{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:3877721c-36b4-5e4c-865e-a23cec5f2871", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@angular/forms", "purl": "pkg:npm/%40angular/forms@18.2.14-tuxcare.15", "type": "library", "bom-ref": "pkg:npm/%40angular/forms@18.2.14-tuxcare.15", "version": "18.2.14-tuxcare.15", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-66035", "affects": [ { "ref": "pkg:npm/%40angular/forms@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:0dc99504-611b-531a-8315-fe909319cae2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 18.2.14-tuxcare.15 of @angular/forms." } }, { "id": "CVE-2025-66412", "affects": [ { "ref": "pkg:npm/%40angular/forms@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:3d8ebbbf-73f4-5899-924c-d2c7789f2b42", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 18.2.14-tuxcare.15 of @angular/forms." } }, { "id": "CVE-2026-101895", "affects": [ { "ref": "pkg:npm/%40angular/forms@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:dbc0ef44-6e62-5941-805a-00d9c7d9576f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101895 affects version 18.2.14-tuxcare.15 of @angular/forms." } }, { "id": "CVE-2026-22610", "affects": [ { "ref": "pkg:npm/%40angular/forms@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:502cb906-6a81-5cb2-be4c-94e3388f75e2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22610 is fixed in version 18.2.14-tuxcare.15 of @angular/forms." } }, { "id": "CVE-2026-27970", "affects": [ { "ref": "pkg:npm/%40angular/forms@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:2e77428c-d5fe-589c-b003-3209ce70907a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27970 is fixed in version 18.2.14-tuxcare.15 of @angular/forms." } }, { "id": "CVE-2026-32635", "affects": [ { "ref": "pkg:npm/%40angular/forms@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:659bec0f-492c-5ff5-9675-e009c9b10e33", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-32635 is fixed in version 18.2.14-tuxcare.15 of @angular/forms." } }, { "id": "CVE-2026-46417", "affects": [ { "ref": "pkg:npm/%40angular/forms@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:3a144b55-b040-5c8a-8b0c-2b9cb3daecea", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46417 is fixed in version 18.2.14-tuxcare.15 of @angular/forms." } }, { "id": "CVE-2026-50168", "affects": [ { "ref": "pkg:npm/%40angular/forms@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:784c4d1d-42d1-52a8-9cfe-9c6c74b0e9ef", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50168 is fixed in version 18.2.14-tuxcare.15 of @angular/forms." } }, { "id": "CVE-2026-50169", "affects": [ { "ref": "pkg:npm/%40angular/forms@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:3ecdc1d8-2a81-5e52-9ac1-643a8eb7fbd3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50169 is fixed in version 18.2.14-tuxcare.15 of @angular/forms." } }, { "id": "CVE-2026-50170", "affects": [ { "ref": "pkg:npm/%40angular/forms@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:0a6301b7-03ef-5b16-ad20-f5b6f2e34cdc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50170 is fixed in version 18.2.14-tuxcare.15 of @angular/forms." } }, { "id": "CVE-2026-50171", "affects": [ { "ref": "pkg:npm/%40angular/forms@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:f1f04c4c-02c7-5772-8de7-632624e218ec", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50171 is fixed in version 18.2.14-tuxcare.15 of @angular/forms." } }, { "id": "CVE-2026-50184", "affects": [ { "ref": "pkg:npm/%40angular/forms@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:0d37fd13-2c2c-5016-aec8-14edbe63da60", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50184 is fixed in version 18.2.14-tuxcare.15 of @angular/forms." } }, { "id": "CVE-2026-50555", "affects": [ { "ref": "pkg:npm/%40angular/forms@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:6803c2c7-98f0-5d2b-b2d5-147557eecafd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50555 is fixed in version 18.2.14-tuxcare.15 of @angular/forms." } }, { "id": "CVE-2026-50556", "affects": [ { "ref": "pkg:npm/%40angular/forms@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:339cd78c-d89a-5844-aee4-defe2cf0d4ca", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50556 is fixed in version 18.2.14-tuxcare.15 of @angular/forms." } }, { "id": "CVE-2026-50557", "affects": [ { "ref": "pkg:npm/%40angular/forms@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:c4d2acc2-906d-580d-a640-79e19b65fdc6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50557 is fixed in version 18.2.14-tuxcare.15 of @angular/forms." } }, { "id": "CVE-2026-52725", "affects": [ { "ref": "pkg:npm/%40angular/forms@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:093cdaca-45a2-5b53-9a7e-96de8cce9c91", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-52725 is fixed in version 18.2.14-tuxcare.15 of @angular/forms." } }, { "id": "CVE-2026-54264", "affects": [ { "ref": "pkg:npm/%40angular/forms@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:1b672bf3-36b2-5c8b-823c-e9d5d9654954", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54264 is fixed in version 18.2.14-tuxcare.15 of @angular/forms." } }, { "id": "CVE-2026-54265", "affects": [ { "ref": "pkg:npm/%40angular/forms@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:3c6aa43a-ebd5-5123-ad56-12891836af18", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54265 is fixed in version 18.2.14-tuxcare.15 of @angular/forms." } }, { "id": "CVE-2026-54266", "affects": [ { "ref": "pkg:npm/%40angular/forms@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:ca050024-dba9-5675-a438-4645279fa279", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54266 is fixed in version 18.2.14-tuxcare.15 of @angular/forms." } }, { "id": "CVE-2026-54267", "affects": [ { "ref": "pkg:npm/%40angular/forms@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:36ae2a43-093f-5080-bfe7-850229efda9c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54267 is fixed in version 18.2.14-tuxcare.15 of @angular/forms." } }, { "id": "CVE-2026-54268", "affects": [ { "ref": "pkg:npm/%40angular/forms@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:faca6dbf-d4de-5a23-bccf-83766a75f8b3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54268 is fixed in version 18.2.14-tuxcare.15 of @angular/forms." } }, { "id": "CVE-2026-68945", "affects": [ { "ref": "pkg:npm/%40angular/forms@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:ca0b0cca-369f-58d5-bab4-9f275b5d3bf4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-68945 is fixed in version 18.2.14-tuxcare.15 of @angular/forms." } }, { "id": "CVE-2026-69149", "affects": [ { "ref": "pkg:npm/%40angular/forms@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:353f661d-139c-5ffe-bbff-5a53c117aede", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69149 is fixed in version 18.2.14-tuxcare.15 of @angular/forms." } }, { "id": "CVE-2026-69151", "affects": [ { "ref": "pkg:npm/%40angular/forms@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:12548bb1-ceeb-5804-a6bd-b3f80460f498", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69151 is fixed in version 18.2.14-tuxcare.15 of @angular/forms." } }, { "id": "CVE-2026-88056", "affects": [ { "ref": "pkg:npm/%40angular/forms@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:e2161c6e-5070-54b2-a24d-296efb2a9148", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88056 does not affect version 18.2.14-tuxcare.15 of @angular/forms. not_affected \u2014 The target version 18.2.14-tuxcare.13 is NOT affected by CVE-2026-88056. The vulnerable code pattern (calling String.prototype.trim() on URL strings before resolution) was never present in this version. The target uses a refactored parseUrl() implementation introduced via commit 49a60f6045 (May 2026) that correctly handles Unicode whitespace by percent-encoding it rather than stripping it, main...", "justification": "code_not_present" } }, { "id": "CVE-2026-88057", "affects": [ { "ref": "pkg:npm/%40angular/forms@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:175553c8-3b43-5e75-921c-4311d72512be", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88057 is fixed in version 18.2.14-tuxcare.15 of @angular/forms." } }, { "id": "CVE-2026-88058", "affects": [ { "ref": "pkg:npm/%40angular/forms@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:e9c1b470-27f1-5425-9bb1-337ec7ff9b17", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88058 is fixed in version 18.2.14-tuxcare.15 of @angular/forms." } }, { "id": "CVE-2026-88059", "affects": [ { "ref": "pkg:npm/%40angular/forms@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:88ac0647-dd80-55ef-83a0-eba4a7f7939b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88059 is fixed in version 18.2.14-tuxcare.15 of @angular/forms." } }, { "id": "CVE-2026-88060", "affects": [ { "ref": "pkg:npm/%40angular/forms@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:247c5a99-a362-5a58-8b46-35b5ae94a0ed", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88060 is fixed in version 18.2.14-tuxcare.15 of @angular/forms." } } ], "dependencies": [ { "ref": "pkg:npm/%40angular/forms@18.2.14-tuxcare.15" } ] }