{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:b4f34264-2b05-54fd-bf62-aa64f0f93ab7", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@angular/bazel", "purl": "pkg:npm/%40angular/bazel@18.2.14-tuxcare.15", "type": "library", "bom-ref": "pkg:npm/%40angular/bazel@18.2.14-tuxcare.15", "version": "18.2.14-tuxcare.15", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-66035", "affects": [ { "ref": "pkg:npm/%40angular/bazel@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:c5fcf5cd-a599-5659-8c91-9c343e927a67", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 18.2.14-tuxcare.15 of @angular/bazel." } }, { "id": "CVE-2025-66412", "affects": [ { "ref": "pkg:npm/%40angular/bazel@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:c2ff800b-d9bc-58dd-84eb-1a65336aa697", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 18.2.14-tuxcare.15 of @angular/bazel." } }, { "id": "CVE-2026-101895", "affects": [ { "ref": "pkg:npm/%40angular/bazel@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:f7503bfc-69b9-50f3-beb1-9682df5f7945", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101895 affects version 18.2.14-tuxcare.15 of @angular/bazel." } }, { "id": "CVE-2026-22610", "affects": [ { "ref": "pkg:npm/%40angular/bazel@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:6efd0ba2-edfc-505e-b183-e6680642f708", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22610 is fixed in version 18.2.14-tuxcare.15 of @angular/bazel." } }, { "id": "CVE-2026-27970", "affects": [ { "ref": "pkg:npm/%40angular/bazel@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:12bed473-8b74-593b-8b5c-91d6f2883b0a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27970 is fixed in version 18.2.14-tuxcare.15 of @angular/bazel." } }, { "id": "CVE-2026-32635", "affects": [ { "ref": "pkg:npm/%40angular/bazel@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:dc3088ba-80f1-5164-9c9c-b29f437e5311", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-32635 is fixed in version 18.2.14-tuxcare.15 of @angular/bazel." } }, { "id": "CVE-2026-46417", "affects": [ { "ref": "pkg:npm/%40angular/bazel@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:63af4d6f-9b0c-51a8-b04d-fc63f4e8f189", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46417 is fixed in version 18.2.14-tuxcare.15 of @angular/bazel." } }, { "id": "CVE-2026-50168", "affects": [ { "ref": "pkg:npm/%40angular/bazel@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:47b7586f-da72-5086-96de-f9dbeb91a655", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50168 is fixed in version 18.2.14-tuxcare.15 of @angular/bazel." } }, { "id": "CVE-2026-50169", "affects": [ { "ref": "pkg:npm/%40angular/bazel@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:8766994a-06d1-5b0c-8911-4654c2ec56ed", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50169 is fixed in version 18.2.14-tuxcare.15 of @angular/bazel." } }, { "id": "CVE-2026-50170", "affects": [ { "ref": "pkg:npm/%40angular/bazel@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:2d15a0e1-345b-560e-aba8-c12d83e4af1e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50170 is fixed in version 18.2.14-tuxcare.15 of @angular/bazel." } }, { "id": "CVE-2026-50171", "affects": [ { "ref": "pkg:npm/%40angular/bazel@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:aee85881-ea13-5369-b7ab-f49e0d150c16", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50171 is fixed in version 18.2.14-tuxcare.15 of @angular/bazel." } }, { "id": "CVE-2026-50184", "affects": [ { "ref": "pkg:npm/%40angular/bazel@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:44734e9d-4ce2-54ae-b75c-b612e2967be2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50184 is fixed in version 18.2.14-tuxcare.15 of @angular/bazel." } }, { "id": "CVE-2026-50555", "affects": [ { "ref": "pkg:npm/%40angular/bazel@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:f1bced01-eb7c-5db6-aac7-06d3932931eb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50555 is fixed in version 18.2.14-tuxcare.15 of @angular/bazel." } }, { "id": "CVE-2026-50556", "affects": [ { "ref": "pkg:npm/%40angular/bazel@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:ac15ceac-a04f-541b-acfd-d73e8e637ec7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50556 is fixed in version 18.2.14-tuxcare.15 of @angular/bazel." } }, { "id": "CVE-2026-50557", "affects": [ { "ref": "pkg:npm/%40angular/bazel@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:59b43ea2-7f3a-50de-a43b-ebfb7058568a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50557 is fixed in version 18.2.14-tuxcare.15 of @angular/bazel." } }, { "id": "CVE-2026-52725", "affects": [ { "ref": "pkg:npm/%40angular/bazel@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:dee08284-8f25-58a1-a79c-ea7b83944842", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-52725 is fixed in version 18.2.14-tuxcare.15 of @angular/bazel." } }, { "id": "CVE-2026-54264", "affects": [ { "ref": "pkg:npm/%40angular/bazel@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:3ab781f3-b9ad-5498-abf9-f84b5bb5dacf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54264 is fixed in version 18.2.14-tuxcare.15 of @angular/bazel." } }, { "id": "CVE-2026-54265", "affects": [ { "ref": "pkg:npm/%40angular/bazel@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:faa7b345-f4b1-5e4e-b586-dffb16dcf9fa", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54265 is fixed in version 18.2.14-tuxcare.15 of @angular/bazel." } }, { "id": "CVE-2026-54266", "affects": [ { "ref": "pkg:npm/%40angular/bazel@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:59d16f14-297b-51df-9b4e-d2d4d7216bd1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54266 is fixed in version 18.2.14-tuxcare.15 of @angular/bazel." } }, { "id": "CVE-2026-54267", "affects": [ { "ref": "pkg:npm/%40angular/bazel@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:f98b46c0-f743-5848-a882-9700c81e9b7f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54267 is fixed in version 18.2.14-tuxcare.15 of @angular/bazel." } }, { "id": "CVE-2026-54268", "affects": [ { "ref": "pkg:npm/%40angular/bazel@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:088ce7b4-5f92-509c-b6af-5e76f66907f4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54268 is fixed in version 18.2.14-tuxcare.15 of @angular/bazel." } }, { "id": "CVE-2026-68945", "affects": [ { "ref": "pkg:npm/%40angular/bazel@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:c590ff86-19af-5f87-95c1-99ca3e7299bc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-68945 is fixed in version 18.2.14-tuxcare.15 of @angular/bazel." } }, { "id": "CVE-2026-69149", "affects": [ { "ref": "pkg:npm/%40angular/bazel@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:d5f59ade-f15c-56c5-aba9-887f3a9f0194", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69149 is fixed in version 18.2.14-tuxcare.15 of @angular/bazel." } }, { "id": "CVE-2026-69151", "affects": [ { "ref": "pkg:npm/%40angular/bazel@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:c99c5c25-29ee-5d71-8a7b-9409e70d1195", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69151 is fixed in version 18.2.14-tuxcare.15 of @angular/bazel." } }, { "id": "CVE-2026-88056", "affects": [ { "ref": "pkg:npm/%40angular/bazel@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:f6526b11-df80-5ca6-9ac8-463e03c3a3f5", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88056 does not affect version 18.2.14-tuxcare.15 of @angular/bazel. not_affected \u2014 The target version 18.2.14-tuxcare.13 is NOT affected by CVE-2026-88056. The vulnerable code pattern (calling String.prototype.trim() on URL strings before resolution) was never present in this version. The target uses a refactored parseUrl() implementation introduced via commit 49a60f6045 (May 2026) that correctly handles Unicode whitespace by percent-encoding it rather than stripping it, main...", "justification": "code_not_present" } }, { "id": "CVE-2026-88057", "affects": [ { "ref": "pkg:npm/%40angular/bazel@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:b4363397-33ef-5bd0-b360-1fd921c4e336", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88057 is fixed in version 18.2.14-tuxcare.15 of @angular/bazel." } }, { "id": "CVE-2026-88058", "affects": [ { "ref": "pkg:npm/%40angular/bazel@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:688f6af6-125e-54ec-b322-203bf88358ba", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88058 is fixed in version 18.2.14-tuxcare.15 of @angular/bazel." } }, { "id": "CVE-2026-88059", "affects": [ { "ref": "pkg:npm/%40angular/bazel@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:abe2c00b-a923-55ab-a709-7c3e05ebc462", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88059 is fixed in version 18.2.14-tuxcare.15 of @angular/bazel." } }, { "id": "CVE-2026-88060", "affects": [ { "ref": "pkg:npm/%40angular/bazel@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:ecc4c1ee-d4d5-5641-9058-ff5a3f4f1f24", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88060 is fixed in version 18.2.14-tuxcare.15 of @angular/bazel." } } ], "dependencies": [ { "ref": "pkg:npm/%40angular/bazel@18.2.14-tuxcare.15" } ] }