{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:ae9902fd-8bc3-5e75-9096-6292cd6c2930", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@angular/benchpress", "purl": "pkg:npm/%40angular/benchpress@18.2.14-tuxcare.17", "type": "library", "bom-ref": "pkg:npm/%40angular/benchpress@18.2.14-tuxcare.17", "version": "18.2.14-tuxcare.17", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-66035", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:ffda48f7-7ad9-5512-bbb8-38a4a50e8ad3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 18.2.14-tuxcare.17 of @angular/benchpress." } }, { "id": "CVE-2025-66412", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:384f6cbf-0bcd-506d-8bf9-49e23a2e6165", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 18.2.14-tuxcare.17 of @angular/benchpress." } }, { "id": "CVE-2026-101895", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:9b14ce83-3f0c-5977-9fa7-e2d00dc993c8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-101895 is fixed in version 18.2.14-tuxcare.17 of @angular/benchpress." } }, { "id": "CVE-2026-101896", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:2b6d6d9b-d5f6-5e61-aabf-34bd4ffd9529", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101896 affects version 18.2.14-tuxcare.17 of @angular/benchpress." } }, { "id": "CVE-2026-22610", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:a39d629e-02ab-5fe4-a314-d9d97624c6ab", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22610 is fixed in version 18.2.14-tuxcare.17 of @angular/benchpress." } }, { "id": "CVE-2026-27970", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:c88d41a9-55ca-5e40-bd7d-43a53f274030", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27970 is fixed in version 18.2.14-tuxcare.17 of @angular/benchpress." } }, { "id": "CVE-2026-32635", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:fc2ba6ae-22ca-5d20-ac47-ea20ff086459", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-32635 is fixed in version 18.2.14-tuxcare.17 of @angular/benchpress." } }, { "id": "CVE-2026-46417", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:eae982a7-270d-54f5-bd8f-10c60aef3da0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46417 is fixed in version 18.2.14-tuxcare.17 of @angular/benchpress." } }, { "id": "CVE-2026-50168", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:d249d307-86ce-5a36-be5b-d70bb54a2108", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50168 is fixed in version 18.2.14-tuxcare.17 of @angular/benchpress." } }, { "id": "CVE-2026-50169", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:93572915-dde2-5465-ba16-45b20c25fd74", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50169 is fixed in version 18.2.14-tuxcare.17 of @angular/benchpress." } }, { "id": "CVE-2026-50170", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:4b8e6bb7-7a60-5aad-9540-2de737c67618", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50170 is fixed in version 18.2.14-tuxcare.17 of @angular/benchpress." } }, { "id": "CVE-2026-50171", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:f60efdeb-fed8-5c8e-98f3-6fe053d21aaa", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50171 is fixed in version 18.2.14-tuxcare.17 of @angular/benchpress." } }, { "id": "CVE-2026-50184", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:afe633cb-9fe8-5d69-afd7-2e0679862df9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50184 is fixed in version 18.2.14-tuxcare.17 of @angular/benchpress." } }, { "id": "CVE-2026-50555", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:8942a509-beca-5591-8642-49f4c07f84fe", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50555 is fixed in version 18.2.14-tuxcare.17 of @angular/benchpress." } }, { "id": "CVE-2026-50556", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:7e18dd9d-cc55-51c6-8f0a-3ca1b9e4d641", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50556 is fixed in version 18.2.14-tuxcare.17 of @angular/benchpress." } }, { "id": "CVE-2026-50557", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:2b1b6c6f-394f-523b-960a-1b3d0e074a49", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50557 is fixed in version 18.2.14-tuxcare.17 of @angular/benchpress." } }, { "id": "CVE-2026-52725", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:55883482-3412-5bd0-aa7d-b70763d8973f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-52725 is fixed in version 18.2.14-tuxcare.17 of @angular/benchpress." } }, { "id": "CVE-2026-54264", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:2d060130-9a6c-5397-9375-50389e81f463", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54264 is fixed in version 18.2.14-tuxcare.17 of @angular/benchpress." } }, { "id": "CVE-2026-54265", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:9eaadc42-91ac-55c3-92b4-c89075eb18af", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54265 is fixed in version 18.2.14-tuxcare.17 of @angular/benchpress." } }, { "id": "CVE-2026-54266", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:d5590817-02c9-52b6-8116-ecc2f2d4fe7d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54266 is fixed in version 18.2.14-tuxcare.17 of @angular/benchpress." } }, { "id": "CVE-2026-54267", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:a30f166a-9e1a-5c40-8481-778b5f069c2f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54267 is fixed in version 18.2.14-tuxcare.17 of @angular/benchpress." } }, { "id": "CVE-2026-54268", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:924e1303-0fdc-508b-b784-d31b732030a6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54268 is fixed in version 18.2.14-tuxcare.17 of @angular/benchpress." } }, { "id": "CVE-2026-68945", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:ce24d37a-f468-5139-9f3a-6ed04ecd16ec", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-68945 is fixed in version 18.2.14-tuxcare.17 of @angular/benchpress." } }, { "id": "CVE-2026-69149", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:3e41ca51-b058-5438-afe9-d37d37d3d0ec", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69149 is fixed in version 18.2.14-tuxcare.17 of @angular/benchpress." } }, { "id": "CVE-2026-69151", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:a1037ec3-8bbf-5793-a6c2-f0a9185cb809", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69151 is fixed in version 18.2.14-tuxcare.17 of @angular/benchpress." } }, { "id": "CVE-2026-88056", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:1d3e4c70-a49d-5afe-b5c6-860e53f46968", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88056 does not affect version 18.2.14-tuxcare.17 of @angular/benchpress. not_affected \u2014 The target version 18.2.14-tuxcare.13 is NOT affected by CVE-2026-88056. The vulnerable code pattern (calling String.prototype.trim() on URL strings before resolution) was never present in this version. The target uses a refactored parseUrl() implementation introduced via commit 49a60f6045 (May 2026) that correctly handles Unicode whitespace by percent-encoding it rather than stripping it, main...", "justification": "code_not_present" } }, { "id": "CVE-2026-88057", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:532829fd-83e0-50b6-89b7-76d532d24190", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88057 is fixed in version 18.2.14-tuxcare.17 of @angular/benchpress." } }, { "id": "CVE-2026-88058", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:6ae86b0f-99fa-58b8-817d-d120ed936ac2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88058 is fixed in version 18.2.14-tuxcare.17 of @angular/benchpress." } }, { "id": "CVE-2026-88059", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:97a905db-1565-5340-bc6d-687520e27078", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88059 is fixed in version 18.2.14-tuxcare.17 of @angular/benchpress." } }, { "id": "CVE-2026-88060", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:9e226f12-02b4-520f-ab17-4accc828cd18", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88060 is fixed in version 18.2.14-tuxcare.17 of @angular/benchpress." } } ], "dependencies": [ { "ref": "pkg:npm/%40angular/benchpress@18.2.14-tuxcare.17" } ] }