{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:8fb12b02-3e78-526f-a06f-cd1e76549f0a", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@angular/benchpress", "purl": "pkg:npm/%40angular/benchpress@17.3.12-tuxcare.11", "type": "library", "bom-ref": "pkg:npm/%40angular/benchpress@17.3.12-tuxcare.11", "version": "17.3.12-tuxcare.11", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-59052", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@17.3.12-tuxcare.11" } ], "bom-ref": "urn:uuid:0a628bda-521b-52cc-a7c4-5ad07cea1ea1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59052 is fixed in version 17.3.12-tuxcare.11 of @angular/benchpress." } }, { "id": "CVE-2025-66035", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@17.3.12-tuxcare.11" } ], "bom-ref": "urn:uuid:891e9169-ddf9-57e1-9a78-7405587eb093", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 17.3.12-tuxcare.11 of @angular/benchpress." } }, { "id": "CVE-2025-66412", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@17.3.12-tuxcare.11" } ], "bom-ref": "urn:uuid:697cee38-0537-55e2-9cf1-efba2d14fe01", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 17.3.12-tuxcare.11 of @angular/benchpress." } }, { "id": "CVE-2026-22610", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@17.3.12-tuxcare.11" } ], "bom-ref": "urn:uuid:c4b6599e-0479-5947-a5bc-1151f238ffd5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22610 is fixed in version 17.3.12-tuxcare.11 of @angular/benchpress." } }, { "id": "CVE-2026-27970", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@17.3.12-tuxcare.11" } ], "bom-ref": "urn:uuid:3c619b9e-9434-5d71-872c-3c02f03594b0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27970 is fixed in version 17.3.12-tuxcare.11 of @angular/benchpress." } }, { "id": "CVE-2026-32635", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@17.3.12-tuxcare.11" } ], "bom-ref": "urn:uuid:19bf4de0-0586-5e33-8bc7-3ab14210cc27", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-32635 is fixed in version 17.3.12-tuxcare.11 of @angular/benchpress." } }, { "id": "CVE-2026-46417", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@17.3.12-tuxcare.11" } ], "bom-ref": "urn:uuid:3b7cfa22-ae34-5826-8aee-94ef68e1500b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-46417 affects version 17.3.12-tuxcare.11 of @angular/benchpress, and is fixed in 17.3.12-tuxcare.12." } }, { "id": "CVE-2026-50168", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@17.3.12-tuxcare.11" } ], "bom-ref": "urn:uuid:3b5c9424-f531-5446-aedc-c881a7cbef05", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50168 affects version 17.3.12-tuxcare.11 of @angular/benchpress, and is fixed in 17.3.12-tuxcare.13." } }, { "id": "CVE-2026-50169", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@17.3.12-tuxcare.11" } ], "bom-ref": "urn:uuid:697d9c54-c657-580f-9da1-8ff3e6f67293", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50169 affects version 17.3.12-tuxcare.11 of @angular/benchpress, and is fixed in 17.3.12-tuxcare.13." } }, { "id": "CVE-2026-50170", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@17.3.12-tuxcare.11" } ], "bom-ref": "urn:uuid:023e692a-617d-5dec-8a4e-dc2cfc2f78c7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50170 affects version 17.3.12-tuxcare.11 of @angular/benchpress, and is fixed in 17.3.12-tuxcare.13." } }, { "id": "CVE-2026-50171", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@17.3.12-tuxcare.11" } ], "bom-ref": "urn:uuid:a168302e-6cf2-58ba-857d-406099a614a1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50171 affects version 17.3.12-tuxcare.11 of @angular/benchpress, and is fixed in 17.3.12-tuxcare.13." } }, { "id": "CVE-2026-50184", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@17.3.12-tuxcare.11" } ], "bom-ref": "urn:uuid:11c26bca-4d5e-5d22-a35e-846e40533bbd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50184 affects version 17.3.12-tuxcare.11 of @angular/benchpress, and is fixed in 17.3.12-tuxcare.13." } }, { "id": "CVE-2026-50555", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@17.3.12-tuxcare.11" } ], "bom-ref": "urn:uuid:d0f32cf1-85d2-526a-97f1-a5eeefc33a0d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50555 affects version 17.3.12-tuxcare.11 of @angular/benchpress, and is fixed in 17.3.12-tuxcare.13." } }, { "id": "CVE-2026-50556", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@17.3.12-tuxcare.11" } ], "bom-ref": "urn:uuid:24143748-4b98-5aab-ab0e-d9ee133db354", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50556 affects version 17.3.12-tuxcare.11 of @angular/benchpress, and is fixed in 17.3.12-tuxcare.13." } }, { "id": "CVE-2026-50557", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@17.3.12-tuxcare.11" } ], "bom-ref": "urn:uuid:b73f6059-4c50-5633-851c-d3109fe64c39", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50557 affects version 17.3.12-tuxcare.11 of @angular/benchpress, and is fixed in 17.3.12-tuxcare.13." } }, { "id": "CVE-2026-52725", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@17.3.12-tuxcare.11" } ], "bom-ref": "urn:uuid:72222473-79e6-5ae2-a91d-1257f4544cb8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-52725 affects version 17.3.12-tuxcare.11 of @angular/benchpress, and is fixed in 17.3.12-tuxcare.13." } }, { "id": "CVE-2026-54264", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@17.3.12-tuxcare.11" } ], "bom-ref": "urn:uuid:4b574007-fe6f-5d86-a79c-950d9b72765f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54264 affects version 17.3.12-tuxcare.11 of @angular/benchpress, and is fixed in 17.3.12-tuxcare.13." } }, { "id": "CVE-2026-54265", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@17.3.12-tuxcare.11" } ], "bom-ref": "urn:uuid:eda77e20-0d46-5449-8fa3-1933c90e62f3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54265 affects version 17.3.12-tuxcare.11 of @angular/benchpress, and is fixed in 17.3.12-tuxcare.13." } }, { "id": "CVE-2026-54266", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@17.3.12-tuxcare.11" } ], "bom-ref": "urn:uuid:1fd8eee4-8a47-5ceb-9671-c3d1b84a268d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54266 affects version 17.3.12-tuxcare.11 of @angular/benchpress, and is fixed in 17.3.12-tuxcare.13." } }, { "id": "CVE-2026-54267", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@17.3.12-tuxcare.11" } ], "bom-ref": "urn:uuid:2f3d5387-f6d1-54c8-8894-51e06d2bfaa2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54267 affects version 17.3.12-tuxcare.11 of @angular/benchpress, and is fixed in 17.3.12-tuxcare.13." } }, { "id": "CVE-2026-54268", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@17.3.12-tuxcare.11" } ], "bom-ref": "urn:uuid:219f648c-6912-5802-9e69-2cb4be3bdf7d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54268 affects version 17.3.12-tuxcare.11 of @angular/benchpress, and is fixed in 17.3.12-tuxcare.13." } }, { "id": "CVE-2026-68945", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@17.3.12-tuxcare.11" } ], "bom-ref": "urn:uuid:03c677ac-d242-5f18-a282-14d16326c036", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-68945 affects version 17.3.12-tuxcare.11 of @angular/benchpress, and is fixed in 17.3.12-tuxcare.14." } }, { "id": "CVE-2026-69149", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@17.3.12-tuxcare.11" } ], "bom-ref": "urn:uuid:fa525c74-570b-5d4c-a973-cea0629bfd08", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-69149 affects version 17.3.12-tuxcare.11 of @angular/benchpress, and is fixed in 17.3.12-tuxcare.14." } }, { "id": "CVE-2026-69151", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@17.3.12-tuxcare.11" } ], "bom-ref": "urn:uuid:1dd81d7b-1ae7-59bf-bfcb-58193213f0c0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-69151 affects version 17.3.12-tuxcare.11 of @angular/benchpress, and is fixed in 17.3.12-tuxcare.14." } }, { "id": "CVE-2026-88056", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@17.3.12-tuxcare.11" } ], "bom-ref": "urn:uuid:cff57d7b-9965-58aa-a66a-0945ead1ed15", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88056 does not affect version 17.3.12-tuxcare.11 of @angular/benchpress. not_affected \u2014 Version 17.3.12 is not affected by CVE-2026-88056. The vulnerability involves String.prototype.trim() being applied during URL resolution in Angular's platform-server, converting validated same-origin URLs with Unicode whitespace into cross-origin protocol-relative URLs, leading to SSRF. This vulnerable code pattern was introduced in newer Angular versions (v20+) and does not exist in version 1...", "justification": "code_not_present" } }, { "id": "CVE-2026-88057", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@17.3.12-tuxcare.11" } ], "bom-ref": "urn:uuid:10ee8e82-bc93-5afd-8675-8ba732e32d0a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88057 affects version 17.3.12-tuxcare.11 of @angular/benchpress." } }, { "id": "CVE-2026-88059", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@17.3.12-tuxcare.11" } ], "bom-ref": "urn:uuid:57da70d9-a340-58d3-9082-db8b6f2feca6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88059 affects version 17.3.12-tuxcare.11 of @angular/benchpress." } }, { "id": "CVE-2026-88060", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@17.3.12-tuxcare.11" } ], "bom-ref": "urn:uuid:c3d22f06-ecd8-5a0d-ae2b-4d15fb5bdcad", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88060 affects version 17.3.12-tuxcare.11 of @angular/benchpress." } } ], "dependencies": [ { "ref": "pkg:npm/%40angular/benchpress@17.3.12-tuxcare.11" } ] }