{
  "@id": "urn:uuid:b3f807ba-4836-477b-8f1f-bb8d2aea0ac7",
  "role": "Document Creator",
  "author": "https://tuxcare.com",
  "version": 4,
  "@context": "https://openvex.dev/ns/v0.2.0",
  "timestamp": "2026-11-10T16:18:05.828019+00:00",
  "statements": [
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/%40angular/common@13.3.11",
          "identifiers": {
            "purl": "pkg:npm/%40angular/common@13.3.11"
          }
        }
      ],
      "timestamp": "2026-10-17T23:48:00.148285+00:00",
      "status_notes": "Vulnerability CVE-2025-66035 affects version 13.3.11 of @angular/common, and is fixed in 13.3.11-tuxcare.2.",
      "vulnerability": {
        "name": "CVE-2025-66035"
      },
      "action_statement": "Vulnerability CVE-2025-66035 affects version 13.3.11 of @angular/common, and is fixed in 13.3.11-tuxcare.2."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/%40angular/common@13.3.11",
          "identifiers": {
            "purl": "pkg:npm/%40angular/common@13.3.11"
          }
        }
      ],
      "timestamp": "2026-10-20T20:47:00.216698+00:00",
      "status_notes": "Vulnerability CVE-2026-111753 affects version 13.3.11 of @angular/common.",
      "vulnerability": {
        "name": "CVE-2026-111753"
      },
      "action_statement": "Vulnerability CVE-2026-111753 affects version 13.3.11 of @angular/common."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/%40angular/common@13.3.11",
          "identifiers": {
            "purl": "pkg:npm/%40angular/common@13.3.11"
          }
        }
      ],
      "timestamp": "2026-10-17T23:48:00.148285+00:00",
      "status_notes": "Vulnerability CVE-2026-50170 affects version 13.3.11 of @angular/common, and is fixed in 13.3.11-tuxcare.1.",
      "vulnerability": {
        "name": "CVE-2026-50170"
      },
      "action_statement": "Vulnerability CVE-2026-50170 affects version 13.3.11 of @angular/common, and is fixed in 13.3.11-tuxcare.1."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/%40angular/common@13.3.11",
          "identifiers": {
            "purl": "pkg:npm/%40angular/common@13.3.11"
          }
        }
      ],
      "timestamp": "2026-10-17T23:48:00.148285+00:00",
      "status_notes": "Vulnerability CVE-2026-50171 affects version 13.3.11 of @angular/common, and is fixed in 13.3.11-tuxcare.1.",
      "vulnerability": {
        "name": "CVE-2026-50171"
      },
      "action_statement": "Vulnerability CVE-2026-50171 affects version 13.3.11 of @angular/common, and is fixed in 13.3.11-tuxcare.1."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/%40angular/common@13.3.11",
          "identifiers": {
            "purl": "pkg:npm/%40angular/common@13.3.11"
          }
        }
      ],
      "timestamp": "2026-10-17T23:48:00.148285+00:00",
      "status_notes": "Vulnerability CVE-2026-54266 affects version 13.3.11 of @angular/common, and is fixed in 13.3.11-tuxcare.1.",
      "vulnerability": {
        "name": "CVE-2026-54266"
      },
      "action_statement": "Vulnerability CVE-2026-54266 affects version 13.3.11 of @angular/common, and is fixed in 13.3.11-tuxcare.1."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/%40angular/common@13.3.11",
          "identifiers": {
            "purl": "pkg:npm/%40angular/common@13.3.11"
          }
        }
      ],
      "timestamp": "2026-10-17T23:48:00.148285+00:00",
      "status_notes": "Vulnerability CVE-2026-54268 affects version 13.3.11 of @angular/common, and is fixed in 13.3.11-tuxcare.1.",
      "vulnerability": {
        "name": "CVE-2026-54268"
      },
      "action_statement": "Vulnerability CVE-2026-54268 affects version 13.3.11 of @angular/common, and is fixed in 13.3.11-tuxcare.1."
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:npm/%40angular/common@13.3.11",
          "identifiers": {
            "purl": "pkg:npm/%40angular/common@13.3.11"
          }
        }
      ],
      "timestamp": "2026-10-17T23:48:00.148285+00:00",
      "status_notes": "Vulnerability CVE-2026-68945 does not affect version 13.3.11 of @angular/common. not_affected \u2014 Angular 13.3.11 is NOT affected by CVE-2026-68945. The vulnerable HttpTransferCache feature does not exist in this version. HttpTransferCache was introduced in Angular 16.0.0-next.0 (March 2023), approximately 3 years after Angular 13.3.11's release. The target version only contains the basic TransferState mechanism for generic state transfer, but lacks the automated HTTP request caching functi...",
      "justification": "vulnerable_code_not_present",
      "vulnerability": {
        "name": "CVE-2026-68945"
      },
      "impact_statement": "not_affected \u2014 Angular 13.3.11 is NOT affected by CVE-2026-68945. The vulnerable HttpTransferCache feature does not exist in this version. HttpTransferCache was introduced in Angular 16.0.0-next.0 (March 2023), approximately 3 years after Angular 13.3.11's release. The target version only contains the basic TransferState mechanism for generic state transfer, but lacks the automated HTTP request caching functi..."
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:npm/%40angular/common@13.3.11",
          "identifiers": {
            "purl": "pkg:npm/%40angular/common@13.3.11"
          }
        }
      ],
      "timestamp": "2026-10-17T23:48:00.148285+00:00",
      "status_notes": "Vulnerability CVE-2026-88059 does not affect version 13.3.11 of @angular/common. not_affected \u2014 Angular 13.3.11 is NOT AFFECTED by CVE-2026-88059. The vulnerability requires HttpTransferCache (an automatic HTTP response caching interceptor for SSR hydration) and the functional provider API (provideHttpClient, withRequestsMadeViaParent, provideClientHydration), none of which exist in this version. These features were introduced in Angular v16.0.0, three major versions after 13.3.11. The ta...",
      "justification": "vulnerable_code_not_present",
      "vulnerability": {
        "name": "CVE-2026-88059"
      },
      "impact_statement": "not_affected \u2014 Angular 13.3.11 is NOT AFFECTED by CVE-2026-88059. The vulnerability requires HttpTransferCache (an automatic HTTP response caching interceptor for SSR hydration) and the functional provider API (provideHttpClient, withRequestsMadeViaParent, provideClientHydration), none of which exist in this version. These features were introduced in Angular v16.0.0, three major versions after 13.3.11. The ta..."
    }
  ]
}