{
  "@id": "urn:uuid:ea113024-b9ec-4d56-b57b-c4fd9707d73b",
  "role": "Document Creator",
  "author": "https://tuxcare.com",
  "version": 5,
  "@context": "https://openvex.dev/ns/v0.2.0",
  "timestamp": "2026-11-10T16:22:36.374927+00:00",
  "statements": [
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/%40angular/platform-server@13.3.12",
          "identifiers": {
            "purl": "pkg:npm/%40angular/platform-server@13.3.12"
          }
        }
      ],
      "timestamp": "2026-10-29T18:29:51.220655+00:00",
      "status_notes": "Vulnerability CVE-2025-59052 affects version 13.3.12 of @angular/platform-server.",
      "vulnerability": {
        "name": "CVE-2025-59052"
      },
      "action_statement": "Vulnerability CVE-2025-59052 affects version 13.3.12 of @angular/platform-server."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/%40angular/platform-server@13.3.12",
          "identifiers": {
            "purl": "pkg:npm/%40angular/platform-server@13.3.12"
          }
        }
      ],
      "timestamp": "2026-10-19T03:17:00.158398+00:00",
      "status_notes": "Vulnerability CVE-2026-101895 affects version 13.3.12 of @angular/platform-server, and is fixed in 13.3.12-tuxcare.7.",
      "vulnerability": {
        "name": "CVE-2026-101895"
      },
      "action_statement": "Vulnerability CVE-2026-101895 affects version 13.3.12 of @angular/platform-server, and is fixed in 13.3.12-tuxcare.7."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/%40angular/platform-server@13.3.12",
          "identifiers": {
            "purl": "pkg:npm/%40angular/platform-server@13.3.12"
          }
        }
      ],
      "timestamp": "2026-10-20T14:42:09.335337+00:00",
      "status_notes": "Vulnerability CVE-2026-111754 affects version 13.3.12 of @angular/platform-server.",
      "vulnerability": {
        "name": "CVE-2026-111754"
      },
      "action_statement": "Vulnerability CVE-2026-111754 affects version 13.3.12 of @angular/platform-server."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/%40angular/platform-server@13.3.12",
          "identifiers": {
            "purl": "pkg:npm/%40angular/platform-server@13.3.12"
          }
        }
      ],
      "timestamp": "2026-10-19T03:17:00.158398+00:00",
      "status_notes": "Vulnerability CVE-2026-41423 affects version 13.3.12 of @angular/platform-server, and is fixed in 13.3.12-tuxcare.2.",
      "vulnerability": {
        "name": "CVE-2026-41423"
      },
      "action_statement": "Vulnerability CVE-2026-41423 affects version 13.3.12 of @angular/platform-server, and is fixed in 13.3.12-tuxcare.2."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/%40angular/platform-server@13.3.12",
          "identifiers": {
            "purl": "pkg:npm/%40angular/platform-server@13.3.12"
          }
        }
      ],
      "timestamp": "2026-10-19T03:17:00.158398+00:00",
      "status_notes": "Vulnerability CVE-2026-46417 affects version 13.3.12 of @angular/platform-server, and is fixed in 13.3.12-tuxcare.2.",
      "vulnerability": {
        "name": "CVE-2026-46417"
      },
      "action_statement": "Vulnerability CVE-2026-46417 affects version 13.3.12 of @angular/platform-server, and is fixed in 13.3.12-tuxcare.2."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/%40angular/platform-server@13.3.12",
          "identifiers": {
            "purl": "pkg:npm/%40angular/platform-server@13.3.12"
          }
        }
      ],
      "timestamp": "2026-10-19T03:17:00.158398+00:00",
      "status_notes": "Vulnerability CVE-2026-50168 affects version 13.3.12 of @angular/platform-server, and is fixed in 13.3.12-tuxcare.2.",
      "vulnerability": {
        "name": "CVE-2026-50168"
      },
      "action_statement": "Vulnerability CVE-2026-50168 affects version 13.3.12 of @angular/platform-server, and is fixed in 13.3.12-tuxcare.2."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/%40angular/platform-server@13.3.12",
          "identifiers": {
            "purl": "pkg:npm/%40angular/platform-server@13.3.12"
          }
        }
      ],
      "timestamp": "2026-10-19T03:17:00.158398+00:00",
      "status_notes": "Vulnerability CVE-2026-50555 affects version 13.3.12 of @angular/platform-server, and is fixed in 13.3.12-tuxcare.2.",
      "vulnerability": {
        "name": "CVE-2026-50555"
      },
      "action_statement": "Vulnerability CVE-2026-50555 affects version 13.3.12 of @angular/platform-server, and is fixed in 13.3.12-tuxcare.2."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/%40angular/platform-server@13.3.12",
          "identifiers": {
            "purl": "pkg:npm/%40angular/platform-server@13.3.12"
          }
        }
      ],
      "timestamp": "2026-10-19T03:17:00.158398+00:00",
      "status_notes": "Vulnerability CVE-2026-50556 affects version 13.3.12 of @angular/platform-server, and is fixed in 13.3.12-tuxcare.2.",
      "vulnerability": {
        "name": "CVE-2026-50556"
      },
      "action_statement": "Vulnerability CVE-2026-50556 affects version 13.3.12 of @angular/platform-server, and is fixed in 13.3.12-tuxcare.2."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/%40angular/platform-server@13.3.12",
          "identifiers": {
            "purl": "pkg:npm/%40angular/platform-server@13.3.12"
          }
        }
      ],
      "timestamp": "2026-10-19T03:17:00.158398+00:00",
      "status_notes": "Vulnerability CVE-2026-69149 affects version 13.3.12 of @angular/platform-server, and is fixed in 13.3.12-tuxcare.4.",
      "vulnerability": {
        "name": "CVE-2026-69149"
      },
      "action_statement": "Vulnerability CVE-2026-69149 affects version 13.3.12 of @angular/platform-server, and is fixed in 13.3.12-tuxcare.4."
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:npm/%40angular/platform-server@13.3.12",
          "identifiers": {
            "purl": "pkg:npm/%40angular/platform-server@13.3.12"
          }
        }
      ],
      "timestamp": "2026-10-19T03:17:00.158398+00:00",
      "status_notes": "Vulnerability CVE-2026-88056 does not affect version 13.3.12 of @angular/platform-server. not_affected \u2014 Angular v13.3.12 is NOT AFFECTED by CVE-2026-88056. The vulnerable code pattern (String.prototype.trim() call on URLs during server-side resolution) was introduced in Angular v22.x (May 2026, commit 6e71049021) and later fixed in Aug 2026 (commit 9339a7a2de). Version 13.3.12 predates this refactor by multiple major releases and never contained the vulnerable trim() call. Both parseUrl implement...",
      "justification": "vulnerable_code_not_present",
      "vulnerability": {
        "name": "CVE-2026-88056"
      },
      "impact_statement": "not_affected \u2014 Angular v13.3.12 is NOT AFFECTED by CVE-2026-88056. The vulnerable code pattern (String.prototype.trim() call on URLs during server-side resolution) was introduced in Angular v22.x (May 2026, commit 6e71049021) and later fixed in Aug 2026 (commit 9339a7a2de). Version 13.3.12 predates this refactor by multiple major releases and never contained the vulnerable trim() call. Both parseUrl implement..."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/%40angular/platform-server@13.3.12",
          "identifiers": {
            "purl": "pkg:npm/%40angular/platform-server@13.3.12"
          }
        }
      ],
      "timestamp": "2026-10-19T03:17:00.158398+00:00",
      "status_notes": "Vulnerability CVE-2026-88058 affects version 13.3.12 of @angular/platform-server, and is fixed in 13.3.12-tuxcare.6.",
      "vulnerability": {
        "name": "CVE-2026-88058"
      },
      "action_statement": "Vulnerability CVE-2026-88058 affects version 13.3.12 of @angular/platform-server, and is fixed in 13.3.12-tuxcare.6."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/%40angular/platform-server@13.3.12",
          "identifiers": {
            "purl": "pkg:npm/%40angular/platform-server@13.3.12"
          }
        }
      ],
      "timestamp": "2026-10-19T03:17:00.158398+00:00",
      "status_notes": "Vulnerability CVE-2026-88060 affects version 13.3.12 of @angular/platform-server, and is fixed in 13.3.12-tuxcare.6.",
      "vulnerability": {
        "name": "CVE-2026-88060"
      },
      "action_statement": "Vulnerability CVE-2026-88060 affects version 13.3.12 of @angular/platform-server, and is fixed in 13.3.12-tuxcare.6."
    }
  ]
}