{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:b712ef58-e2de-5311-b2b5-bdf4ed10b7c8",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:pypi/gitpython@3.1.31.post3+tuxcare",
      "type": "library",
      "name": "gitpython",
      "version": "3.1.31.post3+tuxcare",
      "purl": "pkg:pypi/gitpython@3.1.31.post3+tuxcare"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:0b705bd1-d61d-53dd-a3fe-f083efb1b3ec",
      "id": "CVE-2023-40267",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-40267 affects version 3.1.31.post3+tuxcare of gitpython."
      },
      "affects": [
        {
          "ref": "pkg:pypi/gitpython@3.1.31.post3+tuxcare"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0a7139b6-8ce9-5f4f-be0a-8b2133c0e451",
      "id": "CVE-2023-40590",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-40590 is fixed in version 3.1.31.post3+tuxcare of gitpython."
      },
      "affects": [
        {
          "ref": "pkg:pypi/gitpython@3.1.31.post3+tuxcare"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a69be668-f15d-55b6-8a2c-59d4155c3bc3",
      "id": "CVE-2023-41040",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-41040 is fixed in version 3.1.31.post3+tuxcare of gitpython."
      },
      "affects": [
        {
          "ref": "pkg:pypi/gitpython@3.1.31.post3+tuxcare"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fc459845-9048-54ce-9e81-e02b5b1594d4",
      "id": "CVE-2024-22190",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22190 is fixed in version 3.1.31.post3+tuxcare of gitpython."
      },
      "affects": [
        {
          "ref": "pkg:pypi/gitpython@3.1.31.post3+tuxcare"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:631361e9-4d42-5111-b680-075a805d4d96",
      "id": "CVE-2026-42215",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42215 is fixed in version 3.1.31.post3+tuxcare of gitpython."
      },
      "affects": [
        {
          "ref": "pkg:pypi/gitpython@3.1.31.post3+tuxcare"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1f3924b3-5e0a-5e00-9775-e9141c9d51ca",
      "id": "CVE-2026-42284",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42284 affects version 3.1.31.post3+tuxcare of gitpython."
      },
      "affects": [
        {
          "ref": "pkg:pypi/gitpython@3.1.31.post3+tuxcare"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a87162fc-ee95-5b1c-8593-1f4b403b64ee",
      "id": "CVE-2026-44243",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44243 affects version 3.1.31.post3+tuxcare of gitpython."
      },
      "affects": [
        {
          "ref": "pkg:pypi/gitpython@3.1.31.post3+tuxcare"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:20e6f6c0-4193-5fb4-a320-2d46a1a495e3",
      "id": "CVE-2026-44244",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44244 is fixed in version 3.1.31.post3+tuxcare of gitpython."
      },
      "affects": [
        {
          "ref": "pkg:pypi/gitpython@3.1.31.post3+tuxcare"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fb9d30df-6c25-5f96-b26a-1345fe9ea928",
      "id": "GHSA-2f96-g7mh-g2hx",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-2f96-g7mh-g2hx affects version 3.1.31.post3+tuxcare of gitpython."
      },
      "affects": [
        {
          "ref": "pkg:pypi/gitpython@3.1.31.post3+tuxcare"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:602bbfa6-6b8a-56fb-9263-83d4958ace58",
      "id": "GHSA-3rp5-jjmw-4wv2",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-3rp5-jjmw-4wv2 affects version 3.1.31.post3+tuxcare of gitpython."
      },
      "affects": [
        {
          "ref": "pkg:pypi/gitpython@3.1.31.post3+tuxcare"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:09f14709-efd1-51f5-b973-df029c13cdc3",
      "id": "GHSA-6p8h-3wgx-97gf",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-6p8h-3wgx-97gf affects version 3.1.31.post3+tuxcare of gitpython."
      },
      "affects": [
        {
          "ref": "pkg:pypi/gitpython@3.1.31.post3+tuxcare"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:03031d34-c99b-590e-a86b-c35cac8b572a",
      "id": "GHSA-94p4-4cq8-9g67",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-94p4-4cq8-9g67 affects version 3.1.31.post3+tuxcare of gitpython."
      },
      "affects": [
        {
          "ref": "pkg:pypi/gitpython@3.1.31.post3+tuxcare"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8bde6676-f17c-5c16-91d4-68e68030c854",
      "id": "GHSA-956x-8gvw-wg5v",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-956x-8gvw-wg5v affects version 3.1.31.post3+tuxcare of gitpython."
      },
      "affects": [
        {
          "ref": "pkg:pypi/gitpython@3.1.31.post3+tuxcare"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4196a974-ba18-5513-be58-e468cb87f209",
      "id": "GHSA-fjr4-x663-mwxc",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-fjr4-x663-mwxc affects version 3.1.31.post3+tuxcare of gitpython."
      },
      "affects": [
        {
          "ref": "pkg:pypi/gitpython@3.1.31.post3+tuxcare"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8743b031-2010-5e67-adaf-1143c2501851",
      "id": "GHSA-mv93-w799-cj2w",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-mv93-w799-cj2w is fixed in version 3.1.31.post3+tuxcare of gitpython."
      },
      "affects": [
        {
          "ref": "pkg:pypi/gitpython@3.1.31.post3+tuxcare"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d44626c8-8de8-5515-92c8-40c9779af398",
      "id": "GHSA-r9mr-m37c-5fr3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-r9mr-m37c-5fr3 affects version 3.1.31.post3+tuxcare of gitpython."
      },
      "affects": [
        {
          "ref": "pkg:pypi/gitpython@3.1.31.post3+tuxcare"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5d49d9bb-bfd5-59a6-bb27-cd8f3a9ab9ab",
      "id": "GHSA-rwj8-pgh3-r573",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-rwj8-pgh3-r573 affects version 3.1.31.post3+tuxcare of gitpython."
      },
      "affects": [
        {
          "ref": "pkg:pypi/gitpython@3.1.31.post3+tuxcare"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:pypi/gitpython@3.1.31.post3+tuxcare"
    }
  ]
}