{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:38fef72d-11e9-5ac7-8421-1893fea1d7df", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:npm/%40angular/benchpress@5.2.11-tuxcare.16", "type": "library", "name": "@angular/benchpress", "version": "5.2.11-tuxcare.16", "purl": "pkg:npm/%40angular/benchpress@5.2.11-tuxcare.16" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:c504ed92-3095-5ff8-8684-d2c6cbb2ffad", "id": "CVE-2021-4231", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-4231 is fixed in version 5.2.11-tuxcare.16 of @angular/benchpress." }, "affects": [ { "ref": "pkg:npm/%40angular/benchpress@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:24047ac7-bf30-50b3-8add-caebf8ff1b60", "id": "CVE-2025-66035", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 5.2.11-tuxcare.16 of @angular/benchpress." }, "affects": [ { "ref": "pkg:npm/%40angular/benchpress@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:6c32feea-388d-5500-b892-e5f417c403d7", "id": "CVE-2025-66412", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 5.2.11-tuxcare.16 of @angular/benchpress." }, "affects": [ { "ref": "pkg:npm/%40angular/benchpress@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:f24ef16b-930c-5199-bf3c-ff6bbde3a6f2", "id": "CVE-2026-22610", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22610 is fixed in version 5.2.11-tuxcare.16 of @angular/benchpress." }, "affects": [ { "ref": "pkg:npm/%40angular/benchpress@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:7f6477c7-540a-595f-8ee1-0584eb9e779f", "id": "CVE-2026-27970", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27970 is fixed in version 5.2.11-tuxcare.16 of @angular/benchpress." }, "affects": [ { "ref": "pkg:npm/%40angular/benchpress@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:b76893af-cd6d-50c7-b62e-1d6254c73e36", "id": "CVE-2026-41423", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41423 is fixed in version 5.2.11-tuxcare.16 of @angular/benchpress." }, "affects": [ { "ref": "pkg:npm/%40angular/benchpress@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:efa03613-0d73-591a-be53-0177e9b2c479", "id": "CVE-2026-46417", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46417 is fixed in version 5.2.11-tuxcare.16 of @angular/benchpress." }, "affects": [ { "ref": "pkg:npm/%40angular/benchpress@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:176b288e-4d7c-55ec-a183-a9eee196d086", "id": "CVE-2026-50168", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50168 is fixed in version 5.2.11-tuxcare.16 of @angular/benchpress." }, "affects": [ { "ref": "pkg:npm/%40angular/benchpress@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:a9855b24-daba-58a6-b487-c8ef12fc6485", "id": "CVE-2026-50169", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50169 is fixed in version 5.2.11-tuxcare.16 of @angular/benchpress." }, "affects": [ { "ref": "pkg:npm/%40angular/benchpress@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:9b600b66-1889-5ae5-8efb-de46676768c5", "id": "CVE-2026-50170", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50170 is fixed in version 5.2.11-tuxcare.16 of @angular/benchpress." }, "affects": [ { "ref": "pkg:npm/%40angular/benchpress@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:dead5d4e-e69f-52c6-b7ad-bc9e7aaf65d8", "id": "CVE-2026-50171", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50171 is fixed in version 5.2.11-tuxcare.16 of @angular/benchpress." }, "affects": [ { "ref": "pkg:npm/%40angular/benchpress@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:38b03068-bf40-5169-8e6d-4e08c425313e", "id": "CVE-2026-50184", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50184 is fixed in version 5.2.11-tuxcare.16 of @angular/benchpress." }, "affects": [ { "ref": "pkg:npm/%40angular/benchpress@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:1483546d-8d55-581e-9b3e-c061a9e59965", "id": "CVE-2026-50555", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50555 is fixed in version 5.2.11-tuxcare.16 of @angular/benchpress." }, "affects": [ { "ref": "pkg:npm/%40angular/benchpress@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:0d9bb135-0d45-5e14-bc85-398fd4c3f22d", "id": "CVE-2026-50556", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50556 is fixed in version 5.2.11-tuxcare.16 of @angular/benchpress." }, "affects": [ { "ref": "pkg:npm/%40angular/benchpress@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:48cb36f6-3f12-515d-bb2a-0e11ae6f4d6a", "id": "CVE-2026-50557", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50557 is fixed in version 5.2.11-tuxcare.16 of @angular/benchpress." }, "affects": [ { "ref": "pkg:npm/%40angular/benchpress@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:a9d3540a-43cf-56ff-bc64-6a657f62feec", "id": "CVE-2026-52725", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-52725 is fixed in version 5.2.11-tuxcare.16 of @angular/benchpress." }, "affects": [ { "ref": "pkg:npm/%40angular/benchpress@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:2120eb62-84e8-5e20-a561-7dec76c13822", "id": "CVE-2026-54264", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54264 is fixed in version 5.2.11-tuxcare.16 of @angular/benchpress." }, "affects": [ { "ref": "pkg:npm/%40angular/benchpress@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:6aac7398-1fe6-5cd8-9e51-267419806120", "id": "CVE-2026-54265", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54265 is fixed in version 5.2.11-tuxcare.16 of @angular/benchpress." }, "affects": [ { "ref": "pkg:npm/%40angular/benchpress@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:21138e97-ca1d-5e92-aa5a-371063c272c8", "id": "CVE-2026-54266", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54266 is fixed in version 5.2.11-tuxcare.16 of @angular/benchpress." }, "affects": [ { "ref": "pkg:npm/%40angular/benchpress@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:e3248951-ea10-5172-bdcf-086c5c24f9e0", "id": "CVE-2026-54267", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54267 is fixed in version 5.2.11-tuxcare.16 of @angular/benchpress." }, "affects": [ { "ref": "pkg:npm/%40angular/benchpress@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:123d44fc-17a7-59c5-8da9-b417e46ba158", "id": "CVE-2026-54268", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54268 is fixed in version 5.2.11-tuxcare.16 of @angular/benchpress." }, "affects": [ { "ref": "pkg:npm/%40angular/benchpress@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:ad7b27e2-fbe1-5015-a263-b18219028eba", "id": "CVE-2026-68945", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-68945 does not affect version 5.2.11-tuxcare.16 of @angular/benchpress. not_affected \u2014 Angular 5.2.11 is NOT affected by CVE-2026-68945. The vulnerable component `HttpTransferCache` does not exist in this version. This feature was introduced in Angular v16 as part of the modern SSR hydration system. Angular 5.2.11 only has the basic `TransferState` API (a generic key-value store for manual state transfer), not the automatic HTTP request caching interceptor that contains the vulne..." }, "affects": [ { "ref": "pkg:npm/%40angular/benchpress@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:12f69db2-c1db-57f7-87fa-c776ab2d9167", "id": "CVE-2026-69149", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69149 is fixed in version 5.2.11-tuxcare.16 of @angular/benchpress." }, "affects": [ { "ref": "pkg:npm/%40angular/benchpress@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:bb3ddbfa-742a-5a25-91bb-a616188b4607", "id": "CVE-2026-69151", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69151 is fixed in version 5.2.11-tuxcare.16 of @angular/benchpress." }, "affects": [ { "ref": "pkg:npm/%40angular/benchpress@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:18f9d662-bcfb-540c-af13-3b140b908aa0", "id": "CVE-2026-88056", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88056 does not affect version 5.2.11-tuxcare.16 of @angular/benchpress. not_affected \u2014 Angular 5.2.11-tuxcare.19 does not contain the vulnerable URL resolution code pattern described in CVE-2026-88056. The vulnerability requires the url.ts file with parseUrl function calling String.prototype.trim() and the relativeUrlsTransformerInterceptorFn HTTP interceptor, both introduced in later Angular versions (post-June 2026). The target version uses a fundamentally different architectur..." }, "affects": [ { "ref": "pkg:npm/%40angular/benchpress@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:9d95d89c-cc12-5d26-bb08-36adf3a872c1", "id": "CVE-2026-88057", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88057 affects version 5.2.11-tuxcare.16 of @angular/benchpress." }, "affects": [ { "ref": "pkg:npm/%40angular/benchpress@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:262ee9e6-b85d-5e9d-bcad-6858088aeeb6", "id": "CVE-2026-88059", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88059 does not affect version 5.2.11-tuxcare.16 of @angular/benchpress. not_affected \u2014 Angular 5.2.11 is NOT AFFECTED by CVE-2026-88059. The vulnerability requires HttpTransferCache with hierarchical HttpClient delegation (withRequestsMadeViaParent()), features that were introduced in Angular v16. Angular 5.2.11 predates these features by approximately 6+ years and contains only a basic HTTP interceptor architecture with no automatic response caching mechanism. While TransferStat..." }, "affects": [ { "ref": "pkg:npm/%40angular/benchpress@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:9f77fc4e-f31e-5465-b2c4-d4830769aed3", "id": "CVE-2026-88060", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88060 affects version 5.2.11-tuxcare.16 of @angular/benchpress." }, "affects": [ { "ref": "pkg:npm/%40angular/benchpress@5.2.11-tuxcare.16" } ] } ], "dependencies": [ { "ref": "pkg:npm/%40angular/benchpress@5.2.11-tuxcare.16" } ] }