{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:e90b258c-17cf-57cf-9da8-3b4538314d44", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@angular/router", "purl": "pkg:npm/%40angular/router@12.2.17", "type": "library", "bom-ref": "pkg:npm/%40angular/router@12.2.17", "version": "12.2.17", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-66035", "affects": [ { "ref": "pkg:npm/%40angular/router@12.2.17" } ], "bom-ref": "urn:uuid:6d445ff4-f24b-59cb-a90e-fc49b32abb44", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-66035 affects version 12.2.17 of @angular/router, and is fixed in 12.2.17-tuxcare.8." } }, { "id": "CVE-2025-66412", "affects": [ { "ref": "pkg:npm/%40angular/router@12.2.17" } ], "bom-ref": "urn:uuid:3eed5a44-d70e-5147-9d0b-459f062a884e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-66412 affects version 12.2.17 of @angular/router, and is fixed in 12.2.17-tuxcare.2." } }, { "id": "CVE-2026-22610", "affects": [ { "ref": "pkg:npm/%40angular/router@12.2.17" } ], "bom-ref": "urn:uuid:24954483-f2d4-525e-acd5-506c9a20ed5b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22610 affects version 12.2.17 of @angular/router, and is fixed in 12.2.17-tuxcare.3." } }, { "id": "CVE-2026-27970", "affects": [ { "ref": "pkg:npm/%40angular/router@12.2.17" } ], "bom-ref": "urn:uuid:2a9d5cfa-1cd7-50fe-8e58-2925913c46dd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-27970 affects version 12.2.17 of @angular/router, and is fixed in 12.2.17-tuxcare.4." } }, { "id": "CVE-2026-46417", "affects": [ { "ref": "pkg:npm/%40angular/router@12.2.17" } ], "bom-ref": "urn:uuid:c60a6e33-c319-5db5-9145-a15820a9252b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-46417 affects version 12.2.17 of @angular/router, and is fixed in 12.2.17-tuxcare.6." } }, { "id": "CVE-2026-50168", "affects": [ { "ref": "pkg:npm/%40angular/router@12.2.17" } ], "bom-ref": "urn:uuid:f9edf180-aabd-5c6e-8140-4ea8d7d2ca40", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50168 affects version 12.2.17 of @angular/router, and is fixed in 12.2.17-tuxcare.7." } }, { "id": "CVE-2026-50169", "affects": [ { "ref": "pkg:npm/%40angular/router@12.2.17" } ], "bom-ref": "urn:uuid:7d5d546a-ea83-5fdc-ba0a-b10aa08181b4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50169 affects version 12.2.17 of @angular/router, and is fixed in 12.2.17-tuxcare.7." } }, { "id": "CVE-2026-50170", "affects": [ { "ref": "pkg:npm/%40angular/router@12.2.17" } ], "bom-ref": "urn:uuid:ffacc581-23e6-54a0-aad5-c79da7948622", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50170 affects version 12.2.17 of @angular/router, and is fixed in 12.2.17-tuxcare.7." } }, { "id": "CVE-2026-50171", "affects": [ { "ref": "pkg:npm/%40angular/router@12.2.17" } ], "bom-ref": "urn:uuid:5b963a9b-76c9-506a-8983-2d1359dc2716", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50171 affects version 12.2.17 of @angular/router, and is fixed in 12.2.17-tuxcare.7." } }, { "id": "CVE-2026-50184", "affects": [ { "ref": "pkg:npm/%40angular/router@12.2.17" } ], "bom-ref": "urn:uuid:bf0f274a-672e-5aa3-bb75-03348b857910", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50184 affects version 12.2.17 of @angular/router, and is fixed in 12.2.17-tuxcare.7." } }, { "id": "CVE-2026-50555", "affects": [ { "ref": "pkg:npm/%40angular/router@12.2.17" } ], "bom-ref": "urn:uuid:dd89a81a-ba67-5c8c-a4ac-e6f467d0ed9f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50555 affects version 12.2.17 of @angular/router, and is fixed in 12.2.17-tuxcare.7." } }, { "id": "CVE-2026-50556", "affects": [ { "ref": "pkg:npm/%40angular/router@12.2.17" } ], "bom-ref": "urn:uuid:2a21e437-d3c7-5279-aff7-82a856554b54", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50556 affects version 12.2.17 of @angular/router, and is fixed in 12.2.17-tuxcare.7." } }, { "id": "CVE-2026-50557", "affects": [ { "ref": "pkg:npm/%40angular/router@12.2.17" } ], "bom-ref": "urn:uuid:79f6d72c-9bed-5f60-9600-32f3672d6115", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50557 affects version 12.2.17 of @angular/router, and is fixed in 12.2.17-tuxcare.7." } }, { "id": "CVE-2026-52725", "affects": [ { "ref": "pkg:npm/%40angular/router@12.2.17" } ], "bom-ref": "urn:uuid:8e5f22aa-d2dd-5639-8a6f-e11fd8be085c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-52725 affects version 12.2.17 of @angular/router, and is fixed in 12.2.17-tuxcare.7." } }, { "id": "CVE-2026-54264", "affects": [ { "ref": "pkg:npm/%40angular/router@12.2.17" } ], "bom-ref": "urn:uuid:9577bd25-dc14-5d16-ba1d-16ac72bb9195", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54264 affects version 12.2.17 of @angular/router, and is fixed in 12.2.17-tuxcare.7." } }, { "id": "CVE-2026-54265", "affects": [ { "ref": "pkg:npm/%40angular/router@12.2.17" } ], "bom-ref": "urn:uuid:4fffb548-021d-5b18-95e3-3c0f7787e8cc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54265 affects version 12.2.17 of @angular/router, and is fixed in 12.2.17-tuxcare.7." } }, { "id": "CVE-2026-54266", "affects": [ { "ref": "pkg:npm/%40angular/router@12.2.17" } ], "bom-ref": "urn:uuid:d7becfd4-cbd8-5d73-942e-fe241186461b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54266 affects version 12.2.17 of @angular/router, and is fixed in 12.2.17-tuxcare.7." } }, { "id": "CVE-2026-54267", "affects": [ { "ref": "pkg:npm/%40angular/router@12.2.17" } ], "bom-ref": "urn:uuid:f4611d36-2411-5082-9584-c3fe9a3712f7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54267 affects version 12.2.17 of @angular/router, and is fixed in 12.2.17-tuxcare.7." } }, { "id": "CVE-2026-54268", "affects": [ { "ref": "pkg:npm/%40angular/router@12.2.17" } ], "bom-ref": "urn:uuid:64e08573-631d-5d76-b42a-08cec91ab25d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54268 affects version 12.2.17 of @angular/router, and is fixed in 12.2.17-tuxcare.7." } }, { "id": "CVE-2026-68945", "affects": [ { "ref": "pkg:npm/%40angular/router@12.2.17" } ], "bom-ref": "urn:uuid:47dc7ced-5d7f-5a07-a54d-5ade8169eb89", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-68945 does not affect version 12.2.17 of @angular/router. not_affected \u2014 Angular 12.2.17 does not contain the HttpTransferCache feature affected by CVE-2026-68945. HttpTransferCache, which caches HTTP requests during Server-Side Rendering (SSR), was first introduced in Angular 16.0.0\u2014approximately 4 major versions after the target version. The vulnerability concerns cache-key collision when repeated HTTP parameters are serialized, but since the entire HttpTransferCa...", "justification": "code_not_present" } }, { "id": "CVE-2026-69149", "affects": [ { "ref": "pkg:npm/%40angular/router@12.2.17" } ], "bom-ref": "urn:uuid:3ba39beb-7e0c-5526-acbe-8f925c3f2818", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-69149 affects version 12.2.17 of @angular/router, and is fixed in 12.2.17-tuxcare.9." } }, { "id": "CVE-2026-69151", "affects": [ { "ref": "pkg:npm/%40angular/router@12.2.17" } ], "bom-ref": "urn:uuid:953ddb4f-9aa6-5fae-9670-1358e64d3bcb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-69151 affects version 12.2.17 of @angular/router, and is fixed in 12.2.17-tuxcare.9." } }, { "id": "CVE-2026-88056", "affects": [ { "ref": "pkg:npm/%40angular/router@12.2.17" } ], "bom-ref": "urn:uuid:180404b4-072c-5691-b55b-77b299d8e297", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88056 affects version 12.2.17 of @angular/router." } }, { "id": "CVE-2026-88057", "affects": [ { "ref": "pkg:npm/%40angular/router@12.2.17" } ], "bom-ref": "urn:uuid:3a297d78-a056-57f0-90cc-2c04ccd7a858", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88057 affects version 12.2.17 of @angular/router." } }, { "id": "CVE-2026-88059", "affects": [ { "ref": "pkg:npm/%40angular/router@12.2.17" } ], "bom-ref": "urn:uuid:d92d7603-16ad-553e-affe-7188ce3940f8", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88059 does not affect version 12.2.17 of @angular/router. not_affected \u2014 Angular 12.2.17-tuxcare.9 is not affected by CVE-2026-88059. The vulnerability requires HttpTransferCache, withRequestsMadeViaParent(), and provideClientHydration() features which were introduced in Angular 16.0.0. This version uses the older module-based HttpClientModule system and lacks the entire SSR hydration transfer-cache infrastructure. The vulnerable code pattern described in the CVE do...", "justification": "code_not_present" } }, { "id": "CVE-2026-88060", "affects": [ { "ref": "pkg:npm/%40angular/router@12.2.17" } ], "bom-ref": "urn:uuid:e5d1206d-9d03-5f28-a161-7e76f9c07c5a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88060 affects version 12.2.17 of @angular/router." } } ], "dependencies": [ { "ref": "pkg:npm/%40angular/router@12.2.17" } ] }