{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:eaef6acd-3296-57c5-92c3-25431e4f3e5e", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@angular/language-service", "purl": "pkg:npm/%40angular/language-service@12.2.17-tuxcare.13", "type": "library", "bom-ref": "pkg:npm/%40angular/language-service@12.2.17-tuxcare.13", "version": "12.2.17-tuxcare.13", "pedigree": { "ancestors": [ { "name": "@angular/language-service", "purl": "pkg:npm/%40angular/language-service@12.2.17", "type": "library", "version": "12.2.17" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-66035", "affects": [ { "ref": "pkg:npm/%40angular/language-service@12.2.17-tuxcare.13" } ], "bom-ref": "urn:uuid:fd8c1407-d486-5872-ba44-49f90244aa37", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 12.2.17-tuxcare.13 of @angular/language-service." } }, { "id": "CVE-2025-66412", "affects": [ { "ref": "pkg:npm/%40angular/language-service@12.2.17-tuxcare.13" } ], "bom-ref": "urn:uuid:52a24469-85f0-54f7-a1c8-1703e16bc6c9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 12.2.17-tuxcare.13 of @angular/language-service." } }, { "id": "CVE-2026-101895", "affects": [ { "ref": "pkg:npm/%40angular/language-service@12.2.17-tuxcare.13" } ], "bom-ref": "urn:uuid:ebf34e21-306b-5d08-ae31-e975b986f2fb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-101895 is fixed in version 12.2.17-tuxcare.13 of @angular/language-service." } }, { "id": "CVE-2026-101896", "affects": [ { "ref": "pkg:npm/%40angular/language-service@12.2.17-tuxcare.13" } ], "bom-ref": "urn:uuid:3dc134e4-2eb8-5625-b760-a066ffd76256", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101896 affects version 12.2.17-tuxcare.13 of @angular/language-service." } }, { "id": "CVE-2026-22610", "affects": [ { "ref": "pkg:npm/%40angular/language-service@12.2.17-tuxcare.13" } ], "bom-ref": "urn:uuid:c877e9ff-2e41-5249-83da-40ad248eebe6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22610 is fixed in version 12.2.17-tuxcare.13 of @angular/language-service." } }, { "id": "CVE-2026-27970", "affects": [ { "ref": "pkg:npm/%40angular/language-service@12.2.17-tuxcare.13" } ], "bom-ref": "urn:uuid:033a62b5-07da-5739-9c22-04136d95982e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27970 is fixed in version 12.2.17-tuxcare.13 of @angular/language-service." } }, { "id": "CVE-2026-41423", "affects": [ { "ref": "pkg:npm/%40angular/language-service@12.2.17-tuxcare.13" } ], "bom-ref": "urn:uuid:cdc707b0-3f52-5b52-af9b-46eb67c78761", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41423 is fixed in version 12.2.17-tuxcare.13 of @angular/language-service." } }, { "id": "CVE-2026-46417", "affects": [ { "ref": "pkg:npm/%40angular/language-service@12.2.17-tuxcare.13" } ], "bom-ref": "urn:uuid:fc0b082b-c75a-59f3-a9ed-28c90eb1bd4b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46417 is fixed in version 12.2.17-tuxcare.13 of @angular/language-service." } }, { "id": "CVE-2026-50168", "affects": [ { "ref": "pkg:npm/%40angular/language-service@12.2.17-tuxcare.13" } ], "bom-ref": "urn:uuid:67fb8ff9-86e7-520b-ae0c-d532ec15adeb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50168 is fixed in version 12.2.17-tuxcare.13 of @angular/language-service." } }, { "id": "CVE-2026-50169", "affects": [ { "ref": "pkg:npm/%40angular/language-service@12.2.17-tuxcare.13" } ], "bom-ref": "urn:uuid:8d0f4391-adff-57f7-bbba-85499e9dad82", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50169 is fixed in version 12.2.17-tuxcare.13 of @angular/language-service." } }, { "id": "CVE-2026-50170", "affects": [ { "ref": "pkg:npm/%40angular/language-service@12.2.17-tuxcare.13" } ], "bom-ref": "urn:uuid:44b92c2f-0b2f-52bc-ad0a-017cff634654", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50170 is fixed in version 12.2.17-tuxcare.13 of @angular/language-service." } }, { "id": "CVE-2026-50171", "affects": [ { "ref": "pkg:npm/%40angular/language-service@12.2.17-tuxcare.13" } ], "bom-ref": "urn:uuid:a5101ad6-6c44-5bc1-9c30-7ce3691726d1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50171 is fixed in version 12.2.17-tuxcare.13 of @angular/language-service." } }, { "id": "CVE-2026-50184", "affects": [ { "ref": "pkg:npm/%40angular/language-service@12.2.17-tuxcare.13" } ], "bom-ref": "urn:uuid:df694d7f-dc6e-5c8d-9b24-1d5b5a9e18e8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50184 is fixed in version 12.2.17-tuxcare.13 of @angular/language-service." } }, { "id": "CVE-2026-50555", "affects": [ { "ref": "pkg:npm/%40angular/language-service@12.2.17-tuxcare.13" } ], "bom-ref": "urn:uuid:3a956a28-a862-52e1-a6fb-9406c8174f67", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50555 is fixed in version 12.2.17-tuxcare.13 of @angular/language-service." } }, { "id": "CVE-2026-50556", "affects": [ { "ref": "pkg:npm/%40angular/language-service@12.2.17-tuxcare.13" } ], "bom-ref": "urn:uuid:36660c7e-2aba-5cf4-a0c1-aad087c7dc41", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50556 is fixed in version 12.2.17-tuxcare.13 of @angular/language-service." } }, { "id": "CVE-2026-50557", "affects": [ { "ref": "pkg:npm/%40angular/language-service@12.2.17-tuxcare.13" } ], "bom-ref": "urn:uuid:9575a938-c4bc-54f8-9251-686178eb3784", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50557 is fixed in version 12.2.17-tuxcare.13 of @angular/language-service." } }, { "id": "CVE-2026-52725", "affects": [ { "ref": "pkg:npm/%40angular/language-service@12.2.17-tuxcare.13" } ], "bom-ref": "urn:uuid:347b0b09-5cfd-54ab-9ad8-8659b3bfec0f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-52725 is fixed in version 12.2.17-tuxcare.13 of @angular/language-service." } }, { "id": "CVE-2026-54264", "affects": [ { "ref": "pkg:npm/%40angular/language-service@12.2.17-tuxcare.13" } ], "bom-ref": "urn:uuid:68a0d276-a8bb-5ced-abbb-0705b98edf10", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54264 is fixed in version 12.2.17-tuxcare.13 of @angular/language-service." } }, { "id": "CVE-2026-54265", "affects": [ { "ref": "pkg:npm/%40angular/language-service@12.2.17-tuxcare.13" } ], "bom-ref": "urn:uuid:43402598-e623-5a71-8016-66c2a2c79c5a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54265 is fixed in version 12.2.17-tuxcare.13 of @angular/language-service." } }, { "id": "CVE-2026-54266", "affects": [ { "ref": "pkg:npm/%40angular/language-service@12.2.17-tuxcare.13" } ], "bom-ref": "urn:uuid:20a7c195-5546-578a-bd01-85006655f03c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54266 is fixed in version 12.2.17-tuxcare.13 of @angular/language-service." } }, { "id": "CVE-2026-54267", "affects": [ { "ref": "pkg:npm/%40angular/language-service@12.2.17-tuxcare.13" } ], "bom-ref": "urn:uuid:e1cd4aee-ac0e-5b26-bbe3-2ee75c7547b0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54267 is fixed in version 12.2.17-tuxcare.13 of @angular/language-service." } }, { "id": "CVE-2026-54268", "affects": [ { "ref": "pkg:npm/%40angular/language-service@12.2.17-tuxcare.13" } ], "bom-ref": "urn:uuid:8b1d7859-3743-5ded-8cf2-401e16fe0828", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54268 is fixed in version 12.2.17-tuxcare.13 of @angular/language-service." } }, { "id": "CVE-2026-68945", "affects": [ { "ref": "pkg:npm/%40angular/language-service@12.2.17-tuxcare.13" } ], "bom-ref": "urn:uuid:70910fff-8420-518a-9b66-7e760b8d3255", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-68945 does not affect version 12.2.17-tuxcare.13 of @angular/language-service. not_affected \u2014 Angular 12.2.17 does not contain the HttpTransferCache feature affected by CVE-2026-68945. HttpTransferCache, which caches HTTP requests during Server-Side Rendering (SSR), was first introduced in Angular 16.0.0\u2014approximately 4 major versions after the target version. The vulnerability concerns cache-key collision when repeated HTTP parameters are serialized, but since the entire HttpTransferCa...", "justification": "code_not_present" } }, { "id": "CVE-2026-69149", "affects": [ { "ref": "pkg:npm/%40angular/language-service@12.2.17-tuxcare.13" } ], "bom-ref": "urn:uuid:4b852f29-85e3-5f1b-bc1c-9118fd30786a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69149 is fixed in version 12.2.17-tuxcare.13 of @angular/language-service." } }, { "id": "CVE-2026-69151", "affects": [ { "ref": "pkg:npm/%40angular/language-service@12.2.17-tuxcare.13" } ], "bom-ref": "urn:uuid:43072b5c-5c4d-5eb8-bd40-d62ee1580055", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69151 is fixed in version 12.2.17-tuxcare.13 of @angular/language-service." } }, { "id": "CVE-2026-88056", "affects": [ { "ref": "pkg:npm/%40angular/language-service@12.2.17-tuxcare.13" } ], "bom-ref": "urn:uuid:0c1dea98-ca11-5e7e-89e8-d16ac8660816", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88056 is fixed in version 12.2.17-tuxcare.13 of @angular/language-service." } }, { "id": "CVE-2026-88057", "affects": [ { "ref": "pkg:npm/%40angular/language-service@12.2.17-tuxcare.13" } ], "bom-ref": "urn:uuid:39a1387d-707b-5fd5-8696-2c0a2457ebe6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88057 is fixed in version 12.2.17-tuxcare.13 of @angular/language-service." } }, { "id": "CVE-2026-88058", "affects": [ { "ref": "pkg:npm/%40angular/language-service@12.2.17-tuxcare.13" } ], "bom-ref": "urn:uuid:cadde5a0-a94f-5a8a-85f2-48b20afe55da", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88058 is fixed in version 12.2.17-tuxcare.13 of @angular/language-service." } }, { "id": "CVE-2026-88059", "affects": [ { "ref": "pkg:npm/%40angular/language-service@12.2.17-tuxcare.13" } ], "bom-ref": "urn:uuid:67177529-6bee-5581-99e7-857ddd05380a", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88059 does not affect version 12.2.17-tuxcare.13 of @angular/language-service. not_affected \u2014 Angular 12.2.17-tuxcare.9 is not affected by CVE-2026-88059. The vulnerability requires HttpTransferCache, withRequestsMadeViaParent(), and provideClientHydration() features which were introduced in Angular 16.0.0. This version uses the older module-based HttpClientModule system and lacks the entire SSR hydration transfer-cache infrastructure. The vulnerable code pattern described in the CVE do...", "justification": "code_not_present" } }, { "id": "CVE-2026-88060", "affects": [ { "ref": "pkg:npm/%40angular/language-service@12.2.17-tuxcare.13" } ], "bom-ref": "urn:uuid:2d5f28ea-d60a-5599-bd94-3d94f0d3b437", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88060 is fixed in version 12.2.17-tuxcare.13 of @angular/language-service." } } ], "dependencies": [ { "ref": "pkg:npm/%40angular/language-service@12.2.17-tuxcare.13" } ] }