{
  "@id": "urn:uuid:690b4824-f23a-46c7-99f4-c97620ff8cf1",
  "role": "Document Creator",
  "author": "https://tuxcare.com",
  "version": 2,
  "@context": "https://openvex.dev/ns/v0.2.0",
  "timestamp": "2026-11-02T15:11:52.923350+00:00",
  "statements": [
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/%40angular/platform-browser-dynamic@15.2.1",
          "identifiers": {
            "purl": "pkg:npm/%40angular/platform-browser-dynamic@15.2.1"
          }
        }
      ],
      "timestamp": "2026-10-19T04:02:09.200184+00:00",
      "status_notes": "Vulnerability CVE-2026-101895 affects version 15.2.1 of @angular/platform-browser-dynamic, and is fixed in 15.2.1-tuxcare.6.",
      "vulnerability": {
        "name": "CVE-2026-101895"
      },
      "action_statement": "Vulnerability CVE-2026-101895 affects version 15.2.1 of @angular/platform-browser-dynamic, and is fixed in 15.2.1-tuxcare.6."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/%40angular/platform-browser-dynamic@15.2.1",
          "identifiers": {
            "purl": "pkg:npm/%40angular/platform-browser-dynamic@15.2.1"
          }
        }
      ],
      "timestamp": "2026-10-19T04:02:09.200184+00:00",
      "status_notes": "Vulnerability CVE-2026-101896 affects version 15.2.1 of @angular/platform-browser-dynamic.",
      "vulnerability": {
        "name": "CVE-2026-101896"
      },
      "action_statement": "Vulnerability CVE-2026-101896 affects version 15.2.1 of @angular/platform-browser-dynamic."
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:npm/%40angular/platform-browser-dynamic@15.2.1",
          "identifiers": {
            "purl": "pkg:npm/%40angular/platform-browser-dynamic@15.2.1"
          }
        }
      ],
      "timestamp": "2026-10-19T04:02:09.200184+00:00",
      "status_notes": "Vulnerability CVE-2026-41423 does not affect version 15.2.1 of @angular/platform-browser-dynamic. not_affected \u2014 The target Angular version 15.2.1 uses Node.js url.parse() API which does not exhibit the protocol-relative URL hostname override vulnerability. The vulnerable behavior was introduced in Angular 17+ when the code was refactored to use WHATWG new URL() API. Version 15.2.1 is not affected by CVE-2026-41423.",
      "justification": "vulnerable_code_not_present",
      "vulnerability": {
        "name": "CVE-2026-41423"
      },
      "impact_statement": "not_affected \u2014 The target Angular version 15.2.1 uses Node.js url.parse() API which does not exhibit the protocol-relative URL hostname override vulnerability. The vulnerable behavior was introduced in Angular 17+ when the code was refactored to use WHATWG new URL() API. Version 15.2.1 is not affected by CVE-2026-41423."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/%40angular/platform-browser-dynamic@15.2.1",
          "identifiers": {
            "purl": "pkg:npm/%40angular/platform-browser-dynamic@15.2.1"
          }
        }
      ],
      "timestamp": "2026-10-19T04:02:09.200184+00:00",
      "status_notes": "Vulnerability CVE-2026-46417 affects version 15.2.1 of @angular/platform-browser-dynamic, and is fixed in 15.2.1-tuxcare.2.",
      "vulnerability": {
        "name": "CVE-2026-46417"
      },
      "action_statement": "Vulnerability CVE-2026-46417 affects version 15.2.1 of @angular/platform-browser-dynamic, and is fixed in 15.2.1-tuxcare.2."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/%40angular/platform-browser-dynamic@15.2.1",
          "identifiers": {
            "purl": "pkg:npm/%40angular/platform-browser-dynamic@15.2.1"
          }
        }
      ],
      "timestamp": "2026-10-19T04:02:09.200184+00:00",
      "status_notes": "Vulnerability CVE-2026-50168 affects version 15.2.1 of @angular/platform-browser-dynamic, and is fixed in 15.2.1-tuxcare.2.",
      "vulnerability": {
        "name": "CVE-2026-50168"
      },
      "action_statement": "Vulnerability CVE-2026-50168 affects version 15.2.1 of @angular/platform-browser-dynamic, and is fixed in 15.2.1-tuxcare.2."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/%40angular/platform-browser-dynamic@15.2.1",
          "identifiers": {
            "purl": "pkg:npm/%40angular/platform-browser-dynamic@15.2.1"
          }
        }
      ],
      "timestamp": "2026-10-19T04:02:09.200184+00:00",
      "status_notes": "Vulnerability CVE-2026-50169 affects version 15.2.1 of @angular/platform-browser-dynamic, and is fixed in 15.2.1-tuxcare.2.",
      "vulnerability": {
        "name": "CVE-2026-50169"
      },
      "action_statement": "Vulnerability CVE-2026-50169 affects version 15.2.1 of @angular/platform-browser-dynamic, and is fixed in 15.2.1-tuxcare.2."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/%40angular/platform-browser-dynamic@15.2.1",
          "identifiers": {
            "purl": "pkg:npm/%40angular/platform-browser-dynamic@15.2.1"
          }
        }
      ],
      "timestamp": "2026-10-19T04:02:09.200184+00:00",
      "status_notes": "Vulnerability CVE-2026-50184 affects version 15.2.1 of @angular/platform-browser-dynamic, and is fixed in 15.2.1-tuxcare.2.",
      "vulnerability": {
        "name": "CVE-2026-50184"
      },
      "action_statement": "Vulnerability CVE-2026-50184 affects version 15.2.1 of @angular/platform-browser-dynamic, and is fixed in 15.2.1-tuxcare.2."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/%40angular/platform-browser-dynamic@15.2.1",
          "identifiers": {
            "purl": "pkg:npm/%40angular/platform-browser-dynamic@15.2.1"
          }
        }
      ],
      "timestamp": "2026-10-19T04:02:09.200184+00:00",
      "status_notes": "Vulnerability CVE-2026-50555 affects version 15.2.1 of @angular/platform-browser-dynamic, and is fixed in 15.2.1-tuxcare.2.",
      "vulnerability": {
        "name": "CVE-2026-50555"
      },
      "action_statement": "Vulnerability CVE-2026-50555 affects version 15.2.1 of @angular/platform-browser-dynamic, and is fixed in 15.2.1-tuxcare.2."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/%40angular/platform-browser-dynamic@15.2.1",
          "identifiers": {
            "purl": "pkg:npm/%40angular/platform-browser-dynamic@15.2.1"
          }
        }
      ],
      "timestamp": "2026-10-19T04:02:09.200184+00:00",
      "status_notes": "Vulnerability CVE-2026-50556 affects version 15.2.1 of @angular/platform-browser-dynamic, and is fixed in 15.2.1-tuxcare.2.",
      "vulnerability": {
        "name": "CVE-2026-50556"
      },
      "action_statement": "Vulnerability CVE-2026-50556 affects version 15.2.1 of @angular/platform-browser-dynamic, and is fixed in 15.2.1-tuxcare.2."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/%40angular/platform-browser-dynamic@15.2.1",
          "identifiers": {
            "purl": "pkg:npm/%40angular/platform-browser-dynamic@15.2.1"
          }
        }
      ],
      "timestamp": "2026-10-19T04:02:09.200184+00:00",
      "status_notes": "Vulnerability CVE-2026-54264 affects version 15.2.1 of @angular/platform-browser-dynamic, and is fixed in 15.2.1-tuxcare.2.",
      "vulnerability": {
        "name": "CVE-2026-54264"
      },
      "action_statement": "Vulnerability CVE-2026-54264 affects version 15.2.1 of @angular/platform-browser-dynamic, and is fixed in 15.2.1-tuxcare.2."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/%40angular/platform-browser-dynamic@15.2.1",
          "identifiers": {
            "purl": "pkg:npm/%40angular/platform-browser-dynamic@15.2.1"
          }
        }
      ],
      "timestamp": "2026-10-19T04:02:09.200184+00:00",
      "status_notes": "Vulnerability CVE-2026-69149 affects version 15.2.1 of @angular/platform-browser-dynamic, and is fixed in 15.2.1-tuxcare.3.",
      "vulnerability": {
        "name": "CVE-2026-69149"
      },
      "action_statement": "Vulnerability CVE-2026-69149 affects version 15.2.1 of @angular/platform-browser-dynamic, and is fixed in 15.2.1-tuxcare.3."
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:npm/%40angular/platform-browser-dynamic@15.2.1",
          "identifiers": {
            "purl": "pkg:npm/%40angular/platform-browser-dynamic@15.2.1"
          }
        }
      ],
      "timestamp": "2026-10-19T04:02:09.200184+00:00",
      "status_notes": "Vulnerability CVE-2026-88056 does not affect version 15.2.1 of @angular/platform-browser-dynamic. not_affected \u2014 Version 15.2.1 is not affected by CVE-2026-88056. The vulnerability requires a `String.prototype.trim()` call in the `parseUrl` function that strips Unicode whitespace, creating a discrepancy between WHATWG URL validation and Angular's URL resolution. This vulnerable code pattern was introduced in version 22.1.0 (May 2026) via refactor commit e14d34e9ee and fixed in version 20.3.30 (August 2026...",
      "justification": "vulnerable_code_not_present",
      "vulnerability": {
        "name": "CVE-2026-88056"
      },
      "impact_statement": "not_affected \u2014 Version 15.2.1 is not affected by CVE-2026-88056. The vulnerability requires a `String.prototype.trim()` call in the `parseUrl` function that strips Unicode whitespace, creating a discrepancy between WHATWG URL validation and Angular's URL resolution. This vulnerable code pattern was introduced in version 22.1.0 (May 2026) via refactor commit e14d34e9ee and fixed in version 20.3.30 (August 2026..."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/%40angular/platform-browser-dynamic@15.2.1",
          "identifiers": {
            "purl": "pkg:npm/%40angular/platform-browser-dynamic@15.2.1"
          }
        }
      ],
      "timestamp": "2026-10-19T04:02:09.200184+00:00",
      "status_notes": "Vulnerability CVE-2026-88058 affects version 15.2.1 of @angular/platform-browser-dynamic, and is fixed in 15.2.1-tuxcare.4.",
      "vulnerability": {
        "name": "CVE-2026-88058"
      },
      "action_statement": "Vulnerability CVE-2026-88058 affects version 15.2.1 of @angular/platform-browser-dynamic, and is fixed in 15.2.1-tuxcare.4."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/%40angular/platform-browser-dynamic@15.2.1",
          "identifiers": {
            "purl": "pkg:npm/%40angular/platform-browser-dynamic@15.2.1"
          }
        }
      ],
      "timestamp": "2026-10-19T04:02:09.200184+00:00",
      "status_notes": "Vulnerability CVE-2026-88060 affects version 15.2.1 of @angular/platform-browser-dynamic, and is fixed in 15.2.1-tuxcare.4.",
      "vulnerability": {
        "name": "CVE-2026-88060"
      },
      "action_statement": "Vulnerability CVE-2026-88060 affects version 15.2.1 of @angular/platform-browser-dynamic, and is fixed in 15.2.1-tuxcare.4."
    }
  ]
}