{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:81782e2b-1ba1-55ad-b2ab-23016cc8e3b9", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@angular/benchpress", "purl": "pkg:npm/%40angular/benchpress@18.2.14-tuxcare.11", "type": "library", "bom-ref": "pkg:npm/%40angular/benchpress@18.2.14-tuxcare.11", "version": "18.2.14-tuxcare.11", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-66035", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@18.2.14-tuxcare.11" } ], "bom-ref": "urn:uuid:33024ae4-3ed0-5cd9-93ef-72bdb0c651a7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 18.2.14-tuxcare.11 of @angular/benchpress." } }, { "id": "CVE-2025-66412", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@18.2.14-tuxcare.11" } ], "bom-ref": "urn:uuid:3bb89624-2c1a-506b-9a6b-5a6a6cdcdadb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 18.2.14-tuxcare.11 of @angular/benchpress." } }, { "id": "CVE-2026-22610", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@18.2.14-tuxcare.11" } ], "bom-ref": "urn:uuid:809828e2-1c84-5d90-a0b7-74f056b26fe9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22610 is fixed in version 18.2.14-tuxcare.11 of @angular/benchpress." } }, { "id": "CVE-2026-27970", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@18.2.14-tuxcare.11" } ], "bom-ref": "urn:uuid:32cf1df6-e952-527e-a77b-9355a5883f18", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27970 is fixed in version 18.2.14-tuxcare.11 of @angular/benchpress." } }, { "id": "CVE-2026-32635", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@18.2.14-tuxcare.11" } ], "bom-ref": "urn:uuid:30359df8-e676-5d92-830c-0815fdac54c0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-32635 is fixed in version 18.2.14-tuxcare.11 of @angular/benchpress." } }, { "id": "CVE-2026-46417", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@18.2.14-tuxcare.11" } ], "bom-ref": "urn:uuid:27bf031a-d011-59f9-aca9-b27abddd4fa7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46417 is fixed in version 18.2.14-tuxcare.11 of @angular/benchpress." } }, { "id": "CVE-2026-50168", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@18.2.14-tuxcare.11" } ], "bom-ref": "urn:uuid:0b19154a-9b61-56e4-8fab-da55807936c9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50168 is fixed in version 18.2.14-tuxcare.11 of @angular/benchpress." } }, { "id": "CVE-2026-50169", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@18.2.14-tuxcare.11" } ], "bom-ref": "urn:uuid:fc98e3a9-a46a-5ed7-82b9-ea623dfac10b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50169 is fixed in version 18.2.14-tuxcare.11 of @angular/benchpress." } }, { "id": "CVE-2026-50170", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@18.2.14-tuxcare.11" } ], "bom-ref": "urn:uuid:8cc5b08e-e03c-50c4-a0a5-7f5e41227f1e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50170 is fixed in version 18.2.14-tuxcare.11 of @angular/benchpress." } }, { "id": "CVE-2026-50171", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@18.2.14-tuxcare.11" } ], "bom-ref": "urn:uuid:b9e9bf7f-5450-584f-af47-59287205994a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50171 is fixed in version 18.2.14-tuxcare.11 of @angular/benchpress." } }, { "id": "CVE-2026-50184", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@18.2.14-tuxcare.11" } ], "bom-ref": "urn:uuid:27fb6939-1788-507c-9f04-a22d497ca874", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50184 is fixed in version 18.2.14-tuxcare.11 of @angular/benchpress." } }, { "id": "CVE-2026-50555", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@18.2.14-tuxcare.11" } ], "bom-ref": "urn:uuid:41f06127-c060-5d73-b167-9d686a4f9c8c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50555 is fixed in version 18.2.14-tuxcare.11 of @angular/benchpress." } }, { "id": "CVE-2026-50556", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@18.2.14-tuxcare.11" } ], "bom-ref": "urn:uuid:1139ca8b-90b0-593a-aae3-f2110a3aca77", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50556 is fixed in version 18.2.14-tuxcare.11 of @angular/benchpress." } }, { "id": "CVE-2026-50557", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@18.2.14-tuxcare.11" } ], "bom-ref": "urn:uuid:59bf8643-02c1-53f4-ab82-281cb5497c2d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50557 is fixed in version 18.2.14-tuxcare.11 of @angular/benchpress." } }, { "id": "CVE-2026-52725", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@18.2.14-tuxcare.11" } ], "bom-ref": "urn:uuid:431ce1b6-441a-54ae-b84d-6f74f8407d5d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-52725 is fixed in version 18.2.14-tuxcare.11 of @angular/benchpress." } }, { "id": "CVE-2026-54264", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@18.2.14-tuxcare.11" } ], "bom-ref": "urn:uuid:d4d447ec-38b8-5e1c-aa30-e029794a1670", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54264 affects version 18.2.14-tuxcare.11 of @angular/benchpress, and is fixed in 18.2.14-tuxcare.12." } }, { "id": "CVE-2026-54265", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@18.2.14-tuxcare.11" } ], "bom-ref": "urn:uuid:34ea3844-55d7-5afd-8ad9-30c4f2dffef7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54265 affects version 18.2.14-tuxcare.11 of @angular/benchpress, and is fixed in 18.2.14-tuxcare.12." } }, { "id": "CVE-2026-54266", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@18.2.14-tuxcare.11" } ], "bom-ref": "urn:uuid:b0bfa83b-3943-5d20-8161-508d1dd7d5ed", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54266 affects version 18.2.14-tuxcare.11 of @angular/benchpress, and is fixed in 18.2.14-tuxcare.12." } }, { "id": "CVE-2026-54267", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@18.2.14-tuxcare.11" } ], "bom-ref": "urn:uuid:6ffee6cb-474c-5924-b6d5-2d387c083a18", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54267 affects version 18.2.14-tuxcare.11 of @angular/benchpress, and is fixed in 18.2.14-tuxcare.12." } }, { "id": "CVE-2026-54268", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@18.2.14-tuxcare.11" } ], "bom-ref": "urn:uuid:e69c5638-30e1-5bed-af17-b836871f76cf", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54268 affects version 18.2.14-tuxcare.11 of @angular/benchpress, and is fixed in 18.2.14-tuxcare.12." } }, { "id": "CVE-2026-68945", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@18.2.14-tuxcare.11" } ], "bom-ref": "urn:uuid:73712adc-adad-595f-a780-1342a8921d20", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-68945 affects version 18.2.14-tuxcare.11 of @angular/benchpress, and is fixed in 18.2.14-tuxcare.13." } }, { "id": "CVE-2026-69149", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@18.2.14-tuxcare.11" } ], "bom-ref": "urn:uuid:de3facba-7dab-530a-99c7-b5b7b040899d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-69149 affects version 18.2.14-tuxcare.11 of @angular/benchpress, and is fixed in 18.2.14-tuxcare.13." } }, { "id": "CVE-2026-69151", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@18.2.14-tuxcare.11" } ], "bom-ref": "urn:uuid:6e273376-b0b1-56fe-8ace-b511647fbbdd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-69151 affects version 18.2.14-tuxcare.11 of @angular/benchpress, and is fixed in 18.2.14-tuxcare.13." } }, { "id": "CVE-2026-88056", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@18.2.14-tuxcare.11" } ], "bom-ref": "urn:uuid:5fb1bed0-14de-58e3-90a8-058577a2e5e3", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88056 does not affect version 18.2.14-tuxcare.11 of @angular/benchpress. not_affected \u2014 The target version 18.2.14-tuxcare.13 is NOT affected by CVE-2026-88056. The vulnerable code pattern (calling String.prototype.trim() on URL strings before resolution) was never present in this version. The target uses a refactored parseUrl() implementation introduced via commit 49a60f6045 (May 2026) that correctly handles Unicode whitespace by percent-encoding it rather than stripping it, main...", "justification": "code_not_present" } }, { "id": "CVE-2026-88057", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@18.2.14-tuxcare.11" } ], "bom-ref": "urn:uuid:3b89ed83-bc53-58c6-8986-44c384d7b450", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88057 affects version 18.2.14-tuxcare.11 of @angular/benchpress." } }, { "id": "CVE-2026-88059", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@18.2.14-tuxcare.11" } ], "bom-ref": "urn:uuid:a5b3e9f1-13c1-5673-99e2-df52cdd5b3ce", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88059 affects version 18.2.14-tuxcare.11 of @angular/benchpress." } }, { "id": "CVE-2026-88060", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@18.2.14-tuxcare.11" } ], "bom-ref": "urn:uuid:96e218e0-0d7d-582a-b67b-a0deff3c0b1f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88060 affects version 18.2.14-tuxcare.11 of @angular/benchpress." } } ], "dependencies": [ { "ref": "pkg:npm/%40angular/benchpress@18.2.14-tuxcare.11" } ] }