{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:62ac64ab-a0c8-5cab-8900-2d5d81d133fd", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@angular/compiler", "purl": "pkg:npm/%40angular/compiler@18.2.14-tuxcare.15", "type": "library", "bom-ref": "pkg:npm/%40angular/compiler@18.2.14-tuxcare.15", "version": "18.2.14-tuxcare.15", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-66035", "affects": [ { "ref": "pkg:npm/%40angular/compiler@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:2f98a127-2ce0-5301-9e9c-59f2dc0ecf97", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 18.2.14-tuxcare.15 of @angular/compiler." } }, { "id": "CVE-2025-66412", "affects": [ { "ref": "pkg:npm/%40angular/compiler@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:3d281209-8d7a-52fd-b16f-828a03331f0d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 18.2.14-tuxcare.15 of @angular/compiler." } }, { "id": "CVE-2026-101895", "affects": [ { "ref": "pkg:npm/%40angular/compiler@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:c9f81193-5a13-56ff-ab76-48b9483f860b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101895 affects version 18.2.14-tuxcare.15 of @angular/compiler." } }, { "id": "CVE-2026-22610", "affects": [ { "ref": "pkg:npm/%40angular/compiler@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:6932d364-01ea-560a-afc7-e89a75d8827d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22610 is fixed in version 18.2.14-tuxcare.15 of @angular/compiler." } }, { "id": "CVE-2026-27970", "affects": [ { "ref": "pkg:npm/%40angular/compiler@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:dd103544-140a-5ba3-a385-8d99288ead82", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27970 is fixed in version 18.2.14-tuxcare.15 of @angular/compiler." } }, { "id": "CVE-2026-32635", "affects": [ { "ref": "pkg:npm/%40angular/compiler@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:669ade76-884c-50de-9d2b-7eae19c652ec", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-32635 is fixed in version 18.2.14-tuxcare.15 of @angular/compiler." } }, { "id": "CVE-2026-46417", "affects": [ { "ref": "pkg:npm/%40angular/compiler@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:08fdce08-150c-577d-afcc-ee448f72f6f6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46417 is fixed in version 18.2.14-tuxcare.15 of @angular/compiler." } }, { "id": "CVE-2026-50168", "affects": [ { "ref": "pkg:npm/%40angular/compiler@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:7cee9489-5d7d-59ac-8f40-222f6825e7fa", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50168 is fixed in version 18.2.14-tuxcare.15 of @angular/compiler." } }, { "id": "CVE-2026-50169", "affects": [ { "ref": "pkg:npm/%40angular/compiler@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:904f8a96-8cf2-5b54-9f11-fd53cfb0ee97", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50169 is fixed in version 18.2.14-tuxcare.15 of @angular/compiler." } }, { "id": "CVE-2026-50170", "affects": [ { "ref": "pkg:npm/%40angular/compiler@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:8fe5c655-c01e-53ef-926f-99455652c4f5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50170 is fixed in version 18.2.14-tuxcare.15 of @angular/compiler." } }, { "id": "CVE-2026-50171", "affects": [ { "ref": "pkg:npm/%40angular/compiler@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:85ba4d1e-e5f1-51fb-bd2e-02c956db9a96", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50171 is fixed in version 18.2.14-tuxcare.15 of @angular/compiler." } }, { "id": "CVE-2026-50184", "affects": [ { "ref": "pkg:npm/%40angular/compiler@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:61d82bd8-85a2-5bac-a285-5745a73de4be", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50184 is fixed in version 18.2.14-tuxcare.15 of @angular/compiler." } }, { "id": "CVE-2026-50555", "affects": [ { "ref": "pkg:npm/%40angular/compiler@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:1ff3b399-8897-5895-97a6-64539eef711e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50555 is fixed in version 18.2.14-tuxcare.15 of @angular/compiler." } }, { "id": "CVE-2026-50556", "affects": [ { "ref": "pkg:npm/%40angular/compiler@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:0ca0ccba-3beb-5614-920f-88c7e228b191", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50556 is fixed in version 18.2.14-tuxcare.15 of @angular/compiler." } }, { "id": "CVE-2026-50557", "affects": [ { "ref": "pkg:npm/%40angular/compiler@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:5a6217c9-c490-57af-8a30-b165a44ec770", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50557 is fixed in version 18.2.14-tuxcare.15 of @angular/compiler." } }, { "id": "CVE-2026-52725", "affects": [ { "ref": "pkg:npm/%40angular/compiler@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:9c96f742-3739-50b6-b466-e4ca7180e6bc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-52725 is fixed in version 18.2.14-tuxcare.15 of @angular/compiler." } }, { "id": "CVE-2026-54264", "affects": [ { "ref": "pkg:npm/%40angular/compiler@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:36165927-0e1d-5d44-90b1-e2d6509ea9cf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54264 is fixed in version 18.2.14-tuxcare.15 of @angular/compiler." } }, { "id": "CVE-2026-54265", "affects": [ { "ref": "pkg:npm/%40angular/compiler@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:0b324356-7629-5710-8bac-847cea1d9297", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54265 is fixed in version 18.2.14-tuxcare.15 of @angular/compiler." } }, { "id": "CVE-2026-54266", "affects": [ { "ref": "pkg:npm/%40angular/compiler@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:0ccf4560-8d36-554e-83cf-390f959fc4e1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54266 is fixed in version 18.2.14-tuxcare.15 of @angular/compiler." } }, { "id": "CVE-2026-54267", "affects": [ { "ref": "pkg:npm/%40angular/compiler@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:00bb6aa2-22a9-5869-9c1d-a45847ba80f3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54267 is fixed in version 18.2.14-tuxcare.15 of @angular/compiler." } }, { "id": "CVE-2026-54268", "affects": [ { "ref": "pkg:npm/%40angular/compiler@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:13026e23-3c0c-5b9d-8e42-e8c17ca006ec", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54268 is fixed in version 18.2.14-tuxcare.15 of @angular/compiler." } }, { "id": "CVE-2026-68945", "affects": [ { "ref": "pkg:npm/%40angular/compiler@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:fd566a65-f02f-53fd-add0-07404e5f94c7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-68945 is fixed in version 18.2.14-tuxcare.15 of @angular/compiler." } }, { "id": "CVE-2026-69149", "affects": [ { "ref": "pkg:npm/%40angular/compiler@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:2f0e6f3b-edb5-581b-b09f-4a8d68d06e50", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69149 is fixed in version 18.2.14-tuxcare.15 of @angular/compiler." } }, { "id": "CVE-2026-69151", "affects": [ { "ref": "pkg:npm/%40angular/compiler@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:17c1bb97-ad97-5df3-bf79-c15fdb7b3fb4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69151 is fixed in version 18.2.14-tuxcare.15 of @angular/compiler." } }, { "id": "CVE-2026-88056", "affects": [ { "ref": "pkg:npm/%40angular/compiler@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:49cb5d72-4470-5ee0-90c4-45f00ea1c359", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88056 does not affect version 18.2.14-tuxcare.15 of @angular/compiler. not_affected \u2014 The target version 18.2.14-tuxcare.13 is NOT affected by CVE-2026-88056. The vulnerable code pattern (calling String.prototype.trim() on URL strings before resolution) was never present in this version. The target uses a refactored parseUrl() implementation introduced via commit 49a60f6045 (May 2026) that correctly handles Unicode whitespace by percent-encoding it rather than stripping it, main...", "justification": "code_not_present" } }, { "id": "CVE-2026-88057", "affects": [ { "ref": "pkg:npm/%40angular/compiler@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:aa3d9878-ac7a-54a6-b188-d6e0e81b5ac2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88057 is fixed in version 18.2.14-tuxcare.15 of @angular/compiler." } }, { "id": "CVE-2026-88058", "affects": [ { "ref": "pkg:npm/%40angular/compiler@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:199daa07-dd49-5cf4-911b-9d9aac7a05fb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88058 is fixed in version 18.2.14-tuxcare.15 of @angular/compiler." } }, { "id": "CVE-2026-88059", "affects": [ { "ref": "pkg:npm/%40angular/compiler@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:08e77bc4-9425-51cf-a31e-48fbe36f8169", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88059 is fixed in version 18.2.14-tuxcare.15 of @angular/compiler." } }, { "id": "CVE-2026-88060", "affects": [ { "ref": "pkg:npm/%40angular/compiler@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:00daa474-7abc-5304-aa66-e9897cf5ecbe", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88060 is fixed in version 18.2.14-tuxcare.15 of @angular/compiler." } } ], "dependencies": [ { "ref": "pkg:npm/%40angular/compiler@18.2.14-tuxcare.15" } ] }