{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:19cc76c1-7fe0-504f-ac79-7081c47ea10d", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@angular/platform-webworker-dynamic", "purl": "pkg:npm/%40angular/platform-webworker-dynamic@6.1.10-tuxcare.13", "type": "library", "bom-ref": "pkg:npm/%40angular/platform-webworker-dynamic@6.1.10-tuxcare.13", "version": "6.1.10-tuxcare.13", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2021-4231", "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker-dynamic@6.1.10-tuxcare.13" } ], "bom-ref": "urn:uuid:63da1970-1a92-5dbc-bac9-97726effcdb0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-4231 is fixed in version 6.1.10-tuxcare.13 of @angular/platform-webworker-dynamic." } }, { "id": "CVE-2025-66035", "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker-dynamic@6.1.10-tuxcare.13" } ], "bom-ref": "urn:uuid:89649e71-04e8-57df-aa7b-844d4c15738a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 6.1.10-tuxcare.13 of @angular/platform-webworker-dynamic." } }, { "id": "CVE-2025-66412", "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker-dynamic@6.1.10-tuxcare.13" } ], "bom-ref": "urn:uuid:44e58fe6-d1e7-5652-ad82-11b748a82184", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 6.1.10-tuxcare.13 of @angular/platform-webworker-dynamic." } }, { "id": "CVE-2026-101895", "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker-dynamic@6.1.10-tuxcare.13" } ], "bom-ref": "urn:uuid:f55d0f07-0e3b-5b9c-b3de-53a7cb004e3d", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-101895 does not affect version 6.1.10-tuxcare.13 of @angular/platform-webworker-dynamic. not_affected \u2014 CVE-2026-101895 describes a DoS vulnerability in domino's HTML parser (lib/HTMLParser.js), which is used by @angular/platform-server for SSR. However, the vulnerable code does NOT exist in this Angular repository - domino is only a declared dependency (package.json: \"domino\": \"2.0.1\"), not vendored source. The vulnerability would manifest in the installed node_modules after npm install, but the...", "justification": "requires_dependency" } }, { "id": "CVE-2026-22610", "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker-dynamic@6.1.10-tuxcare.13" } ], "bom-ref": "urn:uuid:f10fb436-de50-535d-8b02-939fb4330fcd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22610 is fixed in version 6.1.10-tuxcare.13 of @angular/platform-webworker-dynamic." } }, { "id": "CVE-2026-27970", "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker-dynamic@6.1.10-tuxcare.13" } ], "bom-ref": "urn:uuid:3bce37b5-5b40-5e73-8b22-36265679f4ae", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27970 is fixed in version 6.1.10-tuxcare.13 of @angular/platform-webworker-dynamic." } }, { "id": "CVE-2026-46417", "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker-dynamic@6.1.10-tuxcare.13" } ], "bom-ref": "urn:uuid:5c0aa995-7968-52cc-a828-48575dadd837", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46417 is fixed in version 6.1.10-tuxcare.13 of @angular/platform-webworker-dynamic." } }, { "id": "CVE-2026-50168", "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker-dynamic@6.1.10-tuxcare.13" } ], "bom-ref": "urn:uuid:fa9aead6-7a2f-56a8-93d7-dc869ee584aa", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50168 is fixed in version 6.1.10-tuxcare.13 of @angular/platform-webworker-dynamic." } }, { "id": "CVE-2026-50169", "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker-dynamic@6.1.10-tuxcare.13" } ], "bom-ref": "urn:uuid:9973d8b4-e57d-5b9f-9808-a57efb0030fb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50169 is fixed in version 6.1.10-tuxcare.13 of @angular/platform-webworker-dynamic." } }, { "id": "CVE-2026-50170", "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker-dynamic@6.1.10-tuxcare.13" } ], "bom-ref": "urn:uuid:68fb40ea-0204-5e49-bc20-17ed1ff0e3de", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50170 is fixed in version 6.1.10-tuxcare.13 of @angular/platform-webworker-dynamic." } }, { "id": "CVE-2026-50171", "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker-dynamic@6.1.10-tuxcare.13" } ], "bom-ref": "urn:uuid:387a834f-1294-586e-ac56-dcd91af94b88", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50171 is fixed in version 6.1.10-tuxcare.13 of @angular/platform-webworker-dynamic." } }, { "id": "CVE-2026-50184", "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker-dynamic@6.1.10-tuxcare.13" } ], "bom-ref": "urn:uuid:2f30dfa2-6b14-558f-a4ec-fc141f6fd55a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50184 is fixed in version 6.1.10-tuxcare.13 of @angular/platform-webworker-dynamic." } }, { "id": "CVE-2026-50555", "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker-dynamic@6.1.10-tuxcare.13" } ], "bom-ref": "urn:uuid:82a3c10d-dd17-5383-95a9-2e2188551668", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50555 is fixed in version 6.1.10-tuxcare.13 of @angular/platform-webworker-dynamic." } }, { "id": "CVE-2026-50556", "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker-dynamic@6.1.10-tuxcare.13" } ], "bom-ref": "urn:uuid:e6ea9caa-d7b9-5753-aef3-e37ceda09b98", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50556 is fixed in version 6.1.10-tuxcare.13 of @angular/platform-webworker-dynamic." } }, { "id": "CVE-2026-50557", "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker-dynamic@6.1.10-tuxcare.13" } ], "bom-ref": "urn:uuid:15a27fa8-97b8-5547-a2e0-f0bd28f2977f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50557 is fixed in version 6.1.10-tuxcare.13 of @angular/platform-webworker-dynamic." } }, { "id": "CVE-2026-52725", "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker-dynamic@6.1.10-tuxcare.13" } ], "bom-ref": "urn:uuid:fd4b4cef-e8ba-5be8-bb16-4fe1642198fa", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-52725 is fixed in version 6.1.10-tuxcare.13 of @angular/platform-webworker-dynamic." } }, { "id": "CVE-2026-54264", "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker-dynamic@6.1.10-tuxcare.13" } ], "bom-ref": "urn:uuid:d6c9a573-6743-5d39-b586-484f56acb98f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54264 is fixed in version 6.1.10-tuxcare.13 of @angular/platform-webworker-dynamic." } }, { "id": "CVE-2026-54265", "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker-dynamic@6.1.10-tuxcare.13" } ], "bom-ref": "urn:uuid:57447f63-be73-5c10-8127-3856445de4e6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54265 is fixed in version 6.1.10-tuxcare.13 of @angular/platform-webworker-dynamic." } }, { "id": "CVE-2026-54266", "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker-dynamic@6.1.10-tuxcare.13" } ], "bom-ref": "urn:uuid:a83caf40-d155-5b5e-acdb-a783b398cd3e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54266 is fixed in version 6.1.10-tuxcare.13 of @angular/platform-webworker-dynamic." } }, { "id": "CVE-2026-54267", "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker-dynamic@6.1.10-tuxcare.13" } ], "bom-ref": "urn:uuid:1b47c0fa-67a3-5907-b562-8c08805cd755", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54267 is fixed in version 6.1.10-tuxcare.13 of @angular/platform-webworker-dynamic." } }, { "id": "CVE-2026-54268", "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker-dynamic@6.1.10-tuxcare.13" } ], "bom-ref": "urn:uuid:bd8e6727-2b52-5803-8edc-fa609b15c858", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54268 is fixed in version 6.1.10-tuxcare.13 of @angular/platform-webworker-dynamic." } }, { "id": "CVE-2026-68945", "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker-dynamic@6.1.10-tuxcare.13" } ], "bom-ref": "urn:uuid:659e426f-4c3e-502c-8bb4-d3fb04f2592e", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-68945 does not affect version 6.1.10-tuxcare.13 of @angular/platform-webworker-dynamic. not_affected \u2014 Angular 6.1.10 is NOT AFFECTED by CVE-2026-68945. The vulnerable HttpTransferCache feature does not exist in this version \u2014 it was introduced in Angular 16.0.0 (April 2023), more than 5 years after Angular 6.1.10 (2018). The vulnerable file `packages/common/http/src/transfer_cache.ts` and all related APIs (`provideClientHydration`, `withNoHttpTransferCache`, `sortAndConcatParams`) are completel...", "justification": "code_not_present" } }, { "id": "CVE-2026-69149", "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker-dynamic@6.1.10-tuxcare.13" } ], "bom-ref": "urn:uuid:6e8b285e-4217-5267-be63-2d1ec2d614bf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69149 is fixed in version 6.1.10-tuxcare.13 of @angular/platform-webworker-dynamic." } }, { "id": "CVE-2026-69151", "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker-dynamic@6.1.10-tuxcare.13" } ], "bom-ref": "urn:uuid:4545b1b4-0055-5b0c-978b-a5657f44c789", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69151 is fixed in version 6.1.10-tuxcare.13 of @angular/platform-webworker-dynamic." } }, { "id": "CVE-2026-88056", "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker-dynamic@6.1.10-tuxcare.13" } ], "bom-ref": "urn:uuid:e8348c28-e955-5a85-a7c5-0911b3332fe9", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88056 does not affect version 6.1.10-tuxcare.13 of @angular/platform-webworker-dynamic. not_affected \u2014 Angular version 6.1.10 is not affected by CVE-2026-88056. The vulnerable code pattern (url.ts with parseUrl using String.prototype.trim() and relativeUrlsTransformerInterceptorFn interceptor) does not exist in this version. These components were introduced in later Angular versions (post-6.1.10) and subsequently fixed in August 2026. Version 6.1.10 predates the vulnerable SSR URL resolution arc...", "justification": "code_not_reachable" } }, { "id": "CVE-2026-88057", "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker-dynamic@6.1.10-tuxcare.13" } ], "bom-ref": "urn:uuid:867f9870-343c-5101-82c4-78a3022c98e6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88057 is fixed in version 6.1.10-tuxcare.13 of @angular/platform-webworker-dynamic." } }, { "id": "CVE-2026-88058", "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker-dynamic@6.1.10-tuxcare.13" } ], "bom-ref": "urn:uuid:abc77612-bb2f-5b48-8431-55ab401f8013", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88058 is fixed in version 6.1.10-tuxcare.13 of @angular/platform-webworker-dynamic." } }, { "id": "CVE-2026-88059", "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker-dynamic@6.1.10-tuxcare.13" } ], "bom-ref": "urn:uuid:932dc96e-0b49-5c0d-944b-d24be28dddab", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88059 does not affect version 6.1.10-tuxcare.13 of @angular/platform-webworker-dynamic. not_affected \u2014 Angular 6.1.10 is not affected by CVE-2026-88059. The vulnerable HttpTransferCache feature, withRequestsMadeViaParent() delegation API, and modern hydration system (provideClientHydration()) do not exist in this version. These components were introduced in Angular 16+ (circa 2023), while the target version is from Angular 6 (2018). The vulnerability requires automatic HTTP response caching duri...", "justification": "code_not_present" } }, { "id": "CVE-2026-88060", "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker-dynamic@6.1.10-tuxcare.13" } ], "bom-ref": "urn:uuid:9ecee6bd-635d-531e-856c-8cffd155506b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88060 is fixed in version 6.1.10-tuxcare.13 of @angular/platform-webworker-dynamic." } } ], "dependencies": [ { "ref": "pkg:npm/%40angular/platform-webworker-dynamic@6.1.10-tuxcare.13" } ] }