{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:e811902a-f373-50b0-ab65-ca6fa14da885", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@angular/platform-server", "purl": "pkg:npm/%40angular/platform-server@18.2.14-tuxcare.15", "type": "library", "bom-ref": "pkg:npm/%40angular/platform-server@18.2.14-tuxcare.15", "version": "18.2.14-tuxcare.15", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-66035", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:b430b489-b839-5fbf-b143-863006a64cb7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 18.2.14-tuxcare.15 of @angular/platform-server." } }, { "id": "CVE-2025-66412", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:3413cbf2-59df-50c4-ae15-9943677f67c4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 18.2.14-tuxcare.15 of @angular/platform-server." } }, { "id": "CVE-2026-101895", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:f51972c2-7438-5b9a-b1c0-465bc8564919", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101895 affects version 18.2.14-tuxcare.15 of @angular/platform-server." } }, { "id": "CVE-2026-22610", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:b8e0abef-5d25-57b1-ab3c-1ed4d853327a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22610 is fixed in version 18.2.14-tuxcare.15 of @angular/platform-server." } }, { "id": "CVE-2026-27970", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:54dc5743-2ad6-5333-a051-e24a8a839bfb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27970 is fixed in version 18.2.14-tuxcare.15 of @angular/platform-server." } }, { "id": "CVE-2026-32635", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:c5017fdc-dcd3-5862-b4b9-a63538d39ac4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-32635 is fixed in version 18.2.14-tuxcare.15 of @angular/platform-server." } }, { "id": "CVE-2026-46417", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:c10bff43-51bd-5e6b-8cdf-82086cd71634", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46417 is fixed in version 18.2.14-tuxcare.15 of @angular/platform-server." } }, { "id": "CVE-2026-50168", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:ec860530-a4de-577f-a1fc-cfd739f95d6e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50168 is fixed in version 18.2.14-tuxcare.15 of @angular/platform-server." } }, { "id": "CVE-2026-50169", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:fed6c1ba-cce1-5c2f-8d8d-2ae2cea2c9a7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50169 is fixed in version 18.2.14-tuxcare.15 of @angular/platform-server." } }, { "id": "CVE-2026-50170", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:0be30966-549f-55e6-bbf9-94ac2500b020", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50170 is fixed in version 18.2.14-tuxcare.15 of @angular/platform-server." } }, { "id": "CVE-2026-50171", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:e9ec0512-ee95-5b28-b25e-222cc76f986a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50171 is fixed in version 18.2.14-tuxcare.15 of @angular/platform-server." } }, { "id": "CVE-2026-50184", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:2ed3e9a4-f909-5200-9a04-c51bde71f050", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50184 is fixed in version 18.2.14-tuxcare.15 of @angular/platform-server." } }, { "id": "CVE-2026-50555", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:e30ab983-bb47-56c6-8b71-d779e2573435", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50555 is fixed in version 18.2.14-tuxcare.15 of @angular/platform-server." } }, { "id": "CVE-2026-50556", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:37ab3620-a44b-55ca-aed0-46d9632763ce", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50556 is fixed in version 18.2.14-tuxcare.15 of @angular/platform-server." } }, { "id": "CVE-2026-50557", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:35c2b1c1-48f9-5dbc-9e1d-a306b2382474", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50557 is fixed in version 18.2.14-tuxcare.15 of @angular/platform-server." } }, { "id": "CVE-2026-52725", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:b7f6f199-efbc-5970-94f2-063626650457", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-52725 is fixed in version 18.2.14-tuxcare.15 of @angular/platform-server." } }, { "id": "CVE-2026-54264", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:7f2c63a2-bd8f-59b7-8f4f-44f84658b0df", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54264 is fixed in version 18.2.14-tuxcare.15 of @angular/platform-server." } }, { "id": "CVE-2026-54265", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:52979201-daab-543b-9c35-0c6a67b3722f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54265 is fixed in version 18.2.14-tuxcare.15 of @angular/platform-server." } }, { "id": "CVE-2026-54266", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:7cb8d00b-3007-58f1-9eb3-2ff528d79b03", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54266 is fixed in version 18.2.14-tuxcare.15 of @angular/platform-server." } }, { "id": "CVE-2026-54267", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:441abd41-0ea5-5d84-988a-afea19c389a4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54267 is fixed in version 18.2.14-tuxcare.15 of @angular/platform-server." } }, { "id": "CVE-2026-54268", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:3d032a4b-3681-56c7-812a-c024b6863ff8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54268 is fixed in version 18.2.14-tuxcare.15 of @angular/platform-server." } }, { "id": "CVE-2026-68945", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:4f641814-6eb9-5f7e-9bb6-5984caf49939", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-68945 is fixed in version 18.2.14-tuxcare.15 of @angular/platform-server." } }, { "id": "CVE-2026-69149", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:067ba575-c4bd-5a76-a9d5-2e99ef00b6b0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69149 is fixed in version 18.2.14-tuxcare.15 of @angular/platform-server." } }, { "id": "CVE-2026-69151", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:12aa12cb-8f60-568b-905b-6f94c61cfa13", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69151 is fixed in version 18.2.14-tuxcare.15 of @angular/platform-server." } }, { "id": "CVE-2026-88056", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:2ad626fd-c258-52a2-a12c-e4d370ac438b", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88056 does not affect version 18.2.14-tuxcare.15 of @angular/platform-server. not_affected \u2014 The target version 18.2.14-tuxcare.13 is NOT affected by CVE-2026-88056. The vulnerable code pattern (calling String.prototype.trim() on URL strings before resolution) was never present in this version. The target uses a refactored parseUrl() implementation introduced via commit 49a60f6045 (May 2026) that correctly handles Unicode whitespace by percent-encoding it rather than stripping it, main...", "justification": "code_not_present" } }, { "id": "CVE-2026-88057", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:b9e8ddb5-2fd6-53d3-9fa9-f931e9900d1b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88057 is fixed in version 18.2.14-tuxcare.15 of @angular/platform-server." } }, { "id": "CVE-2026-88058", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:6e8054a8-abab-5e90-a971-a0d8235f3304", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88058 is fixed in version 18.2.14-tuxcare.15 of @angular/platform-server." } }, { "id": "CVE-2026-88059", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:bab9de1e-c424-50bc-9598-e20eb3c4524a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88059 is fixed in version 18.2.14-tuxcare.15 of @angular/platform-server." } }, { "id": "CVE-2026-88060", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:83c2426e-2b12-50f3-abac-3e36d8e8ffac", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88060 is fixed in version 18.2.14-tuxcare.15 of @angular/platform-server." } } ], "dependencies": [ { "ref": "pkg:npm/%40angular/platform-server@18.2.14-tuxcare.15" } ] }