{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:cddcc396-8f75-59d0-a9a5-ca68667a7186", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:npm/%40angular/benchpress@5.2.11-tuxcare.17", "type": "library", "name": "@angular/benchpress", "version": "5.2.11-tuxcare.17", "purl": "pkg:npm/%40angular/benchpress@5.2.11-tuxcare.17" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:1b2203c5-0cfe-510d-963c-57c7d3c72943", "id": "CVE-2021-4231", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-4231 is fixed in version 5.2.11-tuxcare.17 of @angular/benchpress." }, "affects": [ { "ref": "pkg:npm/%40angular/benchpress@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:2c94926a-52c3-570b-b320-eea1e230ef26", "id": "CVE-2025-66035", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 5.2.11-tuxcare.17 of @angular/benchpress." }, "affects": [ { "ref": "pkg:npm/%40angular/benchpress@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:772a93fa-c5f1-5fc1-92b0-bc38446a12a2", "id": "CVE-2025-66412", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 5.2.11-tuxcare.17 of @angular/benchpress." }, "affects": [ { "ref": "pkg:npm/%40angular/benchpress@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:422d9754-3d83-5241-a89f-00ebe1fcba1b", "id": "CVE-2026-22610", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22610 is fixed in version 5.2.11-tuxcare.17 of @angular/benchpress." }, "affects": [ { "ref": "pkg:npm/%40angular/benchpress@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:ad8f0318-a68a-5914-822f-a0bf86c92006", "id": "CVE-2026-27970", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27970 is fixed in version 5.2.11-tuxcare.17 of @angular/benchpress." }, "affects": [ { "ref": "pkg:npm/%40angular/benchpress@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:ba9ba765-fe2c-55e9-a2e1-692565c79577", "id": "CVE-2026-41423", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41423 is fixed in version 5.2.11-tuxcare.17 of @angular/benchpress." }, "affects": [ { "ref": "pkg:npm/%40angular/benchpress@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:4d3d275a-f2e8-57cf-9fa8-29cc0b23223c", "id": "CVE-2026-46417", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46417 is fixed in version 5.2.11-tuxcare.17 of @angular/benchpress." }, "affects": [ { "ref": "pkg:npm/%40angular/benchpress@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:d8be0182-6104-550c-a0bb-d515248eb279", "id": "CVE-2026-50168", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50168 is fixed in version 5.2.11-tuxcare.17 of @angular/benchpress." }, "affects": [ { "ref": "pkg:npm/%40angular/benchpress@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:15ce48d8-92a3-57c3-bdd6-6b28515a820e", "id": "CVE-2026-50169", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50169 is fixed in version 5.2.11-tuxcare.17 of @angular/benchpress." }, "affects": [ { "ref": "pkg:npm/%40angular/benchpress@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:2e5c8c71-14ce-5dbc-a8c0-459e72d14663", "id": "CVE-2026-50170", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50170 is fixed in version 5.2.11-tuxcare.17 of @angular/benchpress." }, "affects": [ { "ref": "pkg:npm/%40angular/benchpress@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:1a285468-dea1-5383-94e8-53499a0012cf", "id": "CVE-2026-50171", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50171 is fixed in version 5.2.11-tuxcare.17 of @angular/benchpress." }, "affects": [ { "ref": "pkg:npm/%40angular/benchpress@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:b280eed8-6a4f-5e36-8f00-4dcb7f54e6be", "id": "CVE-2026-50184", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50184 is fixed in version 5.2.11-tuxcare.17 of @angular/benchpress." }, "affects": [ { "ref": "pkg:npm/%40angular/benchpress@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:39cdc1d5-a001-570f-b8c3-52b0722c7914", "id": "CVE-2026-50555", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50555 is fixed in version 5.2.11-tuxcare.17 of @angular/benchpress." }, "affects": [ { "ref": "pkg:npm/%40angular/benchpress@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:0ababc3c-b9eb-5d2e-bafe-23a82f332d71", "id": "CVE-2026-50556", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50556 is fixed in version 5.2.11-tuxcare.17 of @angular/benchpress." }, "affects": [ { "ref": "pkg:npm/%40angular/benchpress@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:d5153ce4-ec0a-58a2-9e9d-7a3e8897320d", "id": "CVE-2026-50557", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50557 is fixed in version 5.2.11-tuxcare.17 of @angular/benchpress." }, "affects": [ { "ref": "pkg:npm/%40angular/benchpress@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:552a59bb-7b19-5f8b-b05f-ab84bcf79071", "id": "CVE-2026-52725", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-52725 is fixed in version 5.2.11-tuxcare.17 of @angular/benchpress." }, "affects": [ { "ref": "pkg:npm/%40angular/benchpress@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:9aa0eb05-2aaf-535a-ba50-71a1f5f570dd", "id": "CVE-2026-54264", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54264 is fixed in version 5.2.11-tuxcare.17 of @angular/benchpress." }, "affects": [ { "ref": "pkg:npm/%40angular/benchpress@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:96044970-f84b-58ce-84ad-7640f64c996e", "id": "CVE-2026-54265", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54265 is fixed in version 5.2.11-tuxcare.17 of @angular/benchpress." }, "affects": [ { "ref": "pkg:npm/%40angular/benchpress@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:46ce02a1-9983-5cf9-80e8-f7224493bfb5", "id": "CVE-2026-54266", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54266 is fixed in version 5.2.11-tuxcare.17 of @angular/benchpress." }, "affects": [ { "ref": "pkg:npm/%40angular/benchpress@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:0f6ea1c9-ec99-5938-ac30-18dbf701f50a", "id": "CVE-2026-54267", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54267 is fixed in version 5.2.11-tuxcare.17 of @angular/benchpress." }, "affects": [ { "ref": "pkg:npm/%40angular/benchpress@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:5549b8f4-34fd-55c9-bbe0-cec538d0cf6a", "id": "CVE-2026-54268", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54268 is fixed in version 5.2.11-tuxcare.17 of @angular/benchpress." }, "affects": [ { "ref": "pkg:npm/%40angular/benchpress@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:db3befa0-4c44-52a2-a9de-b7fdfa15da5c", "id": "CVE-2026-68945", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-68945 does not affect version 5.2.11-tuxcare.17 of @angular/benchpress. not_affected \u2014 Angular 5.2.11 is NOT affected by CVE-2026-68945. The vulnerable component `HttpTransferCache` does not exist in this version. This feature was introduced in Angular v16 as part of the modern SSR hydration system. Angular 5.2.11 only has the basic `TransferState` API (a generic key-value store for manual state transfer), not the automatic HTTP request caching interceptor that contains the vulne..." }, "affects": [ { "ref": "pkg:npm/%40angular/benchpress@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:b1b0dada-207a-539b-93a2-a481c39ddfd4", "id": "CVE-2026-69149", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69149 is fixed in version 5.2.11-tuxcare.17 of @angular/benchpress." }, "affects": [ { "ref": "pkg:npm/%40angular/benchpress@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:49fd5fb8-eb92-5b11-9f7a-6f2a2ea79ef2", "id": "CVE-2026-69151", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69151 is fixed in version 5.2.11-tuxcare.17 of @angular/benchpress." }, "affects": [ { "ref": "pkg:npm/%40angular/benchpress@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:8f5ded05-fcb0-5ff1-a4a8-0e932c1ddb4b", "id": "CVE-2026-88056", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88056 does not affect version 5.2.11-tuxcare.17 of @angular/benchpress. not_affected \u2014 Angular 5.2.11-tuxcare.19 does not contain the vulnerable URL resolution code pattern described in CVE-2026-88056. The vulnerability requires the url.ts file with parseUrl function calling String.prototype.trim() and the relativeUrlsTransformerInterceptorFn HTTP interceptor, both introduced in later Angular versions (post-June 2026). The target version uses a fundamentally different architectur..." }, "affects": [ { "ref": "pkg:npm/%40angular/benchpress@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:e4f2ea65-c73a-504a-9d2f-e2be69ab8d65", "id": "CVE-2026-88057", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88057 affects version 5.2.11-tuxcare.17 of @angular/benchpress." }, "affects": [ { "ref": "pkg:npm/%40angular/benchpress@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:2113dca0-7315-5dbf-9569-7afb6085fbc8", "id": "CVE-2026-88059", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88059 does not affect version 5.2.11-tuxcare.17 of @angular/benchpress. not_affected \u2014 Angular 5.2.11 is NOT AFFECTED by CVE-2026-88059. The vulnerability requires HttpTransferCache with hierarchical HttpClient delegation (withRequestsMadeViaParent()), features that were introduced in Angular v16. Angular 5.2.11 predates these features by approximately 6+ years and contains only a basic HTTP interceptor architecture with no automatic response caching mechanism. While TransferStat..." }, "affects": [ { "ref": "pkg:npm/%40angular/benchpress@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:63a93df3-cc3e-56b7-b014-b0da22219e52", "id": "CVE-2026-88060", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88060 affects version 5.2.11-tuxcare.17 of @angular/benchpress." }, "affects": [ { "ref": "pkg:npm/%40angular/benchpress@5.2.11-tuxcare.17" } ] } ], "dependencies": [ { "ref": "pkg:npm/%40angular/benchpress@5.2.11-tuxcare.17" } ] }