{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:21b933f9-1e78-5bdf-8c78-238ad5b89982", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:npm/%40angular/benchpress@5.2.11-tuxcare.15", "type": "library", "name": "@angular/benchpress", "version": "5.2.11-tuxcare.15", "purl": "pkg:npm/%40angular/benchpress@5.2.11-tuxcare.15" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:ad07e5e0-78f5-5dfa-a20e-aba0fe905e54", "id": "CVE-2021-4231", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-4231 is fixed in version 5.2.11-tuxcare.15 of @angular/benchpress." }, "affects": [ { "ref": "pkg:npm/%40angular/benchpress@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:ebbce679-76d2-5624-82de-1d5a32130781", "id": "CVE-2025-66035", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 5.2.11-tuxcare.15 of @angular/benchpress." }, "affects": [ { "ref": "pkg:npm/%40angular/benchpress@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:09e306af-1ca6-5810-b644-3924526f21f1", "id": "CVE-2025-66412", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 5.2.11-tuxcare.15 of @angular/benchpress." }, "affects": [ { "ref": "pkg:npm/%40angular/benchpress@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:2ab1d432-4bdb-5aed-85a1-f4dd77d68666", "id": "CVE-2026-22610", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22610 is fixed in version 5.2.11-tuxcare.15 of @angular/benchpress." }, "affects": [ { "ref": "pkg:npm/%40angular/benchpress@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:a1595caa-899e-5878-91ce-378eb117d25a", "id": "CVE-2026-27970", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27970 is fixed in version 5.2.11-tuxcare.15 of @angular/benchpress." }, "affects": [ { "ref": "pkg:npm/%40angular/benchpress@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:09492074-4dfa-5d1f-898c-a2112dd3f695", "id": "CVE-2026-41423", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41423 is fixed in version 5.2.11-tuxcare.15 of @angular/benchpress." }, "affects": [ { "ref": "pkg:npm/%40angular/benchpress@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:106e213d-1a7b-5e38-90bd-8d12231d0ab5", "id": "CVE-2026-46417", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46417 is fixed in version 5.2.11-tuxcare.15 of @angular/benchpress." }, "affects": [ { "ref": "pkg:npm/%40angular/benchpress@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:b3afef3c-c15b-590c-8bb5-846f6a703016", "id": "CVE-2026-50168", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50168 is fixed in version 5.2.11-tuxcare.15 of @angular/benchpress." }, "affects": [ { "ref": "pkg:npm/%40angular/benchpress@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:8dd4d5fe-db4c-5170-874d-fd8233988a08", "id": "CVE-2026-50169", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50169 is fixed in version 5.2.11-tuxcare.15 of @angular/benchpress." }, "affects": [ { "ref": "pkg:npm/%40angular/benchpress@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:ddbb5e8d-797e-5bca-8989-a91edc77e70c", "id": "CVE-2026-50170", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50170 is fixed in version 5.2.11-tuxcare.15 of @angular/benchpress." }, "affects": [ { "ref": "pkg:npm/%40angular/benchpress@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:a83dbdab-2f48-5921-9379-974f4878cb2c", "id": "CVE-2026-50171", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50171 is fixed in version 5.2.11-tuxcare.15 of @angular/benchpress." }, "affects": [ { "ref": "pkg:npm/%40angular/benchpress@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:2ae739d4-6b30-5068-a774-4e539d82b4ab", "id": "CVE-2026-50184", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50184 is fixed in version 5.2.11-tuxcare.15 of @angular/benchpress." }, "affects": [ { "ref": "pkg:npm/%40angular/benchpress@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:9d999625-fb67-5ee9-8963-0fd270a6a508", "id": "CVE-2026-50555", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50555 is fixed in version 5.2.11-tuxcare.15 of @angular/benchpress." }, "affects": [ { "ref": "pkg:npm/%40angular/benchpress@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:6a351ea8-0a40-5bc8-aa60-aafe05b80c85", "id": "CVE-2026-50556", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50556 is fixed in version 5.2.11-tuxcare.15 of @angular/benchpress." }, "affects": [ { "ref": "pkg:npm/%40angular/benchpress@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:ea85c624-8665-547e-b589-13931de92083", "id": "CVE-2026-50557", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50557 is fixed in version 5.2.11-tuxcare.15 of @angular/benchpress." }, "affects": [ { "ref": "pkg:npm/%40angular/benchpress@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:b08c62f3-f86d-54d8-a049-140eacfa06fc", "id": "CVE-2026-52725", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-52725 is fixed in version 5.2.11-tuxcare.15 of @angular/benchpress." }, "affects": [ { "ref": "pkg:npm/%40angular/benchpress@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:5ea6e08f-1cbb-5bb0-8421-132d833e238c", "id": "CVE-2026-54264", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54264 is fixed in version 5.2.11-tuxcare.15 of @angular/benchpress." }, "affects": [ { "ref": "pkg:npm/%40angular/benchpress@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:a8b753e6-21e2-5219-a3d7-c497035676f1", "id": "CVE-2026-54265", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54265 is fixed in version 5.2.11-tuxcare.15 of @angular/benchpress." }, "affects": [ { "ref": "pkg:npm/%40angular/benchpress@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:5f507219-2042-51de-9f9b-7136d87b7a85", "id": "CVE-2026-54266", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54266 is fixed in version 5.2.11-tuxcare.15 of @angular/benchpress." }, "affects": [ { "ref": "pkg:npm/%40angular/benchpress@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:286de1ef-00fd-5660-acc5-fff6a081e168", "id": "CVE-2026-54267", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54267 is fixed in version 5.2.11-tuxcare.15 of @angular/benchpress." }, "affects": [ { "ref": "pkg:npm/%40angular/benchpress@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:dfa41a13-12f1-5074-834d-43871221c296", "id": "CVE-2026-54268", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54268 is fixed in version 5.2.11-tuxcare.15 of @angular/benchpress." }, "affects": [ { "ref": "pkg:npm/%40angular/benchpress@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:4879b7fa-af67-5aa6-9e1b-14a85bb404de", "id": "CVE-2026-68945", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-68945 does not affect version 5.2.11-tuxcare.15 of @angular/benchpress. not_affected \u2014 Angular 5.2.11 is NOT affected by CVE-2026-68945. The vulnerable component `HttpTransferCache` does not exist in this version. This feature was introduced in Angular v16 as part of the modern SSR hydration system. Angular 5.2.11 only has the basic `TransferState` API (a generic key-value store for manual state transfer), not the automatic HTTP request caching interceptor that contains the vulne..." }, "affects": [ { "ref": "pkg:npm/%40angular/benchpress@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:7bd6eb2c-289a-5bf1-aa99-03908463fbc3", "id": "CVE-2026-69149", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69149 is fixed in version 5.2.11-tuxcare.15 of @angular/benchpress." }, "affects": [ { "ref": "pkg:npm/%40angular/benchpress@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:64609bd9-bba2-5377-8994-ccd027330179", "id": "CVE-2026-69151", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69151 is fixed in version 5.2.11-tuxcare.15 of @angular/benchpress." }, "affects": [ { "ref": "pkg:npm/%40angular/benchpress@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:2b2c87a0-c311-5b18-be8e-629fb0794591", "id": "CVE-2026-88056", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88056 does not affect version 5.2.11-tuxcare.15 of @angular/benchpress. not_affected \u2014 Angular 5.2.11-tuxcare.19 does not contain the vulnerable URL resolution code pattern described in CVE-2026-88056. The vulnerability requires the url.ts file with parseUrl function calling String.prototype.trim() and the relativeUrlsTransformerInterceptorFn HTTP interceptor, both introduced in later Angular versions (post-June 2026). The target version uses a fundamentally different architectur..." }, "affects": [ { "ref": "pkg:npm/%40angular/benchpress@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:c8f2941c-060c-58cc-8810-01d4c5908475", "id": "CVE-2026-88057", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88057 affects version 5.2.11-tuxcare.15 of @angular/benchpress." }, "affects": [ { "ref": "pkg:npm/%40angular/benchpress@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:a9965853-54ea-5505-b7ce-629c26c699fa", "id": "CVE-2026-88059", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88059 does not affect version 5.2.11-tuxcare.15 of @angular/benchpress. not_affected \u2014 Angular 5.2.11 is NOT AFFECTED by CVE-2026-88059. The vulnerability requires HttpTransferCache with hierarchical HttpClient delegation (withRequestsMadeViaParent()), features that were introduced in Angular v16. Angular 5.2.11 predates these features by approximately 6+ years and contains only a basic HTTP interceptor architecture with no automatic response caching mechanism. While TransferStat..." }, "affects": [ { "ref": "pkg:npm/%40angular/benchpress@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:b2d57ca9-5946-5791-a6a9-dc7bb70ddbdf", "id": "CVE-2026-88060", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88060 affects version 5.2.11-tuxcare.15 of @angular/benchpress." }, "affects": [ { "ref": "pkg:npm/%40angular/benchpress@5.2.11-tuxcare.15" } ] } ], "dependencies": [ { "ref": "pkg:npm/%40angular/benchpress@5.2.11-tuxcare.15" } ] }