{
  "@id": "urn:uuid:b247ac62-ad6a-4789-a920-dbff4e3e7121",
  "role": "Document Creator",
  "author": "https://tuxcare.com",
  "version": 5,
  "@context": "https://openvex.dev/ns/v0.2.0",
  "timestamp": "2026-11-10T16:19:57.234753+00:00",
  "statements": [
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:npm/%40angular/core@15.2.10",
          "identifiers": {
            "purl": "pkg:npm/%40angular/core@15.2.10"
          }
        }
      ],
      "timestamp": "2026-11-03T21:27:00.126743+00:00",
      "status_notes": "Vulnerability CVE-2021-4231 does not affect version 15.2.10 of @angular/core. not_affected \u2014 CVE-2021-4231 (XSS via unescaped HTML comment delimiters) is not present in Angular 15.2.10-tuxcare.17. The upstream fix (commit 47d9b6d72d by Misko Hevery, 2020-12-15) introduced the `escapeCommentText()` function and applied it to vulnerable comment creation paths. This fix shipped in the upstream Angular release before TuxCare onboarding and is present in the current version. The CVE affects...",
      "justification": "vulnerable_code_not_present",
      "vulnerability": {
        "name": "CVE-2021-4231"
      },
      "impact_statement": "not_affected \u2014 CVE-2021-4231 (XSS via unescaped HTML comment delimiters) is not present in Angular 15.2.10-tuxcare.17. The upstream fix (commit 47d9b6d72d by Misko Hevery, 2020-12-15) introduced the `escapeCommentText()` function and applied it to vulnerable comment creation paths. This fix shipped in the upstream Angular release before TuxCare onboarding and is present in the current version. The CVE affects..."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/%40angular/core@15.2.10",
          "identifiers": {
            "purl": "pkg:npm/%40angular/core@15.2.10"
          }
        }
      ],
      "timestamp": "2026-10-18T17:38:00.197291+00:00",
      "status_notes": "Vulnerability CVE-2026-22610 affects version 15.2.10 of @angular/core, and is fixed in 15.2.10-tuxcare.4.",
      "vulnerability": {
        "name": "CVE-2026-22610"
      },
      "action_statement": "Vulnerability CVE-2026-22610 affects version 15.2.10 of @angular/core, and is fixed in 15.2.10-tuxcare.4."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/%40angular/core@15.2.10",
          "identifiers": {
            "purl": "pkg:npm/%40angular/core@15.2.10"
          }
        }
      ],
      "timestamp": "2026-10-18T17:38:00.197291+00:00",
      "status_notes": "Vulnerability CVE-2026-27970 affects version 15.2.10 of @angular/core, and is fixed in 15.2.10-tuxcare.6.",
      "vulnerability": {
        "name": "CVE-2026-27970"
      },
      "action_statement": "Vulnerability CVE-2026-27970 affects version 15.2.10 of @angular/core, and is fixed in 15.2.10-tuxcare.6."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/%40angular/core@15.2.10",
          "identifiers": {
            "purl": "pkg:npm/%40angular/core@15.2.10"
          }
        }
      ],
      "timestamp": "2026-10-29T18:20:10.184134+00:00",
      "status_notes": "Vulnerability CVE-2026-32635 affects version 15.2.10 of @angular/core.",
      "vulnerability": {
        "name": "CVE-2026-32635"
      },
      "action_statement": "Vulnerability CVE-2026-32635 affects version 15.2.10 of @angular/core."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/%40angular/core@15.2.10",
          "identifiers": {
            "purl": "pkg:npm/%40angular/core@15.2.10"
          }
        }
      ],
      "timestamp": "2026-10-18T17:38:00.197291+00:00",
      "status_notes": "Vulnerability CVE-2026-50557 affects version 15.2.10 of @angular/core, and is fixed in 15.2.10-tuxcare.9.",
      "vulnerability": {
        "name": "CVE-2026-50557"
      },
      "action_statement": "Vulnerability CVE-2026-50557 affects version 15.2.10 of @angular/core, and is fixed in 15.2.10-tuxcare.9."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/%40angular/core@15.2.10",
          "identifiers": {
            "purl": "pkg:npm/%40angular/core@15.2.10"
          }
        }
      ],
      "timestamp": "2026-10-18T17:38:00.197291+00:00",
      "status_notes": "Vulnerability CVE-2026-52725 affects version 15.2.10 of @angular/core, and is fixed in 15.2.10-tuxcare.9.",
      "vulnerability": {
        "name": "CVE-2026-52725"
      },
      "action_statement": "Vulnerability CVE-2026-52725 affects version 15.2.10 of @angular/core, and is fixed in 15.2.10-tuxcare.9."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/%40angular/core@15.2.10",
          "identifiers": {
            "purl": "pkg:npm/%40angular/core@15.2.10"
          }
        }
      ],
      "timestamp": "2026-10-18T17:38:00.197291+00:00",
      "status_notes": "Vulnerability CVE-2026-54267 affects version 15.2.10 of @angular/core, and is fixed in 15.2.10-tuxcare.11.",
      "vulnerability": {
        "name": "CVE-2026-54267"
      },
      "action_statement": "Vulnerability CVE-2026-54267 affects version 15.2.10 of @angular/core, and is fixed in 15.2.10-tuxcare.11."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/%40angular/core@15.2.10",
          "identifiers": {
            "purl": "pkg:npm/%40angular/core@15.2.10"
          }
        }
      ],
      "timestamp": "2026-10-18T17:38:00.197291+00:00",
      "status_notes": "Vulnerability CVE-2026-69151 affects version 15.2.10 of @angular/core, and is fixed in 15.2.10-tuxcare.12.",
      "vulnerability": {
        "name": "CVE-2026-69151"
      },
      "action_statement": "Vulnerability CVE-2026-69151 affects version 15.2.10 of @angular/core, and is fixed in 15.2.10-tuxcare.12."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/%40angular/core@15.2.10",
          "identifiers": {
            "purl": "pkg:npm/%40angular/core@15.2.10"
          }
        }
      ],
      "timestamp": "2026-10-18T17:38:00.197291+00:00",
      "status_notes": "Vulnerability CVE-2026-88057 affects version 15.2.10 of @angular/core, and is fixed in 15.2.10-tuxcare.14.",
      "vulnerability": {
        "name": "CVE-2026-88057"
      },
      "action_statement": "Vulnerability CVE-2026-88057 affects version 15.2.10 of @angular/core, and is fixed in 15.2.10-tuxcare.14."
    }
  ]
}