{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:6035eac8-1c10-542e-9dad-8618aa789eaa", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:pypi/gitpython@3.1.31.post6+tuxcare", "type": "library", "name": "gitpython", "version": "3.1.31.post6+tuxcare", "purl": "pkg:pypi/gitpython@3.1.31.post6+tuxcare" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:ba81ab6e-eab1-5a7b-8711-3008ed0bda80", "id": "CVE-2023-40267", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-40267 is fixed in version 3.1.31.post6+tuxcare of gitpython." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post6+tuxcare" } ] }, { "bom-ref": "urn:uuid:8b193234-bd57-5071-8762-c08d99d78f2d", "id": "CVE-2023-40590", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-40590 affects version 3.1.31.post6+tuxcare of gitpython." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post6+tuxcare" } ] }, { "bom-ref": "urn:uuid:fb3b5002-a7d2-5d7c-ab20-cb8af4f95d56", "id": "CVE-2023-41040", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-41040 is fixed in version 3.1.31.post6+tuxcare of gitpython." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post6+tuxcare" } ] }, { "bom-ref": "urn:uuid:3d3b20c4-83de-5887-b5e3-da7dacbaef77", "id": "CVE-2024-22190", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22190 affects version 3.1.31.post6+tuxcare of gitpython." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post6+tuxcare" } ] }, { "bom-ref": "urn:uuid:048967f0-4232-5741-bc55-a02f685df473", "id": "CVE-2026-42215", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42215 is fixed in version 3.1.31.post6+tuxcare of gitpython." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post6+tuxcare" } ] }, { "bom-ref": "urn:uuid:25899057-9c17-5902-994e-6e42740ac2c0", "id": "CVE-2026-42284", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42284 affects version 3.1.31.post6+tuxcare of gitpython." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post6+tuxcare" } ] }, { "bom-ref": "urn:uuid:321abcd5-69a3-56ac-ac20-3139c60a86a2", "id": "CVE-2026-44243", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44243 affects version 3.1.31.post6+tuxcare of gitpython." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post6+tuxcare" } ] }, { "bom-ref": "urn:uuid:7269550a-1cac-5829-9232-631816c152c1", "id": "CVE-2026-44244", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44244 is fixed in version 3.1.31.post6+tuxcare of gitpython." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post6+tuxcare" } ] }, { "bom-ref": "urn:uuid:5a9a165c-ca39-55c1-880e-25ca5738f9a9", "id": "CVE-2026-67322", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-67322 affects version 3.1.31.post6+tuxcare of gitpython." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post6+tuxcare" } ] }, { "bom-ref": "urn:uuid:a7282e50-914a-57da-9a81-5146630de17c", "id": "CVE-2026-67323", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-67323 affects version 3.1.31.post6+tuxcare of gitpython." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post6+tuxcare" } ] }, { "bom-ref": "urn:uuid:44cff291-5d53-5473-a777-5416fd7e8220", "id": "CVE-2026-67325", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-67325 affects version 3.1.31.post6+tuxcare of gitpython." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post6+tuxcare" } ] }, { "bom-ref": "urn:uuid:8bde3fca-146d-5cfb-b5a8-cc38f6500b4e", "id": "CVE-2026-76217", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-76217 affects version 3.1.31.post6+tuxcare of gitpython." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post6+tuxcare" } ] }, { "bom-ref": "urn:uuid:80ed5edd-07d1-5371-a375-3c5fd4682546", "id": "CVE-2026-76218", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-76218 affects version 3.1.31.post6+tuxcare of gitpython." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post6+tuxcare" } ] }, { "bom-ref": "urn:uuid:c4fcad94-09b3-5aaa-84c0-61ef55e51b1c", "id": "CVE-2026-76219", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-76219 affects version 3.1.31.post6+tuxcare of gitpython." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post6+tuxcare" } ] }, { "bom-ref": "urn:uuid:274c388a-e177-5260-b3be-accf1a4307e7", "id": "CVE-2026-76220", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-76220 affects version 3.1.31.post6+tuxcare of gitpython." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post6+tuxcare" } ] }, { "bom-ref": "urn:uuid:fd54324f-4b06-592c-9e89-0c2662544a73", "id": "CVE-2026-76222", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-76222 affects version 3.1.31.post6+tuxcare of gitpython." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post6+tuxcare" } ] }, { "bom-ref": "urn:uuid:db9f060c-52a5-57d4-8a22-e1da93392d1f", "id": "CVE-2026-78675", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-78675 affects version 3.1.31.post6+tuxcare of gitpython." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post6+tuxcare" } ] }, { "bom-ref": "urn:uuid:5d29cd6a-959f-50c8-a2b1-e0021805af25", "id": "CVE-2026-78676", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-78676 affects version 3.1.31.post6+tuxcare of gitpython." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post6+tuxcare" } ] }, { "bom-ref": "urn:uuid:9bd4407f-f804-5e12-afb7-288f2a943b8f", "id": "CVE-2026-78677", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-78677 affects version 3.1.31.post6+tuxcare of gitpython." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post6+tuxcare" } ] }, { "bom-ref": "urn:uuid:557ecbfb-befd-5062-89ea-e5b189267abc", "id": "CVE-2026-78678", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-78678 affects version 3.1.31.post6+tuxcare of gitpython." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post6+tuxcare" } ] }, { "bom-ref": "urn:uuid:0a9ce318-af87-5e42-854c-35dbd40adbf9", "id": "CVE-2026-78679", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-78679 affects version 3.1.31.post6+tuxcare of gitpython." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post6+tuxcare" } ] }, { "bom-ref": "urn:uuid:743dcdb9-7142-5026-8cf1-1d2acd30ed2d", "id": "GHSA-298h-jpq4-m665", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-298h-jpq4-m665 is a false positive for gitpython 3.1.31.post6+tuxcare." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post6+tuxcare" } ] }, { "bom-ref": "urn:uuid:87b7474e-7d54-570a-bc40-1136a454dfa1", "id": "GHSA-2f96-g7mh-g2hx", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-2f96-g7mh-g2hx affects version 3.1.31.post6+tuxcare of gitpython." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post6+tuxcare" } ] }, { "bom-ref": "urn:uuid:d081d5ae-c6ae-5a28-88b1-fb4238cbc085", "id": "GHSA-3f7w-8rr8-f37f", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-3f7w-8rr8-f37f affects version 3.1.31.post6+tuxcare of gitpython." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post6+tuxcare" } ] }, { "bom-ref": "urn:uuid:7311bcbd-1a7c-5abb-99d8-d9e7b4e89925", "id": "GHSA-3rp5-jjmw-4wv2", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-3rp5-jjmw-4wv2 affects version 3.1.31.post6+tuxcare of gitpython." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post6+tuxcare" } ] }, { "bom-ref": "urn:uuid:1cf2d52e-1a9e-5b3a-8544-87b8fb9052b6", "id": "GHSA-3vrx-526r-64rm", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-3vrx-526r-64rm is a false positive for gitpython 3.1.31.post6+tuxcare." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post6+tuxcare" } ] }, { "bom-ref": "urn:uuid:e7cfe4f7-41d3-539a-a515-df162c04c124", "id": "GHSA-4gmw-gg2m-w46p", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-4gmw-gg2m-w46p affects version 3.1.31.post6+tuxcare of gitpython." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post6+tuxcare" } ] }, { "bom-ref": "urn:uuid:8553aa6f-ea40-5d10-97f7-3a77d1ce0156", "id": "GHSA-4vpg-pfj8-m33q", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-4vpg-pfj8-m33q is a false positive for gitpython 3.1.31.post6+tuxcare." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post6+tuxcare" } ] }, { "bom-ref": "urn:uuid:dd31bcdd-f062-585a-978b-f07d4606012a", "id": "GHSA-539m-9xh6-q6rr", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-539m-9xh6-q6rr is fixed in version 3.1.31.post6+tuxcare of gitpython." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post6+tuxcare" } ] }, { "bom-ref": "urn:uuid:94f136bb-011e-51cd-87bf-b034dabe2074", "id": "GHSA-6p8h-3wgx-97gf", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-6p8h-3wgx-97gf is fixed in version 3.1.31.post6+tuxcare of gitpython." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post6+tuxcare" } ] }, { "bom-ref": "urn:uuid:1c77d775-3ef9-55c4-95fb-99f663087393", "id": "GHSA-6r2r-ww24-7h52", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-6r2r-ww24-7h52 is a false positive for gitpython 3.1.31.post6+tuxcare." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post6+tuxcare" } ] }, { "bom-ref": "urn:uuid:d3c68fd6-e21c-52e1-bb19-01520f554f0c", "id": "GHSA-6rj2-96f5-chj9", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-6rj2-96f5-chj9 is a false positive for gitpython 3.1.31.post6+tuxcare." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post6+tuxcare" } ] }, { "bom-ref": "urn:uuid:c409a012-b0d9-56fb-a010-846de1a11c9c", "id": "GHSA-7jx3-jqcp-hhgc", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-7jx3-jqcp-hhgc is a false positive for gitpython 3.1.31.post6+tuxcare." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post6+tuxcare" } ] }, { "bom-ref": "urn:uuid:ab1241b2-b567-58f7-a394-0c970eccc01d", "id": "GHSA-7r39-6q8m-qw68", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-7r39-6q8m-qw68 is a false positive for gitpython 3.1.31.post6+tuxcare." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post6+tuxcare" } ] }, { "bom-ref": "urn:uuid:60c2644a-ec86-5468-91d2-1e4794f071f9", "id": "GHSA-89ff-m8wv-p99r", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-89ff-m8wv-p99r is a false positive for gitpython 3.1.31.post6+tuxcare." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post6+tuxcare" } ] }, { "bom-ref": "urn:uuid:6bef96b1-d1b5-5e48-9721-82a9e731625a", "id": "GHSA-94p4-4cq8-9g67", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-94p4-4cq8-9g67 affects version 3.1.31.post6+tuxcare of gitpython." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post6+tuxcare" } ] }, { "bom-ref": "urn:uuid:6a70fb28-a104-5b3d-814b-845c4fbb9da3", "id": "GHSA-9557-234j-7rv9", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-9557-234j-7rv9 is a false positive for gitpython 3.1.31.post6+tuxcare." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post6+tuxcare" } ] }, { "bom-ref": "urn:uuid:c2909e39-fd24-5f6e-b716-09e9e507b1a2", "id": "GHSA-956x-8gvw-wg5v", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-956x-8gvw-wg5v affects version 3.1.31.post6+tuxcare of gitpython." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post6+tuxcare" } ] }, { "bom-ref": "urn:uuid:94f22d7d-eba9-533e-9050-7e2a5155e3ec", "id": "GHSA-9rj7-rf2p-w77r", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-9rj7-rf2p-w77r affects version 3.1.31.post6+tuxcare of gitpython." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post6+tuxcare" } ] }, { "bom-ref": "urn:uuid:28b0cd5e-3cf6-5117-b581-f95a6ed3acc3", "id": "GHSA-crmc-f4m7-33fj", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-crmc-f4m7-33fj is a false positive for gitpython 3.1.31.post6+tuxcare." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post6+tuxcare" } ] }, { "bom-ref": "urn:uuid:c057cba1-957c-52e1-95cc-d58c1c708b60", "id": "GHSA-fjr4-x663-mwxc", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-fjr4-x663-mwxc affects version 3.1.31.post6+tuxcare of gitpython." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post6+tuxcare" } ] }, { "bom-ref": "urn:uuid:184e9972-1c5c-577b-858f-1b18234f9357", "id": "GHSA-hh9p-6wh2-4mfc", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-hh9p-6wh2-4mfc affects version 3.1.31.post6+tuxcare of gitpython." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post6+tuxcare" } ] }, { "bom-ref": "urn:uuid:29e7853b-9aab-5c26-b252-b46939301dc6", "id": "GHSA-hmq2-w58f-27jc", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-hmq2-w58f-27jc affects version 3.1.31.post6+tuxcare of gitpython." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post6+tuxcare" } ] }, { "bom-ref": "urn:uuid:076689aa-1a98-58fe-822e-6dde069da687", "id": "GHSA-jm78-9fvv-mhgr", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-jm78-9fvv-mhgr affects version 3.1.31.post6+tuxcare of gitpython." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post6+tuxcare" } ] }, { "bom-ref": "urn:uuid:95c52863-a762-571a-99a2-c96b0bed5255", "id": "GHSA-m4f3-g4cq-hqrx", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-m4f3-g4cq-hqrx is a false positive for gitpython 3.1.31.post6+tuxcare." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post6+tuxcare" } ] }, { "bom-ref": "urn:uuid:3a05bbdc-73ae-581a-b87b-21f2eafb9b44", "id": "GHSA-mv93-w799-cj2w", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-mv93-w799-cj2w is fixed in version 3.1.31.post6+tuxcare of gitpython." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post6+tuxcare" } ] }, { "bom-ref": "urn:uuid:be92c07d-e210-5fda-be1b-fbc15f82a33a", "id": "GHSA-p538-c434-8v24", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-p538-c434-8v24 is fixed in version 3.1.31.post6+tuxcare of gitpython." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post6+tuxcare" } ] }, { "bom-ref": "urn:uuid:084d3f81-1680-5005-9b91-6b3d462be0bb", "id": "GHSA-r9mr-m37c-5fr3", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-r9mr-m37c-5fr3 is fixed in version 3.1.31.post6+tuxcare of gitpython." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post6+tuxcare" } ] }, { "bom-ref": "urn:uuid:b9cad4ae-c7a6-5932-ab9a-27ed75053715", "id": "GHSA-rwj8-pgh3-r573", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-rwj8-pgh3-r573 affects version 3.1.31.post6+tuxcare of gitpython." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post6+tuxcare" } ] }, { "bom-ref": "urn:uuid:6e56cc81-2e3f-5e81-b42a-4292e18177fe", "id": "GHSA-w672-239g-c3gr", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-w672-239g-c3gr is a false positive for gitpython 3.1.31.post6+tuxcare." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post6+tuxcare" } ] }, { "bom-ref": "urn:uuid:cedafc5c-c647-542e-aecc-1124ca5a1dc9", "id": "GHSA-wv46-xpj8-pw53", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-wv46-xpj8-pw53 is a false positive for gitpython 3.1.31.post6+tuxcare." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post6+tuxcare" } ] }, { "bom-ref": "urn:uuid:560ac1dd-ac0c-5a83-8979-be3b71cf0569", "id": "GHSA-wvpp-8hx9-p66j", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-wvpp-8hx9-p66j is fixed in version 3.1.31.post6+tuxcare of gitpython." }, "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post6+tuxcare" } ] } ], "dependencies": [ { "ref": "pkg:pypi/gitpython@3.1.31.post6+tuxcare" } ] }