{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:4f7d0e31-1019-5d36-9635-26c62474532c", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:npm/%40angular/benchpress@5.2.11-tuxcare.19", "type": "library", "name": "@angular/benchpress", "version": "5.2.11-tuxcare.19", "purl": "pkg:npm/%40angular/benchpress@5.2.11-tuxcare.19" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:c5e3637a-4fa2-5f50-b153-dd8e2eafd5af", "id": "CVE-2021-4231", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-4231 is fixed in version 5.2.11-tuxcare.19 of @angular/benchpress." }, "affects": [ { "ref": "pkg:npm/%40angular/benchpress@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:a7acbe85-b93c-5b48-91eb-fdfd05c619ba", "id": "CVE-2025-66035", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 5.2.11-tuxcare.19 of @angular/benchpress." }, "affects": [ { "ref": "pkg:npm/%40angular/benchpress@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:14d5765b-cbde-53a6-ad6d-1641051440fa", "id": "CVE-2025-66412", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 5.2.11-tuxcare.19 of @angular/benchpress." }, "affects": [ { "ref": "pkg:npm/%40angular/benchpress@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:43e79e10-a0d9-5a1b-9b27-aeda2f6d0153", "id": "CVE-2026-22610", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22610 is fixed in version 5.2.11-tuxcare.19 of @angular/benchpress." }, "affects": [ { "ref": "pkg:npm/%40angular/benchpress@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:445fbda3-3ee5-51d5-97f8-827a85fc5de3", "id": "CVE-2026-27970", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27970 is fixed in version 5.2.11-tuxcare.19 of @angular/benchpress." }, "affects": [ { "ref": "pkg:npm/%40angular/benchpress@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:9fc842a1-0fbb-5c18-be2b-cd103075c746", "id": "CVE-2026-41423", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41423 is fixed in version 5.2.11-tuxcare.19 of @angular/benchpress." }, "affects": [ { "ref": "pkg:npm/%40angular/benchpress@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:248f96c8-acdb-5b68-bcd7-d6de5207e64d", "id": "CVE-2026-46417", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46417 is fixed in version 5.2.11-tuxcare.19 of @angular/benchpress." }, "affects": [ { "ref": "pkg:npm/%40angular/benchpress@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:88966117-b437-558c-88c6-909f229a8fa5", "id": "CVE-2026-50168", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50168 is fixed in version 5.2.11-tuxcare.19 of @angular/benchpress." }, "affects": [ { "ref": "pkg:npm/%40angular/benchpress@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:4bf3fc2f-c5b7-512c-a9ae-91f91afd1936", "id": "CVE-2026-50169", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50169 is fixed in version 5.2.11-tuxcare.19 of @angular/benchpress." }, "affects": [ { "ref": "pkg:npm/%40angular/benchpress@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:836b8d2c-7bf3-5dde-8e93-2bd6a3a9bc82", "id": "CVE-2026-50170", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50170 is fixed in version 5.2.11-tuxcare.19 of @angular/benchpress." }, "affects": [ { "ref": "pkg:npm/%40angular/benchpress@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:761a115b-0209-5c8a-8c02-78a84bfa5784", "id": "CVE-2026-50171", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50171 is fixed in version 5.2.11-tuxcare.19 of @angular/benchpress." }, "affects": [ { "ref": "pkg:npm/%40angular/benchpress@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:c412658e-0fe0-5c30-b232-0dbdd2343d94", "id": "CVE-2026-50184", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50184 is fixed in version 5.2.11-tuxcare.19 of @angular/benchpress." }, "affects": [ { "ref": "pkg:npm/%40angular/benchpress@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:14e4e62d-20d5-5d89-9dd1-ac7726c43c09", "id": "CVE-2026-50555", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50555 is fixed in version 5.2.11-tuxcare.19 of @angular/benchpress." }, "affects": [ { "ref": "pkg:npm/%40angular/benchpress@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:29122211-b2ed-53bc-954d-f2a729cdb288", "id": "CVE-2026-50556", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50556 is fixed in version 5.2.11-tuxcare.19 of @angular/benchpress." }, "affects": [ { "ref": "pkg:npm/%40angular/benchpress@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:feff766b-d795-5682-907a-045e044b6b3c", "id": "CVE-2026-50557", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50557 is fixed in version 5.2.11-tuxcare.19 of @angular/benchpress." }, "affects": [ { "ref": "pkg:npm/%40angular/benchpress@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:6a1e4f3b-281f-5f8b-b254-cb036a360063", "id": "CVE-2026-52725", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-52725 is fixed in version 5.2.11-tuxcare.19 of @angular/benchpress." }, "affects": [ { "ref": "pkg:npm/%40angular/benchpress@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:a31dde24-58d5-55fc-a1f9-11178bb3b69d", "id": "CVE-2026-54264", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54264 is fixed in version 5.2.11-tuxcare.19 of @angular/benchpress." }, "affects": [ { "ref": "pkg:npm/%40angular/benchpress@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:5b89ecdf-3701-51b5-83bf-ffcd5b0acccb", "id": "CVE-2026-54265", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54265 is fixed in version 5.2.11-tuxcare.19 of @angular/benchpress." }, "affects": [ { "ref": "pkg:npm/%40angular/benchpress@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:d6d4b13d-1e84-58a1-b2c8-c929a89f9ae3", "id": "CVE-2026-54266", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54266 is fixed in version 5.2.11-tuxcare.19 of @angular/benchpress." }, "affects": [ { "ref": "pkg:npm/%40angular/benchpress@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:37cf5671-5407-5343-90c3-95655d2c5a60", "id": "CVE-2026-54267", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54267 is fixed in version 5.2.11-tuxcare.19 of @angular/benchpress." }, "affects": [ { "ref": "pkg:npm/%40angular/benchpress@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:b345ce48-6b53-55f8-a63d-84622509d11b", "id": "CVE-2026-54268", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54268 is fixed in version 5.2.11-tuxcare.19 of @angular/benchpress." }, "affects": [ { "ref": "pkg:npm/%40angular/benchpress@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:fe8b2b4c-9cc2-58f0-8844-60d8f0c45797", "id": "CVE-2026-68945", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-68945 does not affect version 5.2.11-tuxcare.19 of @angular/benchpress. not_affected \u2014 Angular 5.2.11 is NOT affected by CVE-2026-68945. The vulnerable component `HttpTransferCache` does not exist in this version. This feature was introduced in Angular v16 as part of the modern SSR hydration system. Angular 5.2.11 only has the basic `TransferState` API (a generic key-value store for manual state transfer), not the automatic HTTP request caching interceptor that contains the vulne..." }, "affects": [ { "ref": "pkg:npm/%40angular/benchpress@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:739da4e0-3c29-57a8-8b16-5786731de5f9", "id": "CVE-2026-69149", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69149 is fixed in version 5.2.11-tuxcare.19 of @angular/benchpress." }, "affects": [ { "ref": "pkg:npm/%40angular/benchpress@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:24330ed7-254b-5a15-9354-ec36b406d684", "id": "CVE-2026-69151", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69151 is fixed in version 5.2.11-tuxcare.19 of @angular/benchpress." }, "affects": [ { "ref": "pkg:npm/%40angular/benchpress@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:2152ed93-6ab8-57f5-b930-e1a965f777c5", "id": "CVE-2026-88056", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88056 does not affect version 5.2.11-tuxcare.19 of @angular/benchpress. not_affected \u2014 Angular 5.2.11-tuxcare.19 does not contain the vulnerable URL resolution code pattern described in CVE-2026-88056. The vulnerability requires the url.ts file with parseUrl function calling String.prototype.trim() and the relativeUrlsTransformerInterceptorFn HTTP interceptor, both introduced in later Angular versions (post-June 2026). The target version uses a fundamentally different architectur..." }, "affects": [ { "ref": "pkg:npm/%40angular/benchpress@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:81d686ab-96d2-5c22-9c11-fd6b06ba054c", "id": "CVE-2026-88057", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88057 affects version 5.2.11-tuxcare.19 of @angular/benchpress." }, "affects": [ { "ref": "pkg:npm/%40angular/benchpress@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:b244a7a8-a56b-5a75-ae6b-e84a38551bbc", "id": "CVE-2026-88059", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88059 does not affect version 5.2.11-tuxcare.19 of @angular/benchpress. not_affected \u2014 Angular 5.2.11 is NOT AFFECTED by CVE-2026-88059. The vulnerability requires HttpTransferCache with hierarchical HttpClient delegation (withRequestsMadeViaParent()), features that were introduced in Angular v16. Angular 5.2.11 predates these features by approximately 6+ years and contains only a basic HTTP interceptor architecture with no automatic response caching mechanism. While TransferStat..." }, "affects": [ { "ref": "pkg:npm/%40angular/benchpress@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:ed4fa2d6-18c3-5b75-90dd-754d2e229a32", "id": "CVE-2026-88060", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88060 affects version 5.2.11-tuxcare.19 of @angular/benchpress." }, "affects": [ { "ref": "pkg:npm/%40angular/benchpress@5.2.11-tuxcare.19" } ] } ], "dependencies": [ { "ref": "pkg:npm/%40angular/benchpress@5.2.11-tuxcare.19" } ] }