{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:2b4dacc0-6d45-5ded-8eff-4bf6d1e6fd3d",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "@angular/benchpress",
      "purl": "pkg:npm/%40angular/benchpress@7.2.0-tuxcare.5",
      "type": "library",
      "bom-ref": "pkg:npm/%40angular/benchpress@7.2.0-tuxcare.5",
      "version": "7.2.0-tuxcare.5",
      "pedigree": {
        "ancestors": [
          {
            "name": "@angular/benchpress",
            "purl": "pkg:npm/%40angular/benchpress@7.2.0",
            "type": "library",
            "version": "7.2.0"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2026-101895",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/benchpress@7.2.0-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:9b2fe905-21c8-54e8-bef3-2bfe06de8278",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-101895 is fixed in version 7.2.0-tuxcare.5 of @angular/benchpress."
      }
    },
    {
      "id": "CVE-2026-101896",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/benchpress@7.2.0-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:977cd49a-33ec-58d9-9d48-c8a52dfba14d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-101896 affects version 7.2.0-tuxcare.5 of @angular/benchpress."
      }
    },
    {
      "id": "CVE-2026-41423",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/benchpress@7.2.0-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:3ed974f6-2e68-54d8-9fb0-51b64c529071",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41423 is fixed in version 7.2.0-tuxcare.5 of @angular/benchpress."
      }
    },
    {
      "id": "CVE-2026-46417",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/benchpress@7.2.0-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:c67a62db-f773-5673-975a-e17ff8735619",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-46417 is fixed in version 7.2.0-tuxcare.5 of @angular/benchpress."
      }
    },
    {
      "id": "CVE-2026-50168",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/benchpress@7.2.0-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:611857de-51ae-5d56-a9f0-d69861dc48bd",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50168 is fixed in version 7.2.0-tuxcare.5 of @angular/benchpress."
      }
    },
    {
      "id": "CVE-2026-50169",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/benchpress@7.2.0-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:afe0af01-4bf7-5ad0-9c92-301698871467",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50169 is fixed in version 7.2.0-tuxcare.5 of @angular/benchpress."
      }
    },
    {
      "id": "CVE-2026-50184",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/benchpress@7.2.0-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:58bd060a-2ff3-5a27-b5f7-66305ebd2e85",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50184 is fixed in version 7.2.0-tuxcare.5 of @angular/benchpress."
      }
    },
    {
      "id": "CVE-2026-50555",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/benchpress@7.2.0-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:e79799b5-38d4-51d8-85f9-690e234f6016",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50555 is fixed in version 7.2.0-tuxcare.5 of @angular/benchpress."
      }
    },
    {
      "id": "CVE-2026-50556",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/benchpress@7.2.0-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:1c997b8e-30e0-5c86-9b62-58cf1975217a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50556 is fixed in version 7.2.0-tuxcare.5 of @angular/benchpress."
      }
    },
    {
      "id": "CVE-2026-54264",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/benchpress@7.2.0-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:5c32d28d-0810-5d9b-b63b-ff247aa0e548",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54264 is fixed in version 7.2.0-tuxcare.5 of @angular/benchpress."
      }
    },
    {
      "id": "CVE-2026-69149",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/benchpress@7.2.0-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:ac2120d9-e591-5ec8-96ac-95bb1b388476",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-69149 is fixed in version 7.2.0-tuxcare.5 of @angular/benchpress."
      }
    },
    {
      "id": "CVE-2026-88056",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/benchpress@7.2.0-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:e66ca88b-0a4e-5f41-8b8c-70862a56a723",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-88056 does not affect version 7.2.0-tuxcare.5 of @angular/benchpress. not_affected \u2014 Angular version 7.2.0 is not affected by CVE-2026-88056. The vulnerability requires the presence of a `parseUrl` function in `packages/platform-server/src/url.ts` that uses `String.prototype.trim()` to normalize URLs, which strips Unicode whitespace and can convert validated same-origin relative URLs into cross-origin protocol-relative URLs. Version 7.2.0 does not contain the `url.ts` file; it ...",
        "justification": "code_not_present"
      }
    },
    {
      "id": "CVE-2026-88058",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/benchpress@7.2.0-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:cbdc7423-95ff-545b-b5c4-76799a3c81b1",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-88058 is fixed in version 7.2.0-tuxcare.5 of @angular/benchpress."
      }
    },
    {
      "id": "CVE-2026-88060",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/benchpress@7.2.0-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:4a559344-a898-5538-8ff6-af6c1e6b8df4",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-88060 is fixed in version 7.2.0-tuxcare.5 of @angular/benchpress."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/%40angular/benchpress@7.2.0-tuxcare.5"
    }
  ]
}