{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:4b16d17e-d077-5d08-83ea-c5f3a25f4efc", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@angular/language-service", "purl": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.15", "type": "library", "bom-ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.15", "version": "18.2.14-tuxcare.15", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-66035", "affects": [ { "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:01c5bcb9-f661-5d9d-99f9-da43a25c1ba3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 18.2.14-tuxcare.15 of @angular/language-service." } }, { "id": "CVE-2025-66412", "affects": [ { "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:e27cbb7d-2455-5b78-82fa-2f138a8d2a9c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 18.2.14-tuxcare.15 of @angular/language-service." } }, { "id": "CVE-2026-101895", "affects": [ { "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:a30cd43c-5388-5e12-810b-1c9e0f2ebcf2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101895 affects version 18.2.14-tuxcare.15 of @angular/language-service." } }, { "id": "CVE-2026-22610", "affects": [ { "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:152c9b70-04f3-5492-847d-fa77fbeb3d59", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22610 is fixed in version 18.2.14-tuxcare.15 of @angular/language-service." } }, { "id": "CVE-2026-27970", "affects": [ { "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:b1153487-6e88-53a5-89bd-9258327ff786", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27970 is fixed in version 18.2.14-tuxcare.15 of @angular/language-service." } }, { "id": "CVE-2026-32635", "affects": [ { "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:da724899-3d8e-5501-bf51-3b3ac80f4a88", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-32635 is fixed in version 18.2.14-tuxcare.15 of @angular/language-service." } }, { "id": "CVE-2026-46417", "affects": [ { "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:bd57485b-fd75-58d7-bb45-b273f89c9a54", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46417 is fixed in version 18.2.14-tuxcare.15 of @angular/language-service." } }, { "id": "CVE-2026-50168", "affects": [ { "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:2f25b0db-2540-5015-ac8a-7dbba42a1fff", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50168 is fixed in version 18.2.14-tuxcare.15 of @angular/language-service." } }, { "id": "CVE-2026-50169", "affects": [ { "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:bf8c22fd-e266-5d4b-9cf3-8f44b8fadb4a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50169 is fixed in version 18.2.14-tuxcare.15 of @angular/language-service." } }, { "id": "CVE-2026-50170", "affects": [ { "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:efff25c6-cbc8-5c28-9c57-ed61b4580952", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50170 is fixed in version 18.2.14-tuxcare.15 of @angular/language-service." } }, { "id": "CVE-2026-50171", "affects": [ { "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:b9b1cedc-de9e-52d9-961c-0bce1ba5dca9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50171 is fixed in version 18.2.14-tuxcare.15 of @angular/language-service." } }, { "id": "CVE-2026-50184", "affects": [ { "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:c714b727-c63d-5a8b-acd1-99b99edf5142", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50184 is fixed in version 18.2.14-tuxcare.15 of @angular/language-service." } }, { "id": "CVE-2026-50555", "affects": [ { "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:2f14a8b9-087f-552b-8d68-f978379e8343", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50555 is fixed in version 18.2.14-tuxcare.15 of @angular/language-service." } }, { "id": "CVE-2026-50556", "affects": [ { "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:32dd9113-cd22-552d-88a1-c73dda78609b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50556 is fixed in version 18.2.14-tuxcare.15 of @angular/language-service." } }, { "id": "CVE-2026-50557", "affects": [ { "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:281ff77e-1733-5203-ba27-03d55bdd6eb0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50557 is fixed in version 18.2.14-tuxcare.15 of @angular/language-service." } }, { "id": "CVE-2026-52725", "affects": [ { "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:ff4ee522-d406-5757-8f7a-2923ed598a54", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-52725 is fixed in version 18.2.14-tuxcare.15 of @angular/language-service." } }, { "id": "CVE-2026-54264", "affects": [ { "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:f2cc85e6-1e4e-504d-9760-cb326af96c2c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54264 is fixed in version 18.2.14-tuxcare.15 of @angular/language-service." } }, { "id": "CVE-2026-54265", "affects": [ { "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:0ec09d50-eb02-5443-a878-8574919a65c6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54265 is fixed in version 18.2.14-tuxcare.15 of @angular/language-service." } }, { "id": "CVE-2026-54266", "affects": [ { "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:90135f04-794b-5405-8825-92f9de556f71", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54266 is fixed in version 18.2.14-tuxcare.15 of @angular/language-service." } }, { "id": "CVE-2026-54267", "affects": [ { "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:ae689c6a-565c-5248-b904-7fb5b46dce62", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54267 is fixed in version 18.2.14-tuxcare.15 of @angular/language-service." } }, { "id": "CVE-2026-54268", "affects": [ { "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:70df5294-65af-583e-8f8b-acce67463e52", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54268 is fixed in version 18.2.14-tuxcare.15 of @angular/language-service." } }, { "id": "CVE-2026-68945", "affects": [ { "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:db3d360f-6a89-549d-bbf8-7e7553ec88e9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-68945 is fixed in version 18.2.14-tuxcare.15 of @angular/language-service." } }, { "id": "CVE-2026-69149", "affects": [ { "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:8ee7ed94-8f9b-5267-a46b-52d1a9f4dfc8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69149 is fixed in version 18.2.14-tuxcare.15 of @angular/language-service." } }, { "id": "CVE-2026-69151", "affects": [ { "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:6f23cc31-15c5-590e-9878-5d9446c15af7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69151 is fixed in version 18.2.14-tuxcare.15 of @angular/language-service." } }, { "id": "CVE-2026-88056", "affects": [ { "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:046d712c-ae54-5d3c-9c71-59edfc18cf13", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88056 does not affect version 18.2.14-tuxcare.15 of @angular/language-service. not_affected \u2014 The target version 18.2.14-tuxcare.13 is NOT affected by CVE-2026-88056. The vulnerable code pattern (calling String.prototype.trim() on URL strings before resolution) was never present in this version. The target uses a refactored parseUrl() implementation introduced via commit 49a60f6045 (May 2026) that correctly handles Unicode whitespace by percent-encoding it rather than stripping it, main...", "justification": "code_not_present" } }, { "id": "CVE-2026-88057", "affects": [ { "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:b4f6e7a3-bf4c-5134-b3e9-7b67c6993f17", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88057 is fixed in version 18.2.14-tuxcare.15 of @angular/language-service." } }, { "id": "CVE-2026-88058", "affects": [ { "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:4d7d0e57-af76-56d8-b6ee-f5d8d9b2303a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88058 is fixed in version 18.2.14-tuxcare.15 of @angular/language-service." } }, { "id": "CVE-2026-88059", "affects": [ { "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:17ca24fc-76c6-5eaf-beb8-6854f2cc7ba9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88059 is fixed in version 18.2.14-tuxcare.15 of @angular/language-service." } }, { "id": "CVE-2026-88060", "affects": [ { "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:c5ea2b4a-da4f-53b9-85a5-ce3ac692f221", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88060 is fixed in version 18.2.14-tuxcare.15 of @angular/language-service." } } ], "dependencies": [ { "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.15" } ] }