{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:231e2a2b-7dba-536a-9e70-38b9007fab47", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@angular/benchpress", "purl": "pkg:npm/%40angular/benchpress@16.2.11-tuxcare.4", "type": "library", "bom-ref": "pkg:npm/%40angular/benchpress@16.2.11-tuxcare.4", "version": "16.2.11-tuxcare.4", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-59052", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@16.2.11-tuxcare.4" } ], "bom-ref": "urn:uuid:de4bf264-fd3d-5934-8fb8-74ca0edac6ba", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-59052 affects version 16.2.11-tuxcare.4 of @angular/benchpress." } }, { "id": "CVE-2025-66035", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@16.2.11-tuxcare.4" } ], "bom-ref": "urn:uuid:17140cd7-3f0e-5c85-b721-818ddfbe06b9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 16.2.11-tuxcare.4 of @angular/benchpress." } }, { "id": "CVE-2025-66412", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@16.2.11-tuxcare.4" } ], "bom-ref": "urn:uuid:6a6fd0d2-43cc-5a37-996e-e70cc3e61b46", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 16.2.11-tuxcare.4 of @angular/benchpress." } }, { "id": "CVE-2026-101895", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@16.2.11-tuxcare.4" } ], "bom-ref": "urn:uuid:8a3572ba-f647-5184-a95b-4fe05aa9b72f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101895 affects version 16.2.11-tuxcare.4 of @angular/benchpress." } }, { "id": "CVE-2026-22610", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@16.2.11-tuxcare.4" } ], "bom-ref": "urn:uuid:81c942a3-0d5f-5fb2-95d0-c85922533cb6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22610 is fixed in version 16.2.11-tuxcare.4 of @angular/benchpress." } }, { "id": "CVE-2026-27970", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@16.2.11-tuxcare.4" } ], "bom-ref": "urn:uuid:5d306737-89e9-58c7-9168-0edce0390059", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27970 is fixed in version 16.2.11-tuxcare.4 of @angular/benchpress." } }, { "id": "CVE-2026-41423", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@16.2.11-tuxcare.4" } ], "bom-ref": "urn:uuid:63b38b4c-dfa4-53b9-b681-c525d1c31a35", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41423 is fixed in version 16.2.11-tuxcare.4 of @angular/benchpress." } }, { "id": "CVE-2026-46417", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@16.2.11-tuxcare.4" } ], "bom-ref": "urn:uuid:0afd1977-213c-5939-b076-fdc73ab5110b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46417 is fixed in version 16.2.11-tuxcare.4 of @angular/benchpress." } }, { "id": "CVE-2026-50168", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@16.2.11-tuxcare.4" } ], "bom-ref": "urn:uuid:0a3de28f-ee99-5525-b3fa-79f1edf1e541", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50168 is fixed in version 16.2.11-tuxcare.4 of @angular/benchpress." } }, { "id": "CVE-2026-50169", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@16.2.11-tuxcare.4" } ], "bom-ref": "urn:uuid:75d43784-8079-54ab-ab47-95ac106c75ae", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50169 is fixed in version 16.2.11-tuxcare.4 of @angular/benchpress." } }, { "id": "CVE-2026-50170", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@16.2.11-tuxcare.4" } ], "bom-ref": "urn:uuid:56d4bb5a-0e90-5fe7-b572-25e74658ada3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50170 is fixed in version 16.2.11-tuxcare.4 of @angular/benchpress." } }, { "id": "CVE-2026-50171", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@16.2.11-tuxcare.4" } ], "bom-ref": "urn:uuid:3516bf63-d03c-50fb-970a-35ee3ba33e3d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50171 is fixed in version 16.2.11-tuxcare.4 of @angular/benchpress." } }, { "id": "CVE-2026-50184", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@16.2.11-tuxcare.4" } ], "bom-ref": "urn:uuid:69223f32-f0db-5291-b38e-0b7594a0aac0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50184 is fixed in version 16.2.11-tuxcare.4 of @angular/benchpress." } }, { "id": "CVE-2026-50555", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@16.2.11-tuxcare.4" } ], "bom-ref": "urn:uuid:4d287f07-2b26-56c5-8a55-35c2f33afcaf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50555 is fixed in version 16.2.11-tuxcare.4 of @angular/benchpress." } }, { "id": "CVE-2026-50556", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@16.2.11-tuxcare.4" } ], "bom-ref": "urn:uuid:6662cae4-ede6-5c19-b088-4d1f92279bab", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50556 is fixed in version 16.2.11-tuxcare.4 of @angular/benchpress." } }, { "id": "CVE-2026-50557", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@16.2.11-tuxcare.4" } ], "bom-ref": "urn:uuid:e9f79f2d-4ca0-596b-bbc8-4391675bb04d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50557 is fixed in version 16.2.11-tuxcare.4 of @angular/benchpress." } }, { "id": "CVE-2026-52725", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@16.2.11-tuxcare.4" } ], "bom-ref": "urn:uuid:7fdf5617-28fc-5429-b940-a8d186cf4eeb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-52725 is fixed in version 16.2.11-tuxcare.4 of @angular/benchpress." } }, { "id": "CVE-2026-54264", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@16.2.11-tuxcare.4" } ], "bom-ref": "urn:uuid:87ebd82f-0cd5-5195-9381-12b8338086af", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54264 is fixed in version 16.2.11-tuxcare.4 of @angular/benchpress." } }, { "id": "CVE-2026-54265", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@16.2.11-tuxcare.4" } ], "bom-ref": "urn:uuid:025c0311-47d0-511e-b33a-dd86e081ebd3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54265 is fixed in version 16.2.11-tuxcare.4 of @angular/benchpress." } }, { "id": "CVE-2026-54266", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@16.2.11-tuxcare.4" } ], "bom-ref": "urn:uuid:6ec6ebce-b9ac-570d-a483-d63ab619fa89", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54266 is fixed in version 16.2.11-tuxcare.4 of @angular/benchpress." } }, { "id": "CVE-2026-54267", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@16.2.11-tuxcare.4" } ], "bom-ref": "urn:uuid:2e8de2e7-983b-5ae3-a643-1d872d0c59e4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54267 is fixed in version 16.2.11-tuxcare.4 of @angular/benchpress." } }, { "id": "CVE-2026-54268", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@16.2.11-tuxcare.4" } ], "bom-ref": "urn:uuid:ce69b842-e07e-5c7f-a272-7cf112bf0bb2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54268 is fixed in version 16.2.11-tuxcare.4 of @angular/benchpress." } }, { "id": "CVE-2026-68945", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@16.2.11-tuxcare.4" } ], "bom-ref": "urn:uuid:f7a7c1d3-c96f-53eb-a3c1-2a79a5deca26", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-68945 is fixed in version 16.2.11-tuxcare.4 of @angular/benchpress." } }, { "id": "CVE-2026-69149", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@16.2.11-tuxcare.4" } ], "bom-ref": "urn:uuid:5df37e1b-7bf3-52a9-ae0c-ff6e7e0c3cad", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69149 is fixed in version 16.2.11-tuxcare.4 of @angular/benchpress." } }, { "id": "CVE-2026-69151", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@16.2.11-tuxcare.4" } ], "bom-ref": "urn:uuid:801a6a1d-a9ee-5e8c-86cb-f1cf1c3de27d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69151 is fixed in version 16.2.11-tuxcare.4 of @angular/benchpress." } }, { "id": "CVE-2026-88056", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@16.2.11-tuxcare.4" } ], "bom-ref": "urn:uuid:1e08cea7-cf36-5d78-96b4-d28f10a1a488", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88056 does not affect version 16.2.11-tuxcare.4 of @angular/benchpress. not_affected \u2014 Angular 16.2.11-tuxcare.2 is NOT affected by CVE-2026-88056. The vulnerability requires WHATWG URL validation combined with String.prototype.trim() on URLs during SSR, creating a discrepancy that enables SSRF. While the target uses WHATWG URL parsing (backported in commit c03fbfd7cc for CVE-2026-50168), it does NOT call String.prototype.trim() on URLs. The attack chain is broken at the trim() s...", "justification": "code_not_reachable" } }, { "id": "CVE-2026-88057", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@16.2.11-tuxcare.4" } ], "bom-ref": "urn:uuid:993db2d8-a3ad-540c-8114-8fcd86ed874a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88057 is fixed in version 16.2.11-tuxcare.4 of @angular/benchpress." } }, { "id": "CVE-2026-88058", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@16.2.11-tuxcare.4" } ], "bom-ref": "urn:uuid:8800e8a0-4697-51eb-9070-505cf7bfbd78", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88058 is fixed in version 16.2.11-tuxcare.4 of @angular/benchpress." } }, { "id": "CVE-2026-88059", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@16.2.11-tuxcare.4" } ], "bom-ref": "urn:uuid:545a0a64-54a1-58b4-a2e5-64d76917bf8b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88059 is fixed in version 16.2.11-tuxcare.4 of @angular/benchpress." } }, { "id": "CVE-2026-88060", "affects": [ { "ref": "pkg:npm/%40angular/benchpress@16.2.11-tuxcare.4" } ], "bom-ref": "urn:uuid:7ea7e4df-a296-59e0-afd2-be915cd6bacf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88060 is fixed in version 16.2.11-tuxcare.4 of @angular/benchpress." } } ], "dependencies": [ { "ref": "pkg:npm/%40angular/benchpress@16.2.11-tuxcare.4" } ] }