{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:fa01265b-c139-5744-89df-a7a145a67e28", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@angular/benchpress", "purl": "pkg:npm/%40angular/benchpress@18.2.14-tuxcare.10", "type": "library", "bom-ref": "pkg:npm/%40angular/benchpress@18.2.14-tuxcare.10", "version": "18.2.14-tuxcare.10", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-66035", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@18.2.14-tuxcare.10" } ], "bom-ref": "urn:uuid:abfc818e-237c-5712-a008-72088ac4aa22", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 18.2.14-tuxcare.10 of @angular/benchpress." } }, { "id": "CVE-2025-66412", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@18.2.14-tuxcare.10" } ], "bom-ref": "urn:uuid:5780b544-9d5f-5f4d-85b4-6de93c037204", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 18.2.14-tuxcare.10 of @angular/benchpress." } }, { "id": "CVE-2026-22610", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@18.2.14-tuxcare.10" } ], "bom-ref": "urn:uuid:929cea0c-c2f2-54c3-94d6-0cb6f07a3907", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22610 is fixed in version 18.2.14-tuxcare.10 of @angular/benchpress." } }, { "id": "CVE-2026-27970", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@18.2.14-tuxcare.10" } ], "bom-ref": "urn:uuid:068dde16-930d-55b5-aa4f-9eba365a5b72", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27970 is fixed in version 18.2.14-tuxcare.10 of @angular/benchpress." } }, { "id": "CVE-2026-32635", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@18.2.14-tuxcare.10" } ], "bom-ref": "urn:uuid:609bcaa8-0fe0-5ca8-a1bc-094a7e1b053d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-32635 is fixed in version 18.2.14-tuxcare.10 of @angular/benchpress." } }, { "id": "CVE-2026-46417", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@18.2.14-tuxcare.10" } ], "bom-ref": "urn:uuid:85a3e50b-2417-56e2-8c09-4aad46c7bba6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46417 is fixed in version 18.2.14-tuxcare.10 of @angular/benchpress." } }, { "id": "CVE-2026-50168", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@18.2.14-tuxcare.10" } ], "bom-ref": "urn:uuid:a232063c-5fc3-589c-8f7b-c27aabc37394", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50168 affects version 18.2.14-tuxcare.10 of @angular/benchpress, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-50169", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@18.2.14-tuxcare.10" } ], "bom-ref": "urn:uuid:caf4c67a-e4c4-5a41-8774-ea214af3eeb9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50169 affects version 18.2.14-tuxcare.10 of @angular/benchpress, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-50170", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@18.2.14-tuxcare.10" } ], "bom-ref": "urn:uuid:a9f8810a-2f77-527c-b989-87a83874e0d9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50170 affects version 18.2.14-tuxcare.10 of @angular/benchpress, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-50171", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@18.2.14-tuxcare.10" } ], "bom-ref": "urn:uuid:eb2157f8-1117-551d-8241-59c7ba2006ed", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50171 affects version 18.2.14-tuxcare.10 of @angular/benchpress, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-50184", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@18.2.14-tuxcare.10" } ], "bom-ref": "urn:uuid:2cc90ba4-7a37-5aa9-876d-da7e5cbf3e41", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50184 affects version 18.2.14-tuxcare.10 of @angular/benchpress, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-50555", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@18.2.14-tuxcare.10" } ], "bom-ref": "urn:uuid:1bc3b265-cc75-5e0e-aa5d-77e9d572e987", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50555 affects version 18.2.14-tuxcare.10 of @angular/benchpress, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-50556", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@18.2.14-tuxcare.10" } ], "bom-ref": "urn:uuid:c2781e75-19b9-51e3-acbe-9eedb090d533", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50556 affects version 18.2.14-tuxcare.10 of @angular/benchpress, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-50557", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@18.2.14-tuxcare.10" } ], "bom-ref": "urn:uuid:2d129c9d-14a8-5774-ad51-ef97e8efc366", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50557 affects version 18.2.14-tuxcare.10 of @angular/benchpress, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-52725", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@18.2.14-tuxcare.10" } ], "bom-ref": "urn:uuid:b850b622-69f1-54d8-a900-acec7dac2202", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-52725 affects version 18.2.14-tuxcare.10 of @angular/benchpress, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-54264", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@18.2.14-tuxcare.10" } ], "bom-ref": "urn:uuid:0c519972-eeee-52f0-b6cb-f197d2790986", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54264 affects version 18.2.14-tuxcare.10 of @angular/benchpress, and is fixed in 18.2.14-tuxcare.12." } }, { "id": "CVE-2026-54265", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@18.2.14-tuxcare.10" } ], "bom-ref": "urn:uuid:dfa8cc2d-9a86-54ae-8847-5425e42e1f83", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54265 affects version 18.2.14-tuxcare.10 of @angular/benchpress, and is fixed in 18.2.14-tuxcare.12." } }, { "id": "CVE-2026-54266", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@18.2.14-tuxcare.10" } ], "bom-ref": "urn:uuid:32c2dab2-7350-5ead-a274-a834b98513b3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54266 affects version 18.2.14-tuxcare.10 of @angular/benchpress, and is fixed in 18.2.14-tuxcare.12." } }, { "id": "CVE-2026-54267", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@18.2.14-tuxcare.10" } ], "bom-ref": "urn:uuid:38f18744-c23e-51a9-83e7-1c586effbc8c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54267 affects version 18.2.14-tuxcare.10 of @angular/benchpress, and is fixed in 18.2.14-tuxcare.12." } }, { "id": "CVE-2026-54268", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@18.2.14-tuxcare.10" } ], "bom-ref": "urn:uuid:70eb0cd8-9724-56a1-bb3a-b7d47c8da44a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54268 affects version 18.2.14-tuxcare.10 of @angular/benchpress, and is fixed in 18.2.14-tuxcare.12." } }, { "id": "CVE-2026-68945", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@18.2.14-tuxcare.10" } ], "bom-ref": "urn:uuid:0c2c9278-24c1-5925-8eae-955a1c24e76c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-68945 affects version 18.2.14-tuxcare.10 of @angular/benchpress, and is fixed in 18.2.14-tuxcare.13." } }, { "id": "CVE-2026-69149", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@18.2.14-tuxcare.10" } ], "bom-ref": "urn:uuid:aac980ef-af3d-53b7-ab2a-a38cc9c59dbc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-69149 affects version 18.2.14-tuxcare.10 of @angular/benchpress, and is fixed in 18.2.14-tuxcare.13." } }, { "id": "CVE-2026-69151", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@18.2.14-tuxcare.10" } ], "bom-ref": "urn:uuid:75e2fb05-758e-58c7-a89f-a76441c5b6a3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-69151 affects version 18.2.14-tuxcare.10 of @angular/benchpress, and is fixed in 18.2.14-tuxcare.13." } }, { "id": "CVE-2026-88056", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@18.2.14-tuxcare.10" } ], "bom-ref": "urn:uuid:a1738bd6-09c7-550e-859f-b40d149a9168", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88056 does not affect version 18.2.14-tuxcare.10 of @angular/benchpress. not_affected \u2014 The target version 18.2.14-tuxcare.13 is NOT affected by CVE-2026-88056. The vulnerable code pattern (calling String.prototype.trim() on URL strings before resolution) was never present in this version. The target uses a refactored parseUrl() implementation introduced via commit 49a60f6045 (May 2026) that correctly handles Unicode whitespace by percent-encoding it rather than stripping it, main...", "justification": "code_not_present" } }, { "id": "CVE-2026-88057", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@18.2.14-tuxcare.10" } ], "bom-ref": "urn:uuid:50ef3c9a-13ed-5f89-ad7d-b047595bf78c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88057 affects version 18.2.14-tuxcare.10 of @angular/benchpress." } }, { "id": "CVE-2026-88059", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@18.2.14-tuxcare.10" } ], "bom-ref": "urn:uuid:de1f9956-edfa-595e-986f-cfa6011d0817", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88059 affects version 18.2.14-tuxcare.10 of @angular/benchpress." } }, { "id": "CVE-2026-88060", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@18.2.14-tuxcare.10" } ], "bom-ref": "urn:uuid:f1e4175c-d29e-525b-a807-0566c04faa1a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88060 affects version 18.2.14-tuxcare.10 of @angular/benchpress." } } ], "dependencies": [ { "ref": "pkg:npm/%40angular/benchpress@18.2.14-tuxcare.10" } ] }