{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:d7c1934c-c7f6-5441-9a76-83325d58d0d5", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@angular/benchpress", "purl": "pkg:npm/%40angular/benchpress@12.2.17-tuxcare.10", "type": "library", "bom-ref": "pkg:npm/%40angular/benchpress@12.2.17-tuxcare.10", "version": "12.2.17-tuxcare.10", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-66035", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:3ba0ce80-6d6b-5604-b649-61a9e5f5f25c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 12.2.17-tuxcare.10 of @angular/benchpress." } }, { "id": "CVE-2025-66412", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:183074d5-51d3-50fd-95bf-62f20a803a0c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 12.2.17-tuxcare.10 of @angular/benchpress." } }, { "id": "CVE-2026-22610", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:03e98658-e5d7-5de7-ae57-ca42c564582d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22610 is fixed in version 12.2.17-tuxcare.10 of @angular/benchpress." } }, { "id": "CVE-2026-27970", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:d6e4f4d6-eef6-51ad-92cc-8cf1d977db8f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27970 is fixed in version 12.2.17-tuxcare.10 of @angular/benchpress." } }, { "id": "CVE-2026-46417", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:bff46cd5-269d-56f1-93ba-57d3300093be", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46417 is fixed in version 12.2.17-tuxcare.10 of @angular/benchpress." } }, { "id": "CVE-2026-50168", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:3f674720-10f5-5309-8874-70c7cf102200", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50168 is fixed in version 12.2.17-tuxcare.10 of @angular/benchpress." } }, { "id": "CVE-2026-50169", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:6e3448e2-3e95-5ee2-b4c9-e77c6cf3ad2b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50169 is fixed in version 12.2.17-tuxcare.10 of @angular/benchpress." } }, { "id": "CVE-2026-50170", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:ee1ea849-bef2-5310-9ae2-31805e2bf5de", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50170 is fixed in version 12.2.17-tuxcare.10 of @angular/benchpress." } }, { "id": "CVE-2026-50171", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:15522b9e-826f-52e6-8745-a6a68c21d8be", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50171 is fixed in version 12.2.17-tuxcare.10 of @angular/benchpress." } }, { "id": "CVE-2026-50184", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:e0a19492-b870-54e1-96b8-6eaeb50679b5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50184 is fixed in version 12.2.17-tuxcare.10 of @angular/benchpress." } }, { "id": "CVE-2026-50555", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:15b87193-bc18-5d21-9d92-1a931cc86c5e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50555 is fixed in version 12.2.17-tuxcare.10 of @angular/benchpress." } }, { "id": "CVE-2026-50556", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:9d1de5bf-6e20-5bbe-a192-37ecbf7b68f8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50556 is fixed in version 12.2.17-tuxcare.10 of @angular/benchpress." } }, { "id": "CVE-2026-50557", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:dba62d32-bf01-5dac-8570-01e9a829bc48", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50557 is fixed in version 12.2.17-tuxcare.10 of @angular/benchpress." } }, { "id": "CVE-2026-52725", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:6c0cf384-0f1c-59cb-afb2-8576712c94a2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-52725 is fixed in version 12.2.17-tuxcare.10 of @angular/benchpress." } }, { "id": "CVE-2026-54264", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:5b9395da-4e1c-536c-8ba2-9723edc266de", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54264 is fixed in version 12.2.17-tuxcare.10 of @angular/benchpress." } }, { "id": "CVE-2026-54265", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:3ee58544-d3ad-5bb6-9027-9d7a04176919", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54265 is fixed in version 12.2.17-tuxcare.10 of @angular/benchpress." } }, { "id": "CVE-2026-54266", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:3eda5b69-11a1-5521-84bb-fae6db8e687e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54266 is fixed in version 12.2.17-tuxcare.10 of @angular/benchpress." } }, { "id": "CVE-2026-54267", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:e206e96b-c5c1-542f-a7a8-49d01ade949b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54267 is fixed in version 12.2.17-tuxcare.10 of @angular/benchpress." } }, { "id": "CVE-2026-54268", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:709c3bf3-7bd5-5991-a5b1-835da52c201f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54268 is fixed in version 12.2.17-tuxcare.10 of @angular/benchpress." } }, { "id": "CVE-2026-68945", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:c30df23f-c896-5bb5-a6fd-306049a06a8d", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-68945 does not affect version 12.2.17-tuxcare.10 of @angular/benchpress. not_affected \u2014 Angular 12.2.17 does not contain the HttpTransferCache feature affected by CVE-2026-68945. HttpTransferCache, which caches HTTP requests during Server-Side Rendering (SSR), was first introduced in Angular 16.0.0\u2014approximately 4 major versions after the target version. The vulnerability concerns cache-key collision when repeated HTTP parameters are serialized, but since the entire HttpTransferCa...", "justification": "code_not_present" } }, { "id": "CVE-2026-69149", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:c42ab02f-98b8-5d1a-92d0-433a43c8cd7d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69149 is fixed in version 12.2.17-tuxcare.10 of @angular/benchpress." } }, { "id": "CVE-2026-69151", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:9a34e3ab-be7a-51fa-8060-9efc494dc138", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69151 is fixed in version 12.2.17-tuxcare.10 of @angular/benchpress." } }, { "id": "CVE-2026-88056", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:6c4170c5-d3ee-5239-8619-31864bad96c6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88056 affects version 12.2.17-tuxcare.10 of @angular/benchpress." } }, { "id": "CVE-2026-88057", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:32a3de4a-f9f2-52e5-a641-91809d8777c3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88057 affects version 12.2.17-tuxcare.10 of @angular/benchpress." } }, { "id": "CVE-2026-88059", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:da22b880-1eca-5bf2-9ab4-711a86940aec", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88059 does not affect version 12.2.17-tuxcare.10 of @angular/benchpress. not_affected \u2014 Angular 12.2.17-tuxcare.9 is not affected by CVE-2026-88059. The vulnerability requires HttpTransferCache, withRequestsMadeViaParent(), and provideClientHydration() features which were introduced in Angular 16.0.0. This version uses the older module-based HttpClientModule system and lacks the entire SSR hydration transfer-cache infrastructure. The vulnerable code pattern described in the CVE do...", "justification": "code_not_present" } }, { "id": "CVE-2026-88060", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:832b989f-c149-547d-9ee5-92df22872691", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88060 affects version 12.2.17-tuxcare.10 of @angular/benchpress." } } ], "dependencies": [ { "ref": "pkg:npm/%40angular/benchpress@12.2.17-tuxcare.10" } ] }