler-cli." } }, { "id": "CVE-2026-54268", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@17.3.12-tuxcare.19" } ], "bom-ref": "urn:uuid:e15a5bf1-d15c-5265-8cda-610c3b6c0b8b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54268 is fixed in version 17.3.12-tuxcare.19 of @angular/compiler-cli." } }, { "id": "CVE-2026-68945", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@17.3.12-tuxcare.19" } ], "bom-ref": "urn:uuid:bb0c6c9f-8913-582c-903e-fdf67420a58e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-68945 is fixed in version 17.3.12-tuxcare.19 of @angular/compiler-cli." } }, { "id": "CVE-2026-69149", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@17.3.12-tuxcare.19" } ], "bom-ref": "urn:uuid:130e8eb8-e683-55d7-aa7c-b872e08cdefe", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69149 is fixed in version 17.3.12-tuxcare.19 of @angular/compiler-cli." } }, { "id": "CVE-2026-69151", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@17.3.12-tuxcare.19" } ], "bom-ref": "urn:uuid:12259adf-c26c-5aba-a527-1e112806f5e8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69151 is fixed in version 17.3.12-tuxcare.19 of @angular/compiler-cli." } }, { "id": "CVE-2026-88056", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@17.3.12-tuxcare.19" } ], "bom-ref": "urn:uuid:f629b019-514e-57da-bbe5-eef25a80d87a", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88056 does not affect version 17.3.12-tuxcare.19 of @angular/compiler-cli. not_affected \u2014 Version 17.3.12 is not affected by CVE-2026-88056. The vulnerability involves String.prototype.trim() being applied during URL resolution in Angular's platform-server, converting validated same-origin URLs with Unicode whitespace into cross-origin protocol-relative URLs, leading to SSRF. This vulnerable code pattern was introduced in newer Angular versions (v20+) and does not exist in version 1...", "justification": "code_not_present" } }, { "id": "CVE-2026-88057", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@17.3.12-tuxcare.19" } ], "bom-ref": "urn:uuid:272c2873-30d6-5281-a1d8-ddf4f1a5a16c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88057 is fixed in version 17.3.12-tuxcare.19 of @angular/compiler-cli." } }, { "id": "CVE-2026-88058", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@17.3.12-tuxcare.19" } ], "bom-ref": "urn:uuid:23dede6d-baa6-5127-b6f4-7719100e00ac", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88058 is fixed in version 17.3.12-tuxcare.19 of @angular/compiler-cli." } }, { "id": "CVE-2026-88059", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@17.3.12-tuxcare.19" } ], "bom-ref": "urn:uuid:52f2e5f2-984c-5879-b036-54ca228e925d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88059 is fixed in version 17.3.12-tuxcare.19 of @angular/compiler-cli." } }, { "id": "CVE-2026-88060", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@17.3.12-tuxcare.19" } ], "bom-ref": "urn:uuid:c0114a27-be61-582d-99ae-4fdf3fb115d1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88060 is fixed in version 17.3.12-tuxcare.19 of @angular/compiler-cli." } } ], "dependencies": [ { "ref": "pkg:npm/%40angular/compiler-cli@17.3.12-tuxcare.19" } ] }