{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:aad4a4cf-383a-58c9-8e51-5fc9c4aea985", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@angular/service-worker", "purl": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.15", "type": "library", "bom-ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.15", "version": "18.2.14-tuxcare.15", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-66035", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:23e049b4-9c03-5b06-ad75-3bfe02604a41", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 18.2.14-tuxcare.15 of @angular/service-worker." } }, { "id": "CVE-2025-66412", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:7be89c28-c146-556a-92c5-efde474938ba", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 18.2.14-tuxcare.15 of @angular/service-worker." } }, { "id": "CVE-2026-101895", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:89ff9475-cfb0-54a7-89fa-c4d1f9082f5c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101895 affects version 18.2.14-tuxcare.15 of @angular/service-worker." } }, { "id": "CVE-2026-22610", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:18c6f48d-0709-5a41-90a8-4d18d633f93f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22610 is fixed in version 18.2.14-tuxcare.15 of @angular/service-worker." } }, { "id": "CVE-2026-27970", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:422af7dd-efeb-5b47-8a70-14f612a77d8b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27970 is fixed in version 18.2.14-tuxcare.15 of @angular/service-worker." } }, { "id": "CVE-2026-32635", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:df126c58-dc28-5121-be7a-4578570881fa", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-32635 is fixed in version 18.2.14-tuxcare.15 of @angular/service-worker." } }, { "id": "CVE-2026-46417", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:358d9a3c-d434-51d7-bffa-eac0ab05540e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46417 is fixed in version 18.2.14-tuxcare.15 of @angular/service-worker." } }, { "id": "CVE-2026-50168", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:27b84606-c2c0-5a34-8221-dd4c97c5c839", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50168 is fixed in version 18.2.14-tuxcare.15 of @angular/service-worker." } }, { "id": "CVE-2026-50169", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:153df2aa-1a6a-5edd-86f8-388d180cd59a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50169 is fixed in version 18.2.14-tuxcare.15 of @angular/service-worker." } }, { "id": "CVE-2026-50170", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:2424806b-ff9b-5a7f-8eb8-f189b51aa6a6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50170 is fixed in version 18.2.14-tuxcare.15 of @angular/service-worker." } }, { "id": "CVE-2026-50171", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:5e62e0f9-b0a3-52c2-bab7-6008c96e1751", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50171 is fixed in version 18.2.14-tuxcare.15 of @angular/service-worker." } }, { "id": "CVE-2026-50184", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:fd2679f0-8cc2-5ec8-aa99-d95da293a35f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50184 is fixed in version 18.2.14-tuxcare.15 of @angular/service-worker." } }, { "id": "CVE-2026-50555", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:aab1d174-f88a-5b44-bbd9-783849a8f7e2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50555 is fixed in version 18.2.14-tuxcare.15 of @angular/service-worker." } }, { "id": "CVE-2026-50556", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:5ccc3897-7f8a-580e-82f5-46f7e1dceff9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50556 is fixed in version 18.2.14-tuxcare.15 of @angular/service-worker." } }, { "id": "CVE-2026-50557", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:876b32c6-4f1d-5a34-a5de-f08ffebd2106", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50557 is fixed in version 18.2.14-tuxcare.15 of @angular/service-worker." } }, { "id": "CVE-2026-52725", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:c603b36c-cd03-5e36-9454-f17d69c5d402", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-52725 is fixed in version 18.2.14-tuxcare.15 of @angular/service-worker." } }, { "id": "CVE-2026-54264", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:06d737c5-8649-595f-b81c-f2d9544128e0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54264 is fixed in version 18.2.14-tuxcare.15 of @angular/service-worker." } }, { "id": "CVE-2026-54265", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:7b853e16-45fd-5fb3-a25e-2ea1a532d9ac", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54265 is fixed in version 18.2.14-tuxcare.15 of @angular/service-worker." } }, { "id": "CVE-2026-54266", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:ad4238f1-848d-54f6-9322-ee8ba7e337bb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54266 is fixed in version 18.2.14-tuxcare.15 of @angular/service-worker." } }, { "id": "CVE-2026-54267", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:939279da-19f0-5188-ab8f-2d873a231e27", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54267 is fixed in version 18.2.14-tuxcare.15 of @angular/service-worker." } }, { "id": "CVE-2026-54268", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:29986f18-8f69-5c9b-8b1b-a21ebaa05e61", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54268 is fixed in version 18.2.14-tuxcare.15 of @angular/service-worker." } }, { "id": "CVE-2026-68945", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:88f73fb5-f704-527a-99bd-ee6bcd0a8b57", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-68945 is fixed in version 18.2.14-tuxcare.15 of @angular/service-worker." } }, { "id": "CVE-2026-69149", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:73054056-45ca-5d1f-851d-645f59243c4b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69149 is fixed in version 18.2.14-tuxcare.15 of @angular/service-worker." } }, { "id": "CVE-2026-69151", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:c09b9faf-c401-5a07-ac23-77ee40003eb4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69151 is fixed in version 18.2.14-tuxcare.15 of @angular/service-worker." } }, { "id": "CVE-2026-88056", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:b58b1020-67da-5aa0-8de1-28fd1ba15a23", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88056 does not affect version 18.2.14-tuxcare.15 of @angular/service-worker. not_affected \u2014 The target version 18.2.14-tuxcare.13 is NOT affected by CVE-2026-88056. The vulnerable code pattern (calling String.prototype.trim() on URL strings before resolution) was never present in this version. The target uses a refactored parseUrl() implementation introduced via commit 49a60f6045 (May 2026) that correctly handles Unicode whitespace by percent-encoding it rather than stripping it, main...", "justification": "code_not_present" } }, { "id": "CVE-2026-88057", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:ca09e80e-a955-548d-beed-c83f48a6a57b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88057 is fixed in version 18.2.14-tuxcare.15 of @angular/service-worker." } }, { "id": "CVE-2026-88058", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:278c93c9-e088-55d2-8527-7df5bd31da83", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88058 is fixed in version 18.2.14-tuxcare.15 of @angular/service-worker." } }, { "id": "CVE-2026-88059", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:541a1b05-312b-5e2b-963c-bd8d43c28cff", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88059 is fixed in version 18.2.14-tuxcare.15 of @angular/service-worker." } }, { "id": "CVE-2026-88060", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.15" } ], "bom-ref": "urn:uuid:c0ad258c-97a0-5929-91e1-99b8dd207b45", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88060 is fixed in version 18.2.14-tuxcare.15 of @angular/service-worker." } } ], "dependencies": [ { "ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.15" } ] }