{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:f5508e30-3e62-5347-b858-579b7f96f96f",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:pypi/gitpython@3.1.31.post2+tuxcare",
      "type": "library",
      "name": "gitpython",
      "version": "3.1.31.post2+tuxcare",
      "purl": "pkg:pypi/gitpython@3.1.31.post2+tuxcare"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:19f82a98-dbd3-58f7-9cb3-51457cb5e162",
      "id": "CVE-2023-40267",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-40267 affects version 3.1.31.post2+tuxcare of gitpython."
      },
      "affects": [
        {
          "ref": "pkg:pypi/gitpython@3.1.31.post2+tuxcare"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e504d958-fc86-540e-aa76-6f66eaff4917",
      "id": "CVE-2023-40590",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-40590 is fixed in version 3.1.31.post2+tuxcare of gitpython."
      },
      "affects": [
        {
          "ref": "pkg:pypi/gitpython@3.1.31.post2+tuxcare"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ad2ef30f-a4b5-5205-8355-034d907c164d",
      "id": "CVE-2023-41040",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-41040 is fixed in version 3.1.31.post2+tuxcare of gitpython."
      },
      "affects": [
        {
          "ref": "pkg:pypi/gitpython@3.1.31.post2+tuxcare"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:01da89ef-f807-5547-a499-fb3af55ed3d5",
      "id": "CVE-2024-22190",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22190 is fixed in version 3.1.31.post2+tuxcare of gitpython."
      },
      "affects": [
        {
          "ref": "pkg:pypi/gitpython@3.1.31.post2+tuxcare"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0227928f-9c94-5a92-9994-f27a29259464",
      "id": "CVE-2026-42215",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42215 affects version 3.1.31.post2+tuxcare of gitpython."
      },
      "affects": [
        {
          "ref": "pkg:pypi/gitpython@3.1.31.post2+tuxcare"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2c49c095-afc5-5abf-b3c8-0d41ce5f8ad4",
      "id": "CVE-2026-42284",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42284 affects version 3.1.31.post2+tuxcare of gitpython."
      },
      "affects": [
        {
          "ref": "pkg:pypi/gitpython@3.1.31.post2+tuxcare"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:406bf01e-801a-5ebc-a31c-1b1d24b6a6ab",
      "id": "CVE-2026-44243",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44243 affects version 3.1.31.post2+tuxcare of gitpython."
      },
      "affects": [
        {
          "ref": "pkg:pypi/gitpython@3.1.31.post2+tuxcare"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c7924597-3d89-53e7-afd8-27628071aca4",
      "id": "CVE-2026-44244",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44244 is fixed in version 3.1.31.post2+tuxcare of gitpython."
      },
      "affects": [
        {
          "ref": "pkg:pypi/gitpython@3.1.31.post2+tuxcare"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:28c1fe42-9f57-5db2-bf57-4a25eb95c4ae",
      "id": "GHSA-2f96-g7mh-g2hx",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-2f96-g7mh-g2hx affects version 3.1.31.post2+tuxcare of gitpython."
      },
      "affects": [
        {
          "ref": "pkg:pypi/gitpython@3.1.31.post2+tuxcare"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:de24b0dd-ec50-5bcb-804e-7b7a8ac43464",
      "id": "GHSA-3rp5-jjmw-4wv2",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-3rp5-jjmw-4wv2 affects version 3.1.31.post2+tuxcare of gitpython."
      },
      "affects": [
        {
          "ref": "pkg:pypi/gitpython@3.1.31.post2+tuxcare"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c5de3469-3605-5b61-9802-5a44d9333d9d",
      "id": "GHSA-6p8h-3wgx-97gf",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-6p8h-3wgx-97gf affects version 3.1.31.post2+tuxcare of gitpython."
      },
      "affects": [
        {
          "ref": "pkg:pypi/gitpython@3.1.31.post2+tuxcare"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e934ee8b-8a8b-5b0d-983f-92279cd2385b",
      "id": "GHSA-94p4-4cq8-9g67",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-94p4-4cq8-9g67 affects version 3.1.31.post2+tuxcare of gitpython."
      },
      "affects": [
        {
          "ref": "pkg:pypi/gitpython@3.1.31.post2+tuxcare"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d51d7c87-f670-5439-a19e-5f01b83bb209",
      "id": "GHSA-956x-8gvw-wg5v",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-956x-8gvw-wg5v affects version 3.1.31.post2+tuxcare of gitpython."
      },
      "affects": [
        {
          "ref": "pkg:pypi/gitpython@3.1.31.post2+tuxcare"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:06ce1321-fcdb-5af4-bb7c-80534610b68b",
      "id": "GHSA-fjr4-x663-mwxc",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-fjr4-x663-mwxc affects version 3.1.31.post2+tuxcare of gitpython."
      },
      "affects": [
        {
          "ref": "pkg:pypi/gitpython@3.1.31.post2+tuxcare"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d1b00462-2f61-58eb-8c3d-6835bc231474",
      "id": "GHSA-mv93-w799-cj2w",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mv93-w799-cj2w affects version 3.1.31.post2+tuxcare of gitpython."
      },
      "affects": [
        {
          "ref": "pkg:pypi/gitpython@3.1.31.post2+tuxcare"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6025f472-68f8-5943-86fe-6ca8c0f752ec",
      "id": "GHSA-r9mr-m37c-5fr3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-r9mr-m37c-5fr3 affects version 3.1.31.post2+tuxcare of gitpython."
      },
      "affects": [
        {
          "ref": "pkg:pypi/gitpython@3.1.31.post2+tuxcare"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:22e40aef-789e-58ae-9432-5f3b500344c9",
      "id": "GHSA-rwj8-pgh3-r573",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-rwj8-pgh3-r573 affects version 3.1.31.post2+tuxcare of gitpython."
      },
      "affects": [
        {
          "ref": "pkg:pypi/gitpython@3.1.31.post2+tuxcare"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:pypi/gitpython@3.1.31.post2+tuxcare"
    }
  ]
}