{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:7b7b77d4-925a-5335-a758-e0294033e482", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:pypi/gitpython@3.1.31.post11+tuxcare", "type": "library", "name": "gitpython", "version": "3.1.31.post11+tuxcare", "purl": "pkg:pypi/gitpython@3.1.31.post11+tuxcare" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:27656051-5fb5-5c42-adb4-699726294699", "id": "CVE-2023-40267", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-40267 is fixed in version 3.1.31.post11+tuxcare of gitpython." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post11+tuxcare" } ] }, { "bom-ref": "urn:uuid:e8a826b2-529e-5a37-b1b5-0cb2b0ff39dd", "id": "CVE-2023-40590", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-40590 is fixed in version 3.1.31.post11+tuxcare of gitpython." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post11+tuxcare" } ] }, { "bom-ref": "urn:uuid:40185495-e0db-50de-80ac-de2d20fa3ee3", "id": "CVE-2023-41040", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-41040 is fixed in version 3.1.31.post11+tuxcare of gitpython." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post11+tuxcare" } ] }, { "bom-ref": "urn:uuid:b678627a-87b2-5168-aea7-797a3028174d", "id": "CVE-2024-22190", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22190 is fixed in version 3.1.31.post11+tuxcare of gitpython." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post11+tuxcare" } ] }, { "bom-ref": "urn:uuid:9a8d1cb1-cd73-5783-92d5-a97a23f2e271", "id": "CVE-2026-42215", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42215 is fixed in version 3.1.31.post11+tuxcare of gitpython." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post11+tuxcare" } ] }, { "bom-ref": "urn:uuid:a749306e-f6ec-5e2f-a22b-7ac03ca30169", "id": "CVE-2026-42284", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42284 affects version 3.1.31.post11+tuxcare of gitpython." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post11+tuxcare" } ] }, { "bom-ref": "urn:uuid:f7198e01-dad7-58e2-93ec-92c3f454a5ef", "id": "CVE-2026-44243", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44243 affects version 3.1.31.post11+tuxcare of gitpython." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post11+tuxcare" } ] }, { "bom-ref": "urn:uuid:ad986e6b-dc37-51e0-81fa-1f1b31bf28fb", "id": "CVE-2026-44244", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44244 is fixed in version 3.1.31.post11+tuxcare of gitpython." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post11+tuxcare" } ] }, { "bom-ref": "urn:uuid:c13ccec9-76b3-5f2a-85ca-b03702adf722", "id": "CVE-2026-67322", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-67322 affects version 3.1.31.post11+tuxcare of gitpython." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post11+tuxcare" } ] }, { "bom-ref": "urn:uuid:2ef52141-cff2-5eee-b5b3-800738f0784b", "id": "CVE-2026-67323", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-67323 affects version 3.1.31.post11+tuxcare of gitpython." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post11+tuxcare" } ] }, { "bom-ref": "urn:uuid:5e28ab8d-b822-5a84-8fa0-7c674a4caa0b", "id": "CVE-2026-67325", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-67325 affects version 3.1.31.post11+tuxcare of gitpython." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post11+tuxcare" } ] }, { "bom-ref": "urn:uuid:14623196-a811-5426-bc4d-264ee59ea32c", "id": "CVE-2026-76217", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-76217 affects version 3.1.31.post11+tuxcare of gitpython." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post11+tuxcare" } ] }, { "bom-ref": "urn:uuid:f2f2aae6-574a-53aa-bb33-b2bdfaa2b0e1", "id": "CVE-2026-76218", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-76218 affects version 3.1.31.post11+tuxcare of gitpython." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post11+tuxcare" } ] }, { "bom-ref": "urn:uuid:98cfc769-0d08-58d9-8f24-80f172947250", "id": "CVE-2026-76219", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-76219 affects version 3.1.31.post11+tuxcare of gitpython." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post11+tuxcare" } ] }, { "bom-ref": "urn:uuid:c6f1dba8-9502-5e4c-8af5-14bad7a90ed2", "id": "CVE-2026-76220", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-76220 affects version 3.1.31.post11+tuxcare of gitpython." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post11+tuxcare" } ] }, { "bom-ref": "urn:uuid:7a9b2f18-d4f8-56fb-96b2-49392f49b9b2", "id": "CVE-2026-76222", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-76222 affects version 3.1.31.post11+tuxcare of gitpython." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post11+tuxcare" } ] }, { "bom-ref": "urn:uuid:d94d64fe-7b29-5d6c-9bba-c0b3ff2e163b", "id": "CVE-2026-78675", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-78675 affects version 3.1.31.post11+tuxcare of gitpython." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post11+tuxcare" } ] }, { "bom-ref": "urn:uuid:fab7c519-250d-5f15-8794-5f4798c64f74", "id": "CVE-2026-78676", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-78676 affects version 3.1.31.post11+tuxcare of gitpython." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post11+tuxcare" } ] }, { "bom-ref": "urn:uuid:7c34bf37-7961-5f56-8f6e-30d5d6d39cbe", "id": "CVE-2026-78677", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-78677 affects version 3.1.31.post11+tuxcare of gitpython." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post11+tuxcare" } ] }, { "bom-ref": "urn:uuid:f7c20931-7f41-5b79-8ef2-df3d8365e567", "id": "CVE-2026-78678", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-78678 affects version 3.1.31.post11+tuxcare of gitpython." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post11+tuxcare" } ] }, { "bom-ref": "urn:uuid:4ddf4681-2fc9-567c-881f-dc34e0503588", "id": "CVE-2026-78679", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-78679 affects version 3.1.31.post11+tuxcare of gitpython." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post11+tuxcare" } ] }, { "bom-ref": "urn:uuid:b7562a0e-ede4-5cc0-aed3-79c4a6c9c2b3", "id": "GHSA-298h-jpq4-m665", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-298h-jpq4-m665 is a false positive for gitpython 3.1.31.post11+tuxcare." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post11+tuxcare" } ] }, { "bom-ref": "urn:uuid:e25bacfa-1cf7-58a4-9182-dce41833b333", "id": "GHSA-2f96-g7mh-g2hx", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-2f96-g7mh-g2hx is fixed in version 3.1.31.post11+tuxcare of gitpython." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post11+tuxcare" } ] }, { "bom-ref": "urn:uuid:c996b65c-d019-54e5-830a-b90c70cb9fc2", "id": "GHSA-3f7w-8rr8-f37f", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-3f7w-8rr8-f37f is fixed in version 3.1.31.post11+tuxcare of gitpython." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post11+tuxcare" } ] }, { "bom-ref": "urn:uuid:bb6373c1-a5be-5f39-af60-68552fd2ef0d", "id": "GHSA-3rp5-jjmw-4wv2", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-3rp5-jjmw-4wv2 is fixed in version 3.1.31.post11+tuxcare of gitpython." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post11+tuxcare" } ] }, { "bom-ref": "urn:uuid:d0dc303f-d407-51d6-9e22-36e18ffd088f", "id": "GHSA-3vrx-526r-64rm", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-3vrx-526r-64rm is a false positive for gitpython 3.1.31.post11+tuxcare." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post11+tuxcare" } ] }, { "bom-ref": "urn:uuid:95584da5-1d77-5053-8b8c-40a1bfa6833f", "id": "GHSA-4gmw-gg2m-w46p", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-4gmw-gg2m-w46p is fixed in version 3.1.31.post11+tuxcare of gitpython." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post11+tuxcare" } ] }, { "bom-ref": "urn:uuid:6807bccb-3d3d-5b0c-ae49-7e0905f0127f", "id": "GHSA-4vpg-pfj8-m33q", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-4vpg-pfj8-m33q is a false positive for gitpython 3.1.31.post11+tuxcare." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post11+tuxcare" } ] }, { "bom-ref": "urn:uuid:025db251-8dc3-5a48-8cff-cd9a9b7f943b", "id": "GHSA-539m-9xh6-q6rr", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-539m-9xh6-q6rr is fixed in version 3.1.31.post11+tuxcare of gitpython." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post11+tuxcare" } ] }, { "bom-ref": "urn:uuid:422ff085-4c6e-53f3-a5d9-7b81b3df0d6d", "id": "GHSA-6p8h-3wgx-97gf", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-6p8h-3wgx-97gf is fixed in version 3.1.31.post11+tuxcare of gitpython." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post11+tuxcare" } ] }, { "bom-ref": "urn:uuid:36e0728e-5a26-5144-bc85-65e43a5a35b9", "id": "GHSA-6r2r-ww24-7h52", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-6r2r-ww24-7h52 is a false positive for gitpython 3.1.31.post11+tuxcare." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post11+tuxcare" } ] }, { "bom-ref": "urn:uuid:9fa229e3-4688-5af2-a331-212051618faa", "id": "GHSA-6rj2-96f5-chj9", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-6rj2-96f5-chj9 is a false positive for gitpython 3.1.31.post11+tuxcare." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post11+tuxcare" } ] }, { "bom-ref": "urn:uuid:787f5292-7baf-5c90-93a8-fa2bc3b4d0e5", "id": "GHSA-7jx3-jqcp-hhgc", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-7jx3-jqcp-hhgc is a false positive for gitpython 3.1.31.post11+tuxcare." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post11+tuxcare" } ] }, { "bom-ref": "urn:uuid:0cb9e0d3-e909-5a56-af54-8a3c6670f175", "id": "GHSA-7r39-6q8m-qw68", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-7r39-6q8m-qw68 is a false positive for gitpython 3.1.31.post11+tuxcare." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post11+tuxcare" } ] }, { "bom-ref": "urn:uuid:dca45ef9-aa8d-51ab-8e1c-88779df8dfe6", "id": "GHSA-89ff-m8wv-p99r", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-89ff-m8wv-p99r is a false positive for gitpython 3.1.31.post11+tuxcare." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post11+tuxcare" } ] }, { "bom-ref": "urn:uuid:36824430-e364-5de3-bf84-2ae7e0aa6ec1", "id": "GHSA-94p4-4cq8-9g67", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-94p4-4cq8-9g67 is fixed in version 3.1.31.post11+tuxcare of gitpython." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post11+tuxcare" } ] }, { "bom-ref": "urn:uuid:ced1998c-d128-5d46-8af0-72552f07f454", "id": "GHSA-9557-234j-7rv9", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-9557-234j-7rv9 is a false positive for gitpython 3.1.31.post11+tuxcare." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post11+tuxcare" } ] }, { "bom-ref": "urn:uuid:972f1a2f-9a7a-5c16-8841-7a05878f6d57", "id": "GHSA-956x-8gvw-wg5v", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-956x-8gvw-wg5v is fixed in version 3.1.31.post11+tuxcare of gitpython." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post11+tuxcare" } ] }, { "bom-ref": "urn:uuid:5f9d8653-2c01-50cb-82d4-ca7e0d8308df", "id": "GHSA-9rj7-rf2p-w77r", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-9rj7-rf2p-w77r is fixed in version 3.1.31.post11+tuxcare of gitpython." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post11+tuxcare" } ] }, { "bom-ref": "urn:uuid:15d15216-5d9c-5b45-a6c7-ff832112fead", "id": "GHSA-crmc-f4m7-33fj", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-crmc-f4m7-33fj is a false positive for gitpython 3.1.31.post11+tuxcare." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post11+tuxcare" } ] }, { "bom-ref": "urn:uuid:54b519d2-46a5-5389-9135-fe2de61ab417", "id": "GHSA-fjr4-x663-mwxc", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-fjr4-x663-mwxc is fixed in version 3.1.31.post11+tuxcare of gitpython." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post11+tuxcare" } ] }, { "bom-ref": "urn:uuid:850e46aa-85a2-5839-ba8a-a386cdc7dd6d", "id": "GHSA-hh9p-6wh2-4mfc", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-hh9p-6wh2-4mfc is fixed in version 3.1.31.post11+tuxcare of gitpython." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post11+tuxcare" } ] }, { "bom-ref": "urn:uuid:b4fa723e-30e3-5d6a-a424-0c0ec180d814", "id": "GHSA-hmq2-w58f-27jc", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-hmq2-w58f-27jc is fixed in version 3.1.31.post11+tuxcare of gitpython." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post11+tuxcare" } ] }, { "bom-ref": "urn:uuid:0df701e5-85fc-5550-9410-5854e96f72ab", "id": "GHSA-jm78-9fvv-mhgr", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-jm78-9fvv-mhgr is fixed in version 3.1.31.post11+tuxcare of gitpython." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post11+tuxcare" } ] }, { "bom-ref": "urn:uuid:4c432309-063b-5638-93af-76962a94b2c5", "id": "GHSA-m4f3-g4cq-hqrx", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-m4f3-g4cq-hqrx is a false positive for gitpython 3.1.31.post11+tuxcare." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post11+tuxcare" } ] }, { "bom-ref": "urn:uuid:118693d1-86ea-5196-befc-b1cb04f9aeab", "id": "GHSA-mv93-w799-cj2w", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-mv93-w799-cj2w is fixed in version 3.1.31.post11+tuxcare of gitpython." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post11+tuxcare" } ] }, { "bom-ref": "urn:uuid:68c67143-0f8e-55c8-971e-441bbc9aaf07", "id": "GHSA-p538-c434-8v24", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-p538-c434-8v24 is fixed in version 3.1.31.post11+tuxcare of gitpython." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post11+tuxcare" } ] }, { "bom-ref": "urn:uuid:e626b9b2-9d64-5fe7-9f9b-fb5a9f8779d7", "id": "GHSA-r9mr-m37c-5fr3", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-r9mr-m37c-5fr3 is fixed in version 3.1.31.post11+tuxcare of gitpython." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post11+tuxcare" } ] }, { "bom-ref": "urn:uuid:aab0d132-193c-5ccf-ac26-dc96835ea9d2", "id": "GHSA-rwj8-pgh3-r573", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-rwj8-pgh3-r573 is fixed in version 3.1.31.post11+tuxcare of gitpython." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post11+tuxcare" } ] }, { "bom-ref": "urn:uuid:9019dc3f-0021-530e-9045-199ac7c705fa", "id": "GHSA-w672-239g-c3gr", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-w672-239g-c3gr is a false positive for gitpython 3.1.31.post11+tuxcare." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post11+tuxcare" } ] }, { "bom-ref": "urn:uuid:300b96d1-0ea4-51f9-8678-2a79260d8deb", "id": "GHSA-wv46-xpj8-pw53", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-wv46-xpj8-pw53 is a false positive for gitpython 3.1.31.post11+tuxcare." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post11+tuxcare" } ] }, { "bom-ref": "urn:uuid:2a11fe59-82e5-563d-84b2-ada8280e7588", "id": "GHSA-wvpp-8hx9-p66j", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-wvpp-8hx9-p66j is fixed in version 3.1.31.post11+tuxcare of gitpython." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post11+tuxcare" } ] } ], "dependencies": [ { "ref": "pkg:pypi/gitpython@3.1.31.post11+tuxcare" } ] }