{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:8bd04db8-ecde-51e0-b1f0-b12818d84423", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:pypi/gitpython@3.1.31.post5+tuxcare", "type": "library", "name": "gitpython", "version": "3.1.31.post5+tuxcare", "purl": "pkg:pypi/gitpython@3.1.31.post5+tuxcare" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:07520f9e-186b-50db-b725-a1753ff05093", "id": "CVE-2023-40267", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-40267 is fixed in version 3.1.31.post5+tuxcare of gitpython." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post5+tuxcare" } ] }, { "bom-ref": "urn:uuid:c3332993-5a94-583c-9045-7fce8d233233", "id": "CVE-2023-40590", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-40590 affects version 3.1.31.post5+tuxcare of gitpython." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post5+tuxcare" } ] }, { "bom-ref": "urn:uuid:e3c02ea6-0709-5fbe-84bd-a24f0acd4e05", "id": "CVE-2023-41040", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-41040 is fixed in version 3.1.31.post5+tuxcare of gitpython." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post5+tuxcare" } ] }, { "bom-ref": "urn:uuid:d3c52f41-367a-5f87-b15f-c5b9e3fd7102", "id": "CVE-2024-22190", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22190 affects version 3.1.31.post5+tuxcare of gitpython." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post5+tuxcare" } ] }, { "bom-ref": "urn:uuid:4224aab3-4e82-573d-bbe4-e982c27a3f03", "id": "CVE-2026-42215", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42215 is fixed in version 3.1.31.post5+tuxcare of gitpython." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post5+tuxcare" } ] }, { "bom-ref": "urn:uuid:e43db65e-49c8-58b9-a1fc-40771d2c873b", "id": "CVE-2026-42284", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42284 affects version 3.1.31.post5+tuxcare of gitpython." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post5+tuxcare" } ] }, { "bom-ref": "urn:uuid:ddd84062-4320-597f-8887-ccb5f62e2f24", "id": "CVE-2026-44243", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44243 affects version 3.1.31.post5+tuxcare of gitpython." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post5+tuxcare" } ] }, { "bom-ref": "urn:uuid:71852c26-b999-5f39-835e-256ced3669bb", "id": "CVE-2026-44244", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44244 is fixed in version 3.1.31.post5+tuxcare of gitpython." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post5+tuxcare" } ] }, { "bom-ref": "urn:uuid:4bcec1b6-2fae-5e84-b1a2-8d621fd6af28", "id": "CVE-2026-67322", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-67322 affects version 3.1.31.post5+tuxcare of gitpython." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post5+tuxcare" } ] }, { "bom-ref": "urn:uuid:44514595-0bde-5362-b681-5259cc4535cd", "id": "CVE-2026-67323", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-67323 affects version 3.1.31.post5+tuxcare of gitpython." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post5+tuxcare" } ] }, { "bom-ref": "urn:uuid:c2b12cf8-1a07-55b2-9c8d-532d1a63f2fb", "id": "CVE-2026-67325", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-67325 affects version 3.1.31.post5+tuxcare of gitpython." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post5+tuxcare" } ] }, { "bom-ref": "urn:uuid:74c54f4a-e904-52bc-8411-2a2919d7554f", "id": "CVE-2026-76217", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-76217 affects version 3.1.31.post5+tuxcare of gitpython." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post5+tuxcare" } ] }, { "bom-ref": "urn:uuid:3796057f-872a-5b7f-87fe-9bf4f751bfc7", "id": "CVE-2026-76218", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-76218 affects version 3.1.31.post5+tuxcare of gitpython." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post5+tuxcare" } ] }, { "bom-ref": "urn:uuid:169fc7f2-3494-545e-a0a4-16a27aa7f11f", "id": "CVE-2026-76219", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-76219 affects version 3.1.31.post5+tuxcare of gitpython." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post5+tuxcare" } ] }, { "bom-ref": "urn:uuid:316293f1-1602-57d1-ba36-a44ca470e33d", "id": "CVE-2026-76220", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-76220 affects version 3.1.31.post5+tuxcare of gitpython." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post5+tuxcare" } ] }, { "bom-ref": "urn:uuid:e3514357-8005-511e-b549-d8aa9010c719", "id": "CVE-2026-76222", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-76222 affects version 3.1.31.post5+tuxcare of gitpython." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post5+tuxcare" } ] }, { "bom-ref": "urn:uuid:3fbb6399-2d77-5b64-8933-1c90754b6fa6", "id": "CVE-2026-78675", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-78675 affects version 3.1.31.post5+tuxcare of gitpython." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post5+tuxcare" } ] }, { "bom-ref": "urn:uuid:8f3d2eeb-698a-52e6-9814-da5bdaad5a0f", "id": "CVE-2026-78676", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-78676 affects version 3.1.31.post5+tuxcare of gitpython." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post5+tuxcare" } ] }, { "bom-ref": "urn:uuid:48f14fa8-47e4-5d1f-956f-c822ac72e010", "id": "CVE-2026-78677", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-78677 affects version 3.1.31.post5+tuxcare of gitpython." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post5+tuxcare" } ] }, { "bom-ref": "urn:uuid:074c5e8a-d747-56b5-a06f-e2cb8e5ed881", "id": "CVE-2026-78678", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-78678 affects version 3.1.31.post5+tuxcare of gitpython." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post5+tuxcare" } ] }, { "bom-ref": "urn:uuid:e625f8a4-a7a2-5b2e-8034-744e66e9887a", "id": "CVE-2026-78679", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-78679 affects version 3.1.31.post5+tuxcare of gitpython." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post5+tuxcare" } ] }, { "bom-ref": "urn:uuid:900f5bed-8d5a-5422-80ad-36bc8787cdb9", "id": "GHSA-298h-jpq4-m665", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-298h-jpq4-m665 is a false positive for gitpython 3.1.31.post5+tuxcare." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post5+tuxcare" } ] }, { "bom-ref": "urn:uuid:4c1aa449-9f36-500d-b067-bb3bb64ed6f2", "id": "GHSA-2f96-g7mh-g2hx", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-2f96-g7mh-g2hx affects version 3.1.31.post5+tuxcare of gitpython." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post5+tuxcare" } ] }, { "bom-ref": "urn:uuid:001af187-1fa1-5edc-8278-e764cadafc22", "id": "GHSA-3f7w-8rr8-f37f", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-3f7w-8rr8-f37f affects version 3.1.31.post5+tuxcare of gitpython." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post5+tuxcare" } ] }, { "bom-ref": "urn:uuid:4d6eefdd-03ee-5eca-babb-9b7f6e76e570", "id": "GHSA-3rp5-jjmw-4wv2", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-3rp5-jjmw-4wv2 affects version 3.1.31.post5+tuxcare of gitpython." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post5+tuxcare" } ] }, { "bom-ref": "urn:uuid:ea0169c0-a74d-52e5-ab67-58f0634d7af9", "id": "GHSA-3vrx-526r-64rm", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-3vrx-526r-64rm is a false positive for gitpython 3.1.31.post5+tuxcare." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post5+tuxcare" } ] }, { "bom-ref": "urn:uuid:21266ca1-2360-53f8-b0cc-0bed28efda94", "id": "GHSA-4gmw-gg2m-w46p", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-4gmw-gg2m-w46p affects version 3.1.31.post5+tuxcare of gitpython." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post5+tuxcare" } ] }, { "bom-ref": "urn:uuid:1c0f1a23-60e7-5024-9875-65a4af4d4e14", "id": "GHSA-4vpg-pfj8-m33q", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-4vpg-pfj8-m33q is a false positive for gitpython 3.1.31.post5+tuxcare." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post5+tuxcare" } ] }, { "bom-ref": "urn:uuid:da34acdf-4273-55b6-a9fa-3889856a1177", "id": "GHSA-539m-9xh6-q6rr", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-539m-9xh6-q6rr is fixed in version 3.1.31.post5+tuxcare of gitpython." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post5+tuxcare" } ] }, { "bom-ref": "urn:uuid:34514695-cd5e-5db8-80d2-1df5f2febd5c", "id": "GHSA-6p8h-3wgx-97gf", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-6p8h-3wgx-97gf is fixed in version 3.1.31.post5+tuxcare of gitpython." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post5+tuxcare" } ] }, { "bom-ref": "urn:uuid:e438989f-bfd0-5b28-88c6-b98c778b48d4", "id": "GHSA-6r2r-ww24-7h52", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-6r2r-ww24-7h52 is a false positive for gitpython 3.1.31.post5+tuxcare." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post5+tuxcare" } ] }, { "bom-ref": "urn:uuid:dab00309-c535-58b4-a4d5-50cff49ec61b", "id": "GHSA-6rj2-96f5-chj9", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-6rj2-96f5-chj9 is a false positive for gitpython 3.1.31.post5+tuxcare." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post5+tuxcare" } ] }, { "bom-ref": "urn:uuid:5dfa2c58-135c-57cd-a153-c060731bab9d", "id": "GHSA-7jx3-jqcp-hhgc", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-7jx3-jqcp-hhgc is a false positive for gitpython 3.1.31.post5+tuxcare." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post5+tuxcare" } ] }, { "bom-ref": "urn:uuid:e0af6ef0-1ebe-5fbf-810f-3739fd441e2e", "id": "GHSA-7r39-6q8m-qw68", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-7r39-6q8m-qw68 is a false positive for gitpython 3.1.31.post5+tuxcare." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post5+tuxcare" } ] }, { "bom-ref": "urn:uuid:197171dd-e5d2-530b-bcae-1b29c4379653", "id": "GHSA-89ff-m8wv-p99r", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-89ff-m8wv-p99r is a false positive for gitpython 3.1.31.post5+tuxcare." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post5+tuxcare" } ] }, { "bom-ref": "urn:uuid:5b4e7159-566b-5601-9642-2de15f17b57f", "id": "GHSA-94p4-4cq8-9g67", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-94p4-4cq8-9g67 affects version 3.1.31.post5+tuxcare of gitpython." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post5+tuxcare" } ] }, { "bom-ref": "urn:uuid:882204aa-dc80-5581-bf6c-b74a51f06b03", "id": "GHSA-9557-234j-7rv9", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-9557-234j-7rv9 is a false positive for gitpython 3.1.31.post5+tuxcare." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post5+tuxcare" } ] }, { "bom-ref": "urn:uuid:8a50cac9-6fb6-5291-ae61-320ce12271f0", "id": "GHSA-956x-8gvw-wg5v", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-956x-8gvw-wg5v affects version 3.1.31.post5+tuxcare of gitpython." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post5+tuxcare" } ] }, { "bom-ref": "urn:uuid:cc68822a-0758-5879-8550-43489a3f9cdf", "id": "GHSA-9rj7-rf2p-w77r", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-9rj7-rf2p-w77r affects version 3.1.31.post5+tuxcare of gitpython." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post5+tuxcare" } ] }, { "bom-ref": "urn:uuid:325ca473-4dde-5c00-93b3-2b4f3710904c", "id": "GHSA-crmc-f4m7-33fj", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-crmc-f4m7-33fj is a false positive for gitpython 3.1.31.post5+tuxcare." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post5+tuxcare" } ] }, { "bom-ref": "urn:uuid:877b918c-90e6-5acb-9752-a409f10b72ec", "id": "GHSA-fjr4-x663-mwxc", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-fjr4-x663-mwxc affects version 3.1.31.post5+tuxcare of gitpython." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post5+tuxcare" } ] }, { "bom-ref": "urn:uuid:f8fe7d55-03d3-59d2-80a2-5cffbb7268ed", "id": "GHSA-hh9p-6wh2-4mfc", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-hh9p-6wh2-4mfc affects version 3.1.31.post5+tuxcare of gitpython." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post5+tuxcare" } ] }, { "bom-ref": "urn:uuid:b7b70034-8697-504f-91da-0ed7d57f7af9", "id": "GHSA-hmq2-w58f-27jc", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-hmq2-w58f-27jc affects version 3.1.31.post5+tuxcare of gitpython." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post5+tuxcare" } ] }, { "bom-ref": "urn:uuid:2b8ab62e-7b73-5041-815f-03e236327b96", "id": "GHSA-jm78-9fvv-mhgr", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-jm78-9fvv-mhgr affects version 3.1.31.post5+tuxcare of gitpython." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post5+tuxcare" } ] }, { "bom-ref": "urn:uuid:6b3058b1-c64b-592c-b93d-4b4d7062d6cc", "id": "GHSA-m4f3-g4cq-hqrx", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-m4f3-g4cq-hqrx is a false positive for gitpython 3.1.31.post5+tuxcare." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post5+tuxcare" } ] }, { "bom-ref": "urn:uuid:d800fc30-b146-582c-b38f-db53b0dd452a", "id": "GHSA-mv93-w799-cj2w", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-mv93-w799-cj2w is fixed in version 3.1.31.post5+tuxcare of gitpython." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post5+tuxcare" } ] }, { "bom-ref": "urn:uuid:086a9915-8391-567e-8892-83a9aa2c3b46", "id": "GHSA-p538-c434-8v24", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-p538-c434-8v24 affects version 3.1.31.post5+tuxcare of gitpython." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post5+tuxcare" } ] }, { "bom-ref": "urn:uuid:e9c58973-8bbd-53b2-9d46-71ebc206b9c3", "id": "GHSA-r9mr-m37c-5fr3", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-r9mr-m37c-5fr3 is fixed in version 3.1.31.post5+tuxcare of gitpython." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post5+tuxcare" } ] }, { "bom-ref": "urn:uuid:6499e829-e549-51a5-9b7d-95301b292a11", "id": "GHSA-rwj8-pgh3-r573", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-rwj8-pgh3-r573 affects version 3.1.31.post5+tuxcare of gitpython." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post5+tuxcare" } ] }, { "bom-ref": "urn:uuid:a40fafb3-e5f4-59b9-87db-29c1b836b8f5", "id": "GHSA-w672-239g-c3gr", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-w672-239g-c3gr is a false positive for gitpython 3.1.31.post5+tuxcare." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post5+tuxcare" } ] }, { "bom-ref": "urn:uuid:b27f967b-707a-52dc-a4f0-81153494f926", "id": "GHSA-wv46-xpj8-pw53", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-wv46-xpj8-pw53 is a false positive for gitpython 3.1.31.post5+tuxcare." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post5+tuxcare" } ] }, { "bom-ref": "urn:uuid:b951bb05-8a53-5110-9d11-c6368f4bd6d4", "id": "GHSA-wvpp-8hx9-p66j", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-wvpp-8hx9-p66j is fixed in version 3.1.31.post5+tuxcare of gitpython." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post5+tuxcare" } ] } ], "dependencies": [ { "ref": "pkg:pypi/gitpython@3.1.31.post5+tuxcare" } ] }