{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:32da1c8b-3ca7-5fe4-9757-1b0fc4e8fa92", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@angular/router", "purl": "pkg:npm/%40angular/router@19.2.25-tuxcare.6", "type": "library", "bom-ref": "pkg:npm/%40angular/router@19.2.25-tuxcare.6", "version": "19.2.25-tuxcare.6", "pedigree": { "ancestors": [ { "name": "@angular/router", "purl": "pkg:npm/%40angular/router@19.2.25", "type": "library", "version": "19.2.25" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-59052", "affects": [ { "ref": "pkg:npm/%40angular/router@19.2.25-tuxcare.6" } ], "bom-ref": "urn:uuid:f68f0749-d52e-5657-aa78-c8f602db62f5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59052 is fixed in version 19.2.25-tuxcare.6 of @angular/router." } }, { "id": "CVE-2026-101895", "affects": [ { "ref": "pkg:npm/%40angular/router@19.2.25-tuxcare.6" } ], "bom-ref": "urn:uuid:51ef9133-8910-5549-aa14-19f8f750e29d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-101895 is fixed in version 19.2.25-tuxcare.6 of @angular/router." } }, { "id": "CVE-2026-101896", "affects": [ { "ref": "pkg:npm/%40angular/router@19.2.25-tuxcare.6" } ], "bom-ref": "urn:uuid:8013dc22-a3a0-579b-a1d5-871fef062051", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101896 affects version 19.2.25-tuxcare.6 of @angular/router." } }, { "id": "CVE-2026-111752", "affects": [ { "ref": "pkg:npm/%40angular/router@19.2.25-tuxcare.6" } ], "bom-ref": "urn:uuid:6bed8e68-a8ed-5c43-9ea0-52875a8a6420", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-111752 affects version 19.2.25-tuxcare.6 of @angular/router." } }, { "id": "CVE-2026-27970", "affects": [ { "ref": "pkg:npm/%40angular/router@19.2.25-tuxcare.6" } ], "bom-ref": "urn:uuid:6df1b898-67e3-573a-b68e-25cbf9a748c8", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-27970 does not affect version 19.2.25-tuxcare.6 of @angular/router. Angular 19.2.25 is NOT affected by CVE-2026-27970. The vulnerability (XSS via unsanitized attributes in ICU message translations) was fixed in upstream Angular v19.2.19 by commit 747548721d authored by Doug Parker (Angular team). The target version 19.2.25 is 6 patch releases after the fix. The defense code is present at packages/core/src/render3/i18n/i18n_parse.ts:843-867, implementing allowlist validation, URI attribute blocking, and unknown attribute dropping. This is an upstream vendor fix, not a TuxCare backport.", "justification": "code_not_present" } }, { "id": "CVE-2026-54264", "affects": [ { "ref": "pkg:npm/%40angular/router@19.2.25-tuxcare.6" } ], "bom-ref": "urn:uuid:dd3a62cc-6039-5924-a5bd-9f5cbc870f9c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54264 is fixed in version 19.2.25-tuxcare.6 of @angular/router." } }, { "id": "CVE-2026-54265", "affects": [ { "ref": "pkg:npm/%40angular/router@19.2.25-tuxcare.6" } ], "bom-ref": "urn:uuid:c65391d9-c0fb-5209-9573-cec71ded6dca", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54265 is fixed in version 19.2.25-tuxcare.6 of @angular/router." } }, { "id": "CVE-2026-54266", "affects": [ { "ref": "pkg:npm/%40angular/router@19.2.25-tuxcare.6" } ], "bom-ref": "urn:uuid:493cb7f6-f901-5d05-a229-f293f462f381", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54266 is fixed in version 19.2.25-tuxcare.6 of @angular/router." } }, { "id": "CVE-2026-54267", "affects": [ { "ref": "pkg:npm/%40angular/router@19.2.25-tuxcare.6" } ], "bom-ref": "urn:uuid:99a917a0-5a68-5b0a-bbed-f6ca15497761", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54267 is fixed in version 19.2.25-tuxcare.6 of @angular/router." } }, { "id": "CVE-2026-54268", "affects": [ { "ref": "pkg:npm/%40angular/router@19.2.25-tuxcare.6" } ], "bom-ref": "urn:uuid:62411de7-0dc7-5a93-8d7e-c88ef04edffd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54268 is fixed in version 19.2.25-tuxcare.6 of @angular/router." } }, { "id": "CVE-2026-68945", "affects": [ { "ref": "pkg:npm/%40angular/router@19.2.25-tuxcare.6" } ], "bom-ref": "urn:uuid:9a3fc114-8dee-5605-9743-e692b042ee29", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-68945 is fixed in version 19.2.25-tuxcare.6 of @angular/router." } }, { "id": "CVE-2026-69149", "affects": [ { "ref": "pkg:npm/%40angular/router@19.2.25-tuxcare.6" } ], "bom-ref": "urn:uuid:431c283f-c123-58d8-833d-3e98e379fccd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69149 is fixed in version 19.2.25-tuxcare.6 of @angular/router." } }, { "id": "CVE-2026-69151", "affects": [ { "ref": "pkg:npm/%40angular/router@19.2.25-tuxcare.6" } ], "bom-ref": "urn:uuid:1825a6e6-acfe-533c-a5e9-f25808a8bb8f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69151 is fixed in version 19.2.25-tuxcare.6 of @angular/router." } }, { "id": "CVE-2026-88056", "affects": [ { "ref": "pkg:npm/%40angular/router@19.2.25-tuxcare.6" } ], "bom-ref": "urn:uuid:646755e8-3fd3-5ef0-9503-d1afae7d7aff", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88056 is fixed in version 19.2.25-tuxcare.6 of @angular/router." } }, { "id": "CVE-2026-88057", "affects": [ { "ref": "pkg:npm/%40angular/router@19.2.25-tuxcare.6" } ], "bom-ref": "urn:uuid:260f3db4-be51-5afd-a902-05023e9f4034", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88057 is fixed in version 19.2.25-tuxcare.6 of @angular/router." } }, { "id": "CVE-2026-88058", "affects": [ { "ref": "pkg:npm/%40angular/router@19.2.25-tuxcare.6" } ], "bom-ref": "urn:uuid:5a3b9320-d580-5519-8cfe-33504ce326f6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88058 is fixed in version 19.2.25-tuxcare.6 of @angular/router." } }, { "id": "CVE-2026-88059", "affects": [ { "ref": "pkg:npm/%40angular/router@19.2.25-tuxcare.6" } ], "bom-ref": "urn:uuid:2c480465-e0c1-5962-8141-7c3a6dd4381f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88059 is fixed in version 19.2.25-tuxcare.6 of @angular/router." } }, { "id": "CVE-2026-88060", "affects": [ { "ref": "pkg:npm/%40angular/router@19.2.25-tuxcare.6" } ], "bom-ref": "urn:uuid:bb7f36d1-8aa4-538d-bf7d-949bebcc061f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88060 is fixed in version 19.2.25-tuxcare.6 of @angular/router." } } ], "dependencies": [ { "ref": "pkg:npm/%40angular/router@19.2.25-tuxcare.6" } ] }