{
  "@id": "urn:uuid:6858337b-69cd-41e5-bf2e-a07f1d0d11f3",
  "role": "Document Creator",
  "author": "https://tuxcare.com",
  "version": 3,
  "@context": "https://openvex.dev/ns/v0.2.0",
  "timestamp": "2026-11-10T16:23:37.766436+00:00",
  "statements": [
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/%40angular/service-worker@10.1.0",
          "identifiers": {
            "purl": "pkg:npm/%40angular/service-worker@10.1.0"
          }
        }
      ],
      "timestamp": "2026-10-19T05:00:00.246665+00:00",
      "status_notes": "Vulnerability CVE-2026-50169 affects version 10.1.0 of @angular/service-worker, and is fixed in 10.1.0-tuxcare.3.",
      "vulnerability": {
        "name": "CVE-2026-50169"
      },
      "action_statement": "Vulnerability CVE-2026-50169 affects version 10.1.0 of @angular/service-worker, and is fixed in 10.1.0-tuxcare.3."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/%40angular/service-worker@10.1.0",
          "identifiers": {
            "purl": "pkg:npm/%40angular/service-worker@10.1.0"
          }
        }
      ],
      "timestamp": "2026-10-19T05:00:00.246665+00:00",
      "status_notes": "Vulnerability CVE-2026-50184 affects version 10.1.0 of @angular/service-worker, and is fixed in 10.1.0-tuxcare.3.",
      "vulnerability": {
        "name": "CVE-2026-50184"
      },
      "action_statement": "Vulnerability CVE-2026-50184 affects version 10.1.0 of @angular/service-worker, and is fixed in 10.1.0-tuxcare.3."
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:npm/%40angular/service-worker@10.1.0",
          "identifiers": {
            "purl": "pkg:npm/%40angular/service-worker@10.1.0"
          }
        }
      ],
      "timestamp": "2026-10-19T05:00:00.246665+00:00",
      "status_notes": "Vulnerability CVE-2026-54264 does not affect version 10.1.0 of @angular/service-worker. not_affected \u2014 Angular 10.1.0-tuxcare.2 is not affected by CVE-2026-54264. The vulnerability requires the Service Worker to preserve and forward credential headers on cross-origin redirects. In this version, AssetGroup creates fresh requests without any headers when following redirects, and DataGroup delegates to the browser's native fetch API which correctly implements the Fetch specification's header-stripp...",
      "justification": "vulnerable_code_not_present",
      "vulnerability": {
        "name": "CVE-2026-54264"
      },
      "impact_statement": "not_affected \u2014 Angular 10.1.0-tuxcare.2 is not affected by CVE-2026-54264. The vulnerability requires the Service Worker to preserve and forward credential headers on cross-origin redirects. In this version, AssetGroup creates fresh requests without any headers when following redirects, and DataGroup delegates to the browser's native fetch API which correctly implements the Fetch specification's header-stripp..."
    }
  ]
}