{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:1c2cfcc6-0043-5154-99e3-5652419a5a7f", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@angular/benchpress", "purl": "pkg:npm/%40angular/benchpress@12.2.17-tuxcare.2", "type": "library", "bom-ref": "pkg:npm/%40angular/benchpress@12.2.17-tuxcare.2", "version": "12.2.17-tuxcare.2", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-66035", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@12.2.17-tuxcare.2" } ], "bom-ref": "urn:uuid:f557caee-5cf1-5315-8b51-4f8978af9634", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-66035 affects version 12.2.17-tuxcare.2 of @angular/benchpress, and is fixed in 12.2.17-tuxcare.8." } }, { "id": "CVE-2025-66412", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@12.2.17-tuxcare.2" } ], "bom-ref": "urn:uuid:6d4b4737-9234-50c7-8793-5568b87118f0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 12.2.17-tuxcare.2 of @angular/benchpress." } }, { "id": "CVE-2026-22610", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@12.2.17-tuxcare.2" } ], "bom-ref": "urn:uuid:6786c55b-299d-5310-8596-2d9d1051c396", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22610 affects version 12.2.17-tuxcare.2 of @angular/benchpress, and is fixed in 12.2.17-tuxcare.3." } }, { "id": "CVE-2026-27970", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@12.2.17-tuxcare.2" } ], "bom-ref": "urn:uuid:bc00d1c8-64cc-5daf-86a8-74b92c022f18", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-27970 affects version 12.2.17-tuxcare.2 of @angular/benchpress, and is fixed in 12.2.17-tuxcare.4." } }, { "id": "CVE-2026-46417", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@12.2.17-tuxcare.2" } ], "bom-ref": "urn:uuid:d6171031-47bb-5a67-a35a-b8b7d31b276d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-46417 affects version 12.2.17-tuxcare.2 of @angular/benchpress, and is fixed in 12.2.17-tuxcare.6." } }, { "id": "CVE-2026-50168", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@12.2.17-tuxcare.2" } ], "bom-ref": "urn:uuid:eb19b4da-0fdd-517e-a36a-b40f757a08f0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50168 affects version 12.2.17-tuxcare.2 of @angular/benchpress, and is fixed in 12.2.17-tuxcare.7." } }, { "id": "CVE-2026-50169", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@12.2.17-tuxcare.2" } ], "bom-ref": "urn:uuid:313b0055-e5c1-5e2a-a180-13d20cf3c861", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50169 affects version 12.2.17-tuxcare.2 of @angular/benchpress, and is fixed in 12.2.17-tuxcare.7." } }, { "id": "CVE-2026-50170", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@12.2.17-tuxcare.2" } ], "bom-ref": "urn:uuid:a836f5c0-4d34-545a-afdc-7d61e833b612", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50170 affects version 12.2.17-tuxcare.2 of @angular/benchpress, and is fixed in 12.2.17-tuxcare.7." } }, { "id": "CVE-2026-50171", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@12.2.17-tuxcare.2" } ], "bom-ref": "urn:uuid:aafcc42c-4648-5310-840d-b99aae49118a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50171 affects version 12.2.17-tuxcare.2 of @angular/benchpress, and is fixed in 12.2.17-tuxcare.7." } }, { "id": "CVE-2026-50184", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@12.2.17-tuxcare.2" } ], "bom-ref": "urn:uuid:3eb13035-2454-533e-8410-08c1478480d8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50184 affects version 12.2.17-tuxcare.2 of @angular/benchpress, and is fixed in 12.2.17-tuxcare.7." } }, { "id": "CVE-2026-50555", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@12.2.17-tuxcare.2" } ], "bom-ref": "urn:uuid:e7ecd6ee-bd11-5f0d-9873-5883c13ba6a2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50555 affects version 12.2.17-tuxcare.2 of @angular/benchpress, and is fixed in 12.2.17-tuxcare.7." } }, { "id": "CVE-2026-50556", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@12.2.17-tuxcare.2" } ], "bom-ref": "urn:uuid:0e4607c3-07dc-5eff-ab3c-3d6ed9ef4cd1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50556 affects version 12.2.17-tuxcare.2 of @angular/benchpress, and is fixed in 12.2.17-tuxcare.7." } }, { "id": "CVE-2026-50557", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@12.2.17-tuxcare.2" } ], "bom-ref": "urn:uuid:6b7c1046-213b-5f55-9e29-15333e32210a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50557 affects version 12.2.17-tuxcare.2 of @angular/benchpress, and is fixed in 12.2.17-tuxcare.7." } }, { "id": "CVE-2026-52725", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@12.2.17-tuxcare.2" } ], "bom-ref": "urn:uuid:8ecda0f8-a9ac-58a1-8206-df7177643601", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-52725 affects version 12.2.17-tuxcare.2 of @angular/benchpress, and is fixed in 12.2.17-tuxcare.7." } }, { "id": "CVE-2026-54264", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@12.2.17-tuxcare.2" } ], "bom-ref": "urn:uuid:4d806e4d-2a32-5f92-82e0-3c9f609258ad", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54264 affects version 12.2.17-tuxcare.2 of @angular/benchpress, and is fixed in 12.2.17-tuxcare.7." } }, { "id": "CVE-2026-54265", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@12.2.17-tuxcare.2" } ], "bom-ref": "urn:uuid:f4be042a-7228-5642-aeb3-3d3599773378", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54265 affects version 12.2.17-tuxcare.2 of @angular/benchpress, and is fixed in 12.2.17-tuxcare.7." } }, { "id": "CVE-2026-54266", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@12.2.17-tuxcare.2" } ], "bom-ref": "urn:uuid:f9a4915e-2298-5e45-b1bf-71694af943e8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54266 affects version 12.2.17-tuxcare.2 of @angular/benchpress, and is fixed in 12.2.17-tuxcare.7." } }, { "id": "CVE-2026-54267", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@12.2.17-tuxcare.2" } ], "bom-ref": "urn:uuid:e2c4b223-d3d2-53a8-8104-32e5b5f40c14", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54267 affects version 12.2.17-tuxcare.2 of @angular/benchpress, and is fixed in 12.2.17-tuxcare.7." } }, { "id": "CVE-2026-54268", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@12.2.17-tuxcare.2" } ], "bom-ref": "urn:uuid:88cae1b3-e2b6-55c1-9888-b916660a5dd7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54268 affects version 12.2.17-tuxcare.2 of @angular/benchpress, and is fixed in 12.2.17-tuxcare.7." } }, { "id": "CVE-2026-68945", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@12.2.17-tuxcare.2" } ], "bom-ref": "urn:uuid:3983f1fa-c84a-50f5-aabb-37d861fc38fd", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-68945 does not affect version 12.2.17-tuxcare.2 of @angular/benchpress. not_affected \u2014 Angular 12.2.17 does not contain the HttpTransferCache feature affected by CVE-2026-68945. HttpTransferCache, which caches HTTP requests during Server-Side Rendering (SSR), was first introduced in Angular 16.0.0\u2014approximately 4 major versions after the target version. The vulnerability concerns cache-key collision when repeated HTTP parameters are serialized, but since the entire HttpTransferCa...", "justification": "code_not_present" } }, { "id": "CVE-2026-69149", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@12.2.17-tuxcare.2" } ], "bom-ref": "urn:uuid:17f0ea07-8861-5e6f-b7d2-5af2099fb6b6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-69149 affects version 12.2.17-tuxcare.2 of @angular/benchpress, and is fixed in 12.2.17-tuxcare.9." } }, { "id": "CVE-2026-69151", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@12.2.17-tuxcare.2" } ], "bom-ref": "urn:uuid:a9a2eb66-be09-5968-8bf1-1c5eb8c58358", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-69151 affects version 12.2.17-tuxcare.2 of @angular/benchpress, and is fixed in 12.2.17-tuxcare.9." } }, { "id": "CVE-2026-88056", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@12.2.17-tuxcare.2" } ], "bom-ref": "urn:uuid:111c74f5-2bc2-50ef-84d0-d9b1fa71e5cd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88056 affects version 12.2.17-tuxcare.2 of @angular/benchpress." } }, { "id": "CVE-2026-88057", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@12.2.17-tuxcare.2" } ], "bom-ref": "urn:uuid:90a96ce2-7ae3-51b0-975d-cf950b00b12f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88057 affects version 12.2.17-tuxcare.2 of @angular/benchpress." } }, { "id": "CVE-2026-88059", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@12.2.17-tuxcare.2" } ], "bom-ref": "urn:uuid:9a3d4788-c7f8-5e4d-9ad0-152ad540ac30", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88059 does not affect version 12.2.17-tuxcare.2 of @angular/benchpress. not_affected \u2014 Angular 12.2.17-tuxcare.9 is not affected by CVE-2026-88059. The vulnerability requires HttpTransferCache, withRequestsMadeViaParent(), and provideClientHydration() features which were introduced in Angular 16.0.0. This version uses the older module-based HttpClientModule system and lacks the entire SSR hydration transfer-cache infrastructure. The vulnerable code pattern described in the CVE do...", "justification": "code_not_present" } }, { "id": "CVE-2026-88060", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@12.2.17-tuxcare.2" } ], "bom-ref": "urn:uuid:c7edc8ed-c98c-59e7-96c7-41d37c67d245", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88060 affects version 12.2.17-tuxcare.2 of @angular/benchpress." } } ], "dependencies": [ { "ref": "pkg:npm/%40angular/benchpress@12.2.17-tuxcare.2" } ] }