{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:cf53331b-214d-50d7-b730-147e637e7e99", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@angular/platform-webworker", "purl": "pkg:npm/%40angular/platform-webworker@7.2.0-tuxcare.8", "type": "library", "bom-ref": "pkg:npm/%40angular/platform-webworker@7.2.0-tuxcare.8", "version": "7.2.0-tuxcare.8", "pedigree": { "ancestors": [ { "name": "@angular/platform-webworker", "purl": "pkg:npm/%40angular/platform-webworker@7.2.0", "type": "library", "version": "7.2.0" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2021-4231", "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@7.2.0-tuxcare.8" } ], "bom-ref": "urn:uuid:3057d789-03cc-503a-b32f-b7f0af7eab67", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-4231 is fixed in version 7.2.0-tuxcare.8 of @angular/platform-webworker." } }, { "id": "CVE-2025-66035", "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@7.2.0-tuxcare.8" } ], "bom-ref": "urn:uuid:a921d715-6603-5553-99ed-a77c82698e4e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 7.2.0-tuxcare.8 of @angular/platform-webworker." } }, { "id": "CVE-2025-66412", "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@7.2.0-tuxcare.8" } ], "bom-ref": "urn:uuid:2b4570ac-6aa8-5cfd-9b75-13a6569a14a3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 7.2.0-tuxcare.8 of @angular/platform-webworker." } }, { "id": "CVE-2026-101895", "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@7.2.0-tuxcare.8" } ], "bom-ref": "urn:uuid:e9484811-3246-5c89-bcea-77e7a3dedb7b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-101895 is fixed in version 7.2.0-tuxcare.8 of @angular/platform-webworker." } }, { "id": "CVE-2026-101896", "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@7.2.0-tuxcare.8" } ], "bom-ref": "urn:uuid:79109762-b28e-5052-822e-d6b22461b005", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101896 affects version 7.2.0-tuxcare.8 of @angular/platform-webworker." } }, { "id": "CVE-2026-22610", "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@7.2.0-tuxcare.8" } ], "bom-ref": "urn:uuid:a326f7cb-c34f-51ae-9915-3299e2a4a4ec", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22610 is fixed in version 7.2.0-tuxcare.8 of @angular/platform-webworker." } }, { "id": "CVE-2026-27970", "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@7.2.0-tuxcare.8" } ], "bom-ref": "urn:uuid:e1cbb749-274e-5bba-8f3d-a41f4306628f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27970 is fixed in version 7.2.0-tuxcare.8 of @angular/platform-webworker." } }, { "id": "CVE-2026-41423", "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@7.2.0-tuxcare.8" } ], "bom-ref": "urn:uuid:9479deeb-ac40-5353-9d6b-3e7ef48c645b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41423 is fixed in version 7.2.0-tuxcare.8 of @angular/platform-webworker." } }, { "id": "CVE-2026-46417", "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@7.2.0-tuxcare.8" } ], "bom-ref": "urn:uuid:b8cb4cae-6b40-551d-b156-7bd199e7df6f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46417 is fixed in version 7.2.0-tuxcare.8 of @angular/platform-webworker." } }, { "id": "CVE-2026-50168", "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@7.2.0-tuxcare.8" } ], "bom-ref": "urn:uuid:e2d51940-5996-58be-8729-28357104a9b4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50168 is fixed in version 7.2.0-tuxcare.8 of @angular/platform-webworker." } }, { "id": "CVE-2026-50169", "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@7.2.0-tuxcare.8" } ], "bom-ref": "urn:uuid:71d5bd14-3d71-5ceb-bb56-5dba55c5ab54", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50169 is fixed in version 7.2.0-tuxcare.8 of @angular/platform-webworker." } }, { "id": "CVE-2026-50170", "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@7.2.0-tuxcare.8" } ], "bom-ref": "urn:uuid:541e2f2c-e158-5671-9fce-e346f244db36", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50170 is fixed in version 7.2.0-tuxcare.8 of @angular/platform-webworker." } }, { "id": "CVE-2026-50171", "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@7.2.0-tuxcare.8" } ], "bom-ref": "urn:uuid:957cac9f-8662-5c4d-8596-14515eb854da", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50171 is fixed in version 7.2.0-tuxcare.8 of @angular/platform-webworker." } }, { "id": "CVE-2026-50184", "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@7.2.0-tuxcare.8" } ], "bom-ref": "urn:uuid:3d8115b3-a952-5f06-be88-aaa3ce3ee713", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50184 is fixed in version 7.2.0-tuxcare.8 of @angular/platform-webworker." } }, { "id": "CVE-2026-50555", "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@7.2.0-tuxcare.8" } ], "bom-ref": "urn:uuid:0bb843e0-fea9-5f93-83e9-2a5b944f5d2b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50555 is fixed in version 7.2.0-tuxcare.8 of @angular/platform-webworker." } }, { "id": "CVE-2026-50556", "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@7.2.0-tuxcare.8" } ], "bom-ref": "urn:uuid:c9d68d7d-a3e5-5a3a-bf64-bc59fe371228", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50556 is fixed in version 7.2.0-tuxcare.8 of @angular/platform-webworker." } }, { "id": "CVE-2026-50557", "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@7.2.0-tuxcare.8" } ], "bom-ref": "urn:uuid:6e078f52-7d2e-597b-9425-a6de7b1b9a7a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50557 is fixed in version 7.2.0-tuxcare.8 of @angular/platform-webworker." } }, { "id": "CVE-2026-52725", "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@7.2.0-tuxcare.8" } ], "bom-ref": "urn:uuid:11968d22-4097-5a9d-806d-9c25df11a517", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-52725 is fixed in version 7.2.0-tuxcare.8 of @angular/platform-webworker." } }, { "id": "CVE-2026-54264", "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@7.2.0-tuxcare.8" } ], "bom-ref": "urn:uuid:0662358e-68e6-5398-a353-84aad25f95d4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54264 is fixed in version 7.2.0-tuxcare.8 of @angular/platform-webworker." } }, { "id": "CVE-2026-54265", "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@7.2.0-tuxcare.8" } ], "bom-ref": "urn:uuid:3c13c409-2aa4-5284-87a1-2cd09ac0e4bf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54265 is fixed in version 7.2.0-tuxcare.8 of @angular/platform-webworker." } }, { "id": "CVE-2026-54266", "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@7.2.0-tuxcare.8" } ], "bom-ref": "urn:uuid:59176ce8-672c-50f8-9c9b-c8794f443acc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54266 is fixed in version 7.2.0-tuxcare.8 of @angular/platform-webworker." } }, { "id": "CVE-2026-54267", "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@7.2.0-tuxcare.8" } ], "bom-ref": "urn:uuid:457345ba-ce1e-5c89-966e-2243dbae7b63", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54267 is fixed in version 7.2.0-tuxcare.8 of @angular/platform-webworker." } }, { "id": "CVE-2026-54268", "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@7.2.0-tuxcare.8" } ], "bom-ref": "urn:uuid:2272bc47-d6f4-5a64-a4ea-70071f614191", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54268 is fixed in version 7.2.0-tuxcare.8 of @angular/platform-webworker." } }, { "id": "CVE-2026-68945", "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@7.2.0-tuxcare.8" } ], "bom-ref": "urn:uuid:4fecb589-b2ff-5f3a-9610-33e0b65e41a6", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-68945 does not affect version 7.2.0-tuxcare.8 of @angular/platform-webworker. not_affected \u2014 Angular v7.2.0 is NOT AFFECTED by CVE-2026-68945. The vulnerable component (HttpTransferCache) does not exist in this version. According to patch documentation in the repository (CVE-2026-50170.patch, CVE-2026-54266.patch), the HTTP transfer-cache and client hydration features were introduced in Angular v16. Angular v7.2.0 predates this feature by many major versions. Exhaustive searches confir...", "justification": "code_not_present" } }, { "id": "CVE-2026-69149", "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@7.2.0-tuxcare.8" } ], "bom-ref": "urn:uuid:4d8976a5-d22b-5b0f-a21e-215da9f227cd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69149 is fixed in version 7.2.0-tuxcare.8 of @angular/platform-webworker." } }, { "id": "CVE-2026-69151", "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@7.2.0-tuxcare.8" } ], "bom-ref": "urn:uuid:7343cbc8-74b0-5535-81f1-dca6be6b3991", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69151 is fixed in version 7.2.0-tuxcare.8 of @angular/platform-webworker." } }, { "id": "CVE-2026-88056", "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@7.2.0-tuxcare.8" } ], "bom-ref": "urn:uuid:852af16f-c258-579e-b467-2975b381d42a", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88056 does not affect version 7.2.0-tuxcare.8 of @angular/platform-webworker. not_affected \u2014 Angular version 7.2.0 is not affected by CVE-2026-88056. The vulnerability requires the presence of a `parseUrl` function in `packages/platform-server/src/url.ts` that uses `String.prototype.trim()` to normalize URLs, which strips Unicode whitespace and can convert validated same-origin relative URLs into cross-origin protocol-relative URLs. Version 7.2.0 does not contain the `url.ts` file; it ...", "justification": "code_not_present" } }, { "id": "CVE-2026-88057", "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@7.2.0-tuxcare.8" } ], "bom-ref": "urn:uuid:c82c3336-d620-5d6c-b275-b3ef2b4d76a4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88057 is fixed in version 7.2.0-tuxcare.8 of @angular/platform-webworker." } }, { "id": "CVE-2026-88058", "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@7.2.0-tuxcare.8" } ], "bom-ref": "urn:uuid:30991166-7f97-546f-b7f4-cd4f6dc76973", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88058 is fixed in version 7.2.0-tuxcare.8 of @angular/platform-webworker." } }, { "id": "CVE-2026-88059", "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@7.2.0-tuxcare.8" } ], "bom-ref": "urn:uuid:73bbd1bd-585c-5b09-ba2e-41f92f18b0f6", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88059 does not affect version 7.2.0-tuxcare.8 of @angular/platform-webworker. not_affected \u2014 Angular v7.2.0 is NOT AFFECTED by CVE-2026-88059. The vulnerability requires HttpTransferCache, hierarchical HttpClient delegation (withRequestsMadeViaParent()), and automatic HTTP response caching features that were introduced in Angular v16+. Version 7.2.0 uses NgModule-based configuration (HttpClientModule) with manual TransferState only\u2014no automatic HTTP-to-TransferState caching exists. The...", "justification": "code_not_present" } }, { "id": "CVE-2026-88060", "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@7.2.0-tuxcare.8" } ], "bom-ref": "urn:uuid:86046122-9c66-5a71-9134-b19abc194ff3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88060 is fixed in version 7.2.0-tuxcare.8 of @angular/platform-webworker." } } ], "dependencies": [ { "ref": "pkg:npm/%40angular/platform-webworker@7.2.0-tuxcare.8" } ] }