{
  "@id": "urn:uuid:c11a2514-c6d0-4732-89e0-ad4d7058a766",
  "role": "Document Creator",
  "author": "https://tuxcare.com",
  "version": 3,
  "@context": "https://openvex.dev/ns/v0.2.0",
  "timestamp": "2026-11-10T16:19:57.234753+00:00",
  "statements": [
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/%40angular/core@6.0.1-tuxcare.3",
          "identifiers": {
            "purl": "pkg:npm/%40angular/core@6.0.1-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-18T17:37:00.151356+00:00",
      "status_notes": "Vulnerability CVE-2021-4231 affects version 6.0.1-tuxcare.3 of @angular/core, and is fixed in 6.0.1-tuxcare.4.",
      "vulnerability": {
        "name": "CVE-2021-4231"
      },
      "action_statement": "Vulnerability CVE-2021-4231 affects version 6.0.1-tuxcare.3 of @angular/core, and is fixed in 6.0.1-tuxcare.4."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/%40angular/core@6.0.1-tuxcare.3",
          "identifiers": {
            "purl": "pkg:npm/%40angular/core@6.0.1-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-18T17:37:00.151356+00:00",
      "status_notes": "Vulnerability CVE-2026-22610 affects version 6.0.1-tuxcare.3 of @angular/core, and is fixed in 6.0.1-tuxcare.4.",
      "vulnerability": {
        "name": "CVE-2026-22610"
      },
      "action_statement": "Vulnerability CVE-2026-22610 affects version 6.0.1-tuxcare.3 of @angular/core, and is fixed in 6.0.1-tuxcare.4."
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:npm/%40angular/core@6.0.1-tuxcare.3",
          "identifiers": {
            "purl": "pkg:npm/%40angular/core@6.0.1-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-18T17:37:00.151356+00:00",
      "status_notes": "Vulnerability CVE-2026-27970 does not affect version 6.0.1-tuxcare.3 of @angular/core. not_affected \u2014 Angular 6.0.1 is not affected by CVE-2026-27970. This vulnerability is specific to Ivy/render3's runtime ICU message parsing, which does not exist in Angular 6.0.1. Angular 6.0.1 uses View Engine by default, where ICU messages are processed at compile time rather than runtime, eliminating the vulnerable code path.",
      "justification": "vulnerable_code_not_present",
      "vulnerability": {
        "name": "CVE-2026-27970"
      },
      "impact_statement": "not_affected \u2014 Angular 6.0.1 is not affected by CVE-2026-27970. This vulnerability is specific to Ivy/render3's runtime ICU message parsing, which does not exist in Angular 6.0.1. Angular 6.0.1 uses View Engine by default, where ICU messages are processed at compile time rather than runtime, eliminating the vulnerable code path."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/%40angular/core@6.0.1-tuxcare.3",
          "identifiers": {
            "purl": "pkg:npm/%40angular/core@6.0.1-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-29T18:20:10.184134+00:00",
      "status_notes": "Vulnerability CVE-2026-32635 affects version 6.0.1-tuxcare.3 of @angular/core.",
      "vulnerability": {
        "name": "CVE-2026-32635"
      },
      "action_statement": "Vulnerability CVE-2026-32635 affects version 6.0.1-tuxcare.3 of @angular/core."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/%40angular/core@6.0.1-tuxcare.3",
          "identifiers": {
            "purl": "pkg:npm/%40angular/core@6.0.1-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-18T17:37:00.151356+00:00",
      "status_notes": "Vulnerability CVE-2026-50557 affects version 6.0.1-tuxcare.3 of @angular/core, and is fixed in 6.0.1-tuxcare.4.",
      "vulnerability": {
        "name": "CVE-2026-50557"
      },
      "action_statement": "Vulnerability CVE-2026-50557 affects version 6.0.1-tuxcare.3 of @angular/core, and is fixed in 6.0.1-tuxcare.4."
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:npm/%40angular/core@6.0.1-tuxcare.3",
          "identifiers": {
            "purl": "pkg:npm/%40angular/core@6.0.1-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-18T17:37:00.151356+00:00",
      "status_notes": "Vulnerability CVE-2026-52725 does not affect version 6.0.1-tuxcare.3 of @angular/core. not_affected \u2014 Angular v6.0.1-tuxcare.3 is not affected by CVE-2026-52725 in its supported configuration. The vulnerability requires the public createComponent({hostElement}) API introduced in Angular v14+, which does not exist in this version. The default View Engine renderer does not use the vulnerable locateHostElement code path.",
      "justification": "vulnerable_code_not_present",
      "vulnerability": {
        "name": "CVE-2026-52725"
      },
      "impact_statement": "not_affected \u2014 Angular v6.0.1-tuxcare.3 is not affected by CVE-2026-52725 in its supported configuration. The vulnerability requires the public createComponent({hostElement}) API introduced in Angular v14+, which does not exist in this version. The default View Engine renderer does not use the vulnerable locateHostElement code path."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/%40angular/core@6.0.1-tuxcare.3",
          "identifiers": {
            "purl": "pkg:npm/%40angular/core@6.0.1-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-18T17:37:00.151356+00:00",
      "status_notes": "Vulnerability CVE-2026-54267 affects version 6.0.1-tuxcare.3 of @angular/core, and is fixed in 6.0.1-tuxcare.4.",
      "vulnerability": {
        "name": "CVE-2026-54267"
      },
      "action_statement": "Vulnerability CVE-2026-54267 affects version 6.0.1-tuxcare.3 of @angular/core, and is fixed in 6.0.1-tuxcare.4."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/%40angular/core@6.0.1-tuxcare.3",
          "identifiers": {
            "purl": "pkg:npm/%40angular/core@6.0.1-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-18T17:37:00.151356+00:00",
      "status_notes": "Vulnerability CVE-2026-69151 affects version 6.0.1-tuxcare.3 of @angular/core, and is fixed in 6.0.1-tuxcare.5.",
      "vulnerability": {
        "name": "CVE-2026-69151"
      },
      "action_statement": "Vulnerability CVE-2026-69151 affects version 6.0.1-tuxcare.3 of @angular/core, and is fixed in 6.0.1-tuxcare.5."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/%40angular/core@6.0.1-tuxcare.3",
          "identifiers": {
            "purl": "pkg:npm/%40angular/core@6.0.1-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-18T17:37:00.151356+00:00",
      "status_notes": "Vulnerability CVE-2026-88057 affects version 6.0.1-tuxcare.3 of @angular/core, and is fixed in 6.0.1-tuxcare.6.",
      "vulnerability": {
        "name": "CVE-2026-88057"
      },
      "action_statement": "Vulnerability CVE-2026-88057 affects version 6.0.1-tuxcare.3 of @angular/core, and is fixed in 6.0.1-tuxcare.6."
    }
  ]
}