{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:4434b09f-98bd-5c1c-b532-a77f80e13312", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:npm/%40angular/elements@17.1.0-tuxcare.2", "type": "library", "name": "@angular/elements", "version": "17.1.0-tuxcare.2", "purl": "pkg:npm/%40angular/elements@17.1.0-tuxcare.2" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:346dcf21-f259-533e-8a1e-5fde2bc78755", "id": "CVE-2017-16009", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2017-16009 is fixed in version 17.1.0-tuxcare.2 of @angular/elements." }, "affects": [ { "ref": "pkg:npm/%40angular/elements@17.1.0-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:8b6413a5-f72b-5dd2-8b3c-7334a64536b0", "id": "CVE-2025-59052", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59052 is fixed in version 17.1.0-tuxcare.2 of @angular/elements." }, "affects": [ { "ref": "pkg:npm/%40angular/elements@17.1.0-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:afb1c916-f767-5551-9d41-d9b5dcca1d6b", "id": "CVE-2025-66035", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 17.1.0-tuxcare.2 of @angular/elements." }, "affects": [ { "ref": "pkg:npm/%40angular/elements@17.1.0-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:e6ec082e-8d83-5c2e-beb7-f43fbafdbf73", "id": "CVE-2025-66412", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-66412 affects version 17.1.0-tuxcare.2 of @angular/elements." }, "affects": [ { "ref": "pkg:npm/%40angular/elements@17.1.0-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:d7299926-5799-54ca-b4c7-b0ae0781c207", "id": "CVE-2026-22610", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22610 is fixed in version 17.1.0-tuxcare.2 of @angular/elements." }, "affects": [ { "ref": "pkg:npm/%40angular/elements@17.1.0-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:da2b8446-382d-5ed7-9b5e-f65b02e71ac3", "id": "CVE-2026-27970", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27970 is fixed in version 17.1.0-tuxcare.2 of @angular/elements." }, "affects": [ { "ref": "pkg:npm/%40angular/elements@17.1.0-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:808c4afd-8176-557d-b7dd-f79ef54e0747", "id": "CVE-2026-32635", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-32635 is fixed in version 17.1.0-tuxcare.2 of @angular/elements." }, "affects": [ { "ref": "pkg:npm/%40angular/elements@17.1.0-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:994fc009-b604-5557-a6aa-24baaad94d64", "id": "CVE-2026-41423", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41423 is fixed in version 17.1.0-tuxcare.2 of @angular/elements." }, "affects": [ { "ref": "pkg:npm/%40angular/elements@17.1.0-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:5b212024-02da-5ee8-a287-95833c49e8ff", "id": "CVE-2026-46417", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46417 is fixed in version 17.1.0-tuxcare.2 of @angular/elements." }, "affects": [ { "ref": "pkg:npm/%40angular/elements@17.1.0-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:b8ac7b4d-117c-5deb-94bf-ccca4ba72bc0", "id": "CVE-2026-50168", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50168 is fixed in version 17.1.0-tuxcare.2 of @angular/elements." }, "affects": [ { "ref": "pkg:npm/%40angular/elements@17.1.0-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:9c647229-b8fb-5031-8df6-dd401a7367a0", "id": "CVE-2026-50169", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50169 is fixed in version 17.1.0-tuxcare.2 of @angular/elements." }, "affects": [ { "ref": "pkg:npm/%40angular/elements@17.1.0-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:3bd11894-aecf-5e5b-ab77-b619eafda992", "id": "CVE-2026-50170", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50170 is fixed in version 17.1.0-tuxcare.2 of @angular/elements." }, "affects": [ { "ref": "pkg:npm/%40angular/elements@17.1.0-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:8b302acb-f8b7-5989-920a-ca5898b9f6e2", "id": "CVE-2026-50171", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50171 is fixed in version 17.1.0-tuxcare.2 of @angular/elements." }, "affects": [ { "ref": "pkg:npm/%40angular/elements@17.1.0-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:36b3c221-b0f2-5993-af30-0b759bdc8708", "id": "CVE-2026-50184", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50184 is fixed in version 17.1.0-tuxcare.2 of @angular/elements." }, "affects": [ { "ref": "pkg:npm/%40angular/elements@17.1.0-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:be39dac4-f4f6-57fa-88c9-ca7c614c1dbc", "id": "CVE-2026-50555", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50555 is fixed in version 17.1.0-tuxcare.2 of @angular/elements." }, "affects": [ { "ref": "pkg:npm/%40angular/elements@17.1.0-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:feb5312a-9fdb-5060-bdf3-55589a63ad7e", "id": "CVE-2026-50556", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-50556 does not affect version 17.1.0-tuxcare.2 of @angular/elements. not_affected \u2014 The Angular repository source code is NOT affected by CVE-2026-50556. The vulnerability exists in the external domino dependency (lib/NodeUtils.js), not in Angular's source code. TuxCare's own patch documentation explicitly states: 'DEPENDENCY fix, NOT Angular source' and 'domino is external/runtime (not bundled)'. Angular's code only imports and calls domino's API but does not contain domino's..." }, "affects": [ { "ref": "pkg:npm/%40angular/elements@17.1.0-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:7fe6a6da-3571-5bdf-b209-6e6b11b10fd7", "id": "CVE-2026-50557", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50557 is fixed in version 17.1.0-tuxcare.2 of @angular/elements." }, "affects": [ { "ref": "pkg:npm/%40angular/elements@17.1.0-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:10b4d615-f9ad-5f70-99b4-bfe287fce3ba", "id": "CVE-2026-52725", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-52725 is fixed in version 17.1.0-tuxcare.2 of @angular/elements." }, "affects": [ { "ref": "pkg:npm/%40angular/elements@17.1.0-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:f4f5caa3-ae68-5c5e-a594-c157c4642ad8", "id": "CVE-2026-54264", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54264 is fixed in version 17.1.0-tuxcare.2 of @angular/elements." }, "affects": [ { "ref": "pkg:npm/%40angular/elements@17.1.0-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:185abfff-583a-519e-b20d-551f411a5cf2", "id": "CVE-2026-54265", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-54265 does not affect version 17.1.0-tuxcare.2 of @angular/elements. not_affected \u2014 Angular v17.1.0 does not have the TwoWayProperty IR operation that is the subject of CVE-2026-54265. Two-way bindings are desugared into separate property and event bindings before template pipeline processing, with the property half using the same parsePropertyBinding() code path as one-way property bindings, which are properly sanitized." }, "affects": [ { "ref": "pkg:npm/%40angular/elements@17.1.0-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:5b2c79d7-8347-544c-b1d1-3998500f4cb8", "id": "CVE-2026-54266", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54266 is fixed in version 17.1.0-tuxcare.2 of @angular/elements." }, "affects": [ { "ref": "pkg:npm/%40angular/elements@17.1.0-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:2a1c7c96-f055-53fe-8e51-74c19f777710", "id": "CVE-2026-54267", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54267 is fixed in version 17.1.0-tuxcare.2 of @angular/elements." }, "affects": [ { "ref": "pkg:npm/%40angular/elements@17.1.0-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:24069ff5-0636-5e54-b2da-64361213afe5", "id": "CVE-2026-54268", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54268 is fixed in version 17.1.0-tuxcare.2 of @angular/elements." }, "affects": [ { "ref": "pkg:npm/%40angular/elements@17.1.0-tuxcare.2" } ] } ], "dependencies": [ { "ref": "pkg:npm/%40angular/elements@17.1.0-tuxcare.2" } ] }