{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:c07faa8d-c637-5c05-bac9-4037a05ec493", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@angular/compiler-cli", "purl": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.15", "type": "library", "bom-ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.15", "version": "18.2.14-tuxcare.15", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-66035", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:01292fd8-2372-57a9-ae2c-023047115f7b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 18.2.14-tuxcare.15 of @angular/compiler-cli." } }, { "id": "CVE-2025-66412", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:73114054-46ff-5c73-a95f-c4f980cce164", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 18.2.14-tuxcare.15 of @angular/compiler-cli." } }, { "id": "CVE-2026-101895", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:ee7068b8-48f6-5750-a186-4b07d8d44a0b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101895 affects version 18.2.14-tuxcare.15 of @angular/compiler-cli." } }, { "id": "CVE-2026-22610", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:43cb0971-dfb2-512f-ad94-012ac72a9b9c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22610 is fixed in version 18.2.14-tuxcare.15 of @angular/compiler-cli." } }, { "id": "CVE-2026-27970", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:b5edafae-4f6d-54b6-85a9-a403a6397c01", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27970 is fixed in version 18.2.14-tuxcare.15 of @angular/compiler-cli." } }, { "id": "CVE-2026-32635", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:f692cc44-6517-5176-94e6-c708a92d04ff", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-32635 is fixed in version 18.2.14-tuxcare.15 of @angular/compiler-cli." } }, { "id": "CVE-2026-46417", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:2214dad1-328e-5143-9a3b-7d960066a1c7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46417 is fixed in version 18.2.14-tuxcare.15 of @angular/compiler-cli." } }, { "id": "CVE-2026-50168", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:9b1f064c-0739-5052-9cae-2d6562e2b3bf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50168 is fixed in version 18.2.14-tuxcare.15 of @angular/compiler-cli." } }, { "id": "CVE-2026-50169", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:0af57855-bf7e-5f11-8967-590b9a7e72b9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50169 is fixed in version 18.2.14-tuxcare.15 of @angular/compiler-cli." } }, { "id": "CVE-2026-50170", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:e0456e09-a0e8-5a3c-8da0-17819aa18e2c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50170 is fixed in version 18.2.14-tuxcare.15 of @angular/compiler-cli." } }, { "id": "CVE-2026-50171", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:ce0ac637-3c1a-55c1-b74c-df25a462dc2b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50171 is fixed in version 18.2.14-tuxcare.15 of @angular/compiler-cli." } }, { "id": "CVE-2026-50184", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:c1f71b1e-89ef-513c-bef0-31923fb52898", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50184 is fixed in version 18.2.14-tuxcare.15 of @angular/compiler-cli." } }, { "id": "CVE-2026-50555", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:c44f9257-a13c-5db2-9d92-f2cbbcbeb4ae", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50555 is fixed in version 18.2.14-tuxcare.15 of @angular/compiler-cli." } }, { "id": "CVE-2026-50556", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:fef147a7-a2c8-54c5-8138-8e5439d33efd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50556 is fixed in version 18.2.14-tuxcare.15 of @angular/compiler-cli." } }, { "id": "CVE-2026-50557", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:00567557-d51e-5678-b6e6-f124071483ce", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50557 is fixed in version 18.2.14-tuxcare.15 of @angular/compiler-cli." } }, { "id": "CVE-2026-52725", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:8bd60b05-1a2a-5ca4-95cf-a251d124806e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-52725 is fixed in version 18.2.14-tuxcare.15 of @angular/compiler-cli." } }, { "id": "CVE-2026-54264", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:93670f20-5d2b-56d3-9712-f0a6b9631c1d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54264 is fixed in version 18.2.14-tuxcare.15 of @angular/compiler-cli." } }, { "id": "CVE-2026-54265", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:a65e6fbc-bf78-5a5e-aec4-6c74358f1009", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54265 is fixed in version 18.2.14-tuxcare.15 of @angular/compiler-cli." } }, { "id": "CVE-2026-54266", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:29330f5f-57e1-5848-adaf-2d8e0cf76bbf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54266 is fixed in version 18.2.14-tuxcare.15 of @angular/compiler-cli." } }, { "id": "CVE-2026-54267", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:2664854a-42e5-518d-a723-a4676ad43125", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54267 is fixed in version 18.2.14-tuxcare.15 of @angular/compiler-cli." } }, { "id": "CVE-2026-54268", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:5c05dc37-a57f-5830-8876-e5208a2219a7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54268 is fixed in version 18.2.14-tuxcare.15 of @angular/compiler-cli." } }, { "id": "CVE-2026-68945", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:529d564f-00c4-56ae-9e9a-5faa21440712", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-68945 is fixed in version 18.2.14-tuxcare.15 of @angular/compiler-cli." } }, { "id": "CVE-2026-69149", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:3ecf167d-6ce8-5618-b496-0267ec79335b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69149 is fixed in version 18.2.14-tuxcare.15 of @angular/compiler-cli." } }, { "id": "CVE-2026-69151", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:cf4223bc-0e53-511f-b668-4bb81f16876f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69151 is fixed in version 18.2.14-tuxcare.15 of @angular/compiler-cli." } }, { "id": "CVE-2026-88056", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:2aef5692-f026-5743-82cc-5151befba304", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88056 does not affect version 18.2.14-tuxcare.15 of @angular/compiler-cli. not_affected \u2014 The target version 18.2.14-tuxcare.13 is NOT affected by CVE-2026-88056. The vulnerable code pattern (calling String.prototype.trim() on URL strings before resolution) was never present in this version. The target uses a refactored parseUrl() implementation introduced via commit 49a60f6045 (May 2026) that correctly handles Unicode whitespace by percent-encoding it rather than stripping it, main...", "justification": "code_not_present" } }, { "id": "CVE-2026-88057", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:647c9b20-9286-52b6-8c81-ba4ce81396c3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88057 is fixed in version 18.2.14-tuxcare.15 of @angular/compiler-cli." } }, { "id": "CVE-2026-88058", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:fb33037d-78b8-5aa8-99e9-0bf4a24a400e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88058 is fixed in version 18.2.14-tuxcare.15 of @angular/compiler-cli." } }, { "id": "CVE-2026-88059", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:4f95dec9-e73f-5a29-b29d-d8442d50f262", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88059 is fixed in version 18.2.14-tuxcare.15 of @angular/compiler-cli." } }, { "id": "CVE-2026-88060", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:0ee1918e-c297-55a1-b13b-8d724f183763", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88060 is fixed in version 18.2.14-tuxcare.15 of @angular/compiler-cli." } } ], "dependencies": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.15" } ] }