{
  "@id": "urn:uuid:209b80d3-0004-4fbf-9b7d-0222114c64af",
  "role": "Document Creator",
  "author": "https://tuxcare.com",
  "version": 5,
  "@context": "https://openvex.dev/ns/v0.2.0",
  "timestamp": "2026-10-31T11:13:00.206318+00:00",
  "statements": [
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.vertx/vertx-core@4.5.11-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.vertx/vertx-core@4.5.11-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-29T06:52:39.207467+00:00",
      "status_notes": "Vulnerability CVE-2018-12537 affects version 4.5.11-tuxcare.1 of io.vertx:vertx-core.",
      "vulnerability": {
        "name": "CVE-2018-12537"
      },
      "action_statement": "Vulnerability CVE-2018-12537 affects version 4.5.11-tuxcare.1 of io.vertx:vertx-core."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.vertx/vertx-core@4.5.11-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.vertx/vertx-core@4.5.11-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-29T07:57:13.458746+00:00",
      "status_notes": "Vulnerability CVE-2018-12541 affects version 4.5.11-tuxcare.1 of io.vertx:vertx-core.",
      "vulnerability": {
        "name": "CVE-2018-12541"
      },
      "action_statement": "Vulnerability CVE-2018-12541 affects version 4.5.11-tuxcare.1 of io.vertx:vertx-core."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.vertx/vertx-core@4.5.11-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.vertx/vertx-core@4.5.11-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-29T07:57:13.458746+00:00",
      "status_notes": "Vulnerability CVE-2018-12544 affects version 4.5.11-tuxcare.1 of io.vertx:vertx-core.",
      "vulnerability": {
        "name": "CVE-2018-12544"
      },
      "action_statement": "Vulnerability CVE-2018-12544 affects version 4.5.11-tuxcare.1 of io.vertx:vertx-core."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.vertx/vertx-core@4.5.11-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.vertx/vertx-core@4.5.11-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-29T07:57:13.458746+00:00",
      "status_notes": "Vulnerability CVE-2024-1023 affects version 4.5.11-tuxcare.1 of io.vertx:vertx-core.",
      "vulnerability": {
        "name": "CVE-2024-1023"
      },
      "action_statement": "Vulnerability CVE-2024-1023 affects version 4.5.11-tuxcare.1 of io.vertx:vertx-core."
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:maven/io.vertx/vertx-core@4.5.11-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.vertx/vertx-core@4.5.11-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-31T11:13:00.206318+00:00",
      "status_notes": "Vulnerability CVE-2024-1300 does not affect version 4.5.11-tuxcare.1 of io.vertx:vertx-core. not_affected \u2014 CVE-2024-1300 does not affect this version. The vulnerability (unbounded memory allocation from caching SSL contexts for unknown SNI server names) was fixed in upstream Vert.x release 4.5.11 via commit 7ad34ea9d. TuxCare onboarded this already-fixed version. The fix is present in SslChannelProvider.sslContext() at lines 89-103, which prevents caching when no specific certificate mapping exists ...",
      "justification": "vulnerable_code_not_present",
      "vulnerability": {
        "name": "CVE-2024-1300"
      },
      "impact_statement": "not_affected \u2014 CVE-2024-1300 does not affect this version. The vulnerability (unbounded memory allocation from caching SSL contexts for unknown SNI server names) was fixed in upstream Vert.x release 4.5.11 via commit 7ad34ea9d. TuxCare onboarded this already-fixed version. The fix is present in SslChannelProvider.sslContext() at lines 89-103, which prevents caching when no specific certificate mapping exists ..."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.vertx/vertx-core@4.5.11-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.vertx/vertx-core@4.5.11-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-27T07:43:35.591767+00:00",
      "status_notes": "Vulnerability CVE-2026-1002 affects version 4.5.11-tuxcare.1 of io.vertx:vertx-core.",
      "vulnerability": {
        "name": "CVE-2026-1002"
      },
      "action_statement": "Vulnerability CVE-2026-1002 affects version 4.5.11-tuxcare.1 of io.vertx:vertx-core."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.vertx/vertx-core@4.5.11-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/io.vertx/vertx-core@4.5.11-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-27T07:43:35.591767+00:00",
      "status_notes": "Vulnerability CVE-2026-6860 affects version 4.5.11-tuxcare.1 of io.vertx:vertx-core.",
      "vulnerability": {
        "name": "CVE-2026-6860"
      },
      "action_statement": "Vulnerability CVE-2026-6860 affects version 4.5.11-tuxcare.1 of io.vertx:vertx-core."
    }
  ]
}