{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:960ef97e-1f93-518a-9d1c-f363f06ddf97",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "@angular/benchpress",
      "purl": "pkg:npm/%40angular/benchpress@7.2.16-tuxcare.14",
      "type": "library",
      "bom-ref": "pkg:npm/%40angular/benchpress@7.2.16-tuxcare.14",
      "version": "7.2.16-tuxcare.14",
      "pedigree": {
        "ancestors": [
          {
            "name": "@angular/benchpress",
            "purl": "pkg:npm/%40angular/benchpress@7.2.16",
            "type": "library",
            "version": "7.2.16"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2026-101895",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/benchpress@7.2.16-tuxcare.14"
        }
      ],
      "bom-ref": "urn:uuid:7156fe6d-02b3-510f-99bf-6896dfc1fcc9",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-101895 is fixed in version 7.2.16-tuxcare.14 of @angular/benchpress."
      }
    },
    {
      "id": "CVE-2026-101896",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/benchpress@7.2.16-tuxcare.14"
        }
      ],
      "bom-ref": "urn:uuid:66d8eabd-4cc0-5a2e-8fa5-1324cdf6886f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-101896 affects version 7.2.16-tuxcare.14 of @angular/benchpress."
      }
    },
    {
      "id": "CVE-2026-41423",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/benchpress@7.2.16-tuxcare.14"
        }
      ],
      "bom-ref": "urn:uuid:2fae21fb-787a-5fe6-86ec-4075d77ce31f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41423 is fixed in version 7.2.16-tuxcare.14 of @angular/benchpress."
      }
    },
    {
      "id": "CVE-2026-46417",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/benchpress@7.2.16-tuxcare.14"
        }
      ],
      "bom-ref": "urn:uuid:fbfabfb0-ea04-506b-88f3-7c556ce1b751",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-46417 is fixed in version 7.2.16-tuxcare.14 of @angular/benchpress."
      }
    },
    {
      "id": "CVE-2026-50168",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/benchpress@7.2.16-tuxcare.14"
        }
      ],
      "bom-ref": "urn:uuid:95536c83-4062-5936-b388-e66336ca9258",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50168 is fixed in version 7.2.16-tuxcare.14 of @angular/benchpress."
      }
    },
    {
      "id": "CVE-2026-50169",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/benchpress@7.2.16-tuxcare.14"
        }
      ],
      "bom-ref": "urn:uuid:4ef21835-cabb-5e8d-81e2-d607ee5dc7aa",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50169 is fixed in version 7.2.16-tuxcare.14 of @angular/benchpress."
      }
    },
    {
      "id": "CVE-2026-50184",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/benchpress@7.2.16-tuxcare.14"
        }
      ],
      "bom-ref": "urn:uuid:d36c1ba9-8f67-5e2c-af12-18eeba255c53",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50184 is fixed in version 7.2.16-tuxcare.14 of @angular/benchpress."
      }
    },
    {
      "id": "CVE-2026-50555",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/benchpress@7.2.16-tuxcare.14"
        }
      ],
      "bom-ref": "urn:uuid:cc6c1079-c742-58bd-b2bb-2af16789b7fd",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50555 is fixed in version 7.2.16-tuxcare.14 of @angular/benchpress."
      }
    },
    {
      "id": "CVE-2026-50556",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/benchpress@7.2.16-tuxcare.14"
        }
      ],
      "bom-ref": "urn:uuid:a0d0ca17-94e9-5a5f-a6d6-a09eb0698f67",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50556 is fixed in version 7.2.16-tuxcare.14 of @angular/benchpress."
      }
    },
    {
      "id": "CVE-2026-54264",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/benchpress@7.2.16-tuxcare.14"
        }
      ],
      "bom-ref": "urn:uuid:d7e99266-bc11-534d-8d8c-48edc9181f2f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54264 is fixed in version 7.2.16-tuxcare.14 of @angular/benchpress."
      }
    },
    {
      "id": "CVE-2026-69149",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/benchpress@7.2.16-tuxcare.14"
        }
      ],
      "bom-ref": "urn:uuid:c6d2c9a0-c8d4-5c5c-b372-9c3b16798daf",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-69149 is fixed in version 7.2.16-tuxcare.14 of @angular/benchpress."
      }
    },
    {
      "id": "CVE-2026-88056",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/benchpress@7.2.16-tuxcare.14"
        }
      ],
      "bom-ref": "urn:uuid:a8dafacf-8f48-5fab-ad37-f72cbfd903da",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-88056 does not affect version 7.2.16-tuxcare.14 of @angular/benchpress. not_affected \u2014 Angular 7.2.16 is not affected by CVE-2026-88056. The vulnerability requires a String.prototype.trim() call on URLs during server-side rendering that strips Unicode whitespace characters, converting same-origin relative URLs into cross-origin protocol-relative URLs. This vulnerable code pattern does not exist in Angular 7.2.16. The CVE describes a vulnerability introduced in later Angular versi...",
        "justification": "code_not_present"
      }
    },
    {
      "id": "CVE-2026-88058",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/benchpress@7.2.16-tuxcare.14"
        }
      ],
      "bom-ref": "urn:uuid:4cc3123c-b0bc-591c-a957-c505412d2ee8",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-88058 is fixed in version 7.2.16-tuxcare.14 of @angular/benchpress."
      }
    },
    {
      "id": "CVE-2026-88060",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/benchpress@7.2.16-tuxcare.14"
        }
      ],
      "bom-ref": "urn:uuid:bbdaa838-fad2-58a7-af14-4c7cd9c8bbff",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-88060 is fixed in version 7.2.16-tuxcare.14 of @angular/benchpress."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/%40angular/benchpress@7.2.16-tuxcare.14"
    }
  ]
}