{
  "@id": "urn:uuid:46a5cf53-4355-45fa-a8c8-9ee9990b0b44",
  "role": "Document Creator",
  "author": "https://tuxcare.com",
  "version": 10,
  "@context": "https://openvex.dev/ns/v0.2.0",
  "timestamp": "2026-10-31T09:03:00.096673+00:00",
  "statements": [
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.activemq/apache-artemis@2.26.0-tuxcare.2",
          "identifiers": {
            "purl": "pkg:maven/org.apache.activemq/apache-artemis@2.26.0-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-10-29T01:17:49.776988+00:00",
      "status_notes": "Vulnerability CVE-2020-10727 affects version 2.26.0-tuxcare.2 of org.apache.activemq:apache-artemis.",
      "vulnerability": {
        "name": "CVE-2020-10727"
      },
      "action_statement": "Vulnerability CVE-2020-10727 affects version 2.26.0-tuxcare.2 of org.apache.activemq:apache-artemis."
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.activemq/apache-artemis@2.26.0-tuxcare.2",
          "identifiers": {
            "purl": "pkg:maven/org.apache.activemq/apache-artemis@2.26.0-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-10-31T09:03:00.096673+00:00",
      "status_notes": "Vulnerability CVE-2020-13932 does not affect version 2.26.0-tuxcare.2 of org.apache.activemq:apache-artemis. not_affected \u2014 Apache ActiveMQ Artemis 2.26.0 is not affected by CVE-2020-13932 (XSS in admin console diagram plugin). The upstream fix (commit a69b2aee7b, ARTEMIS-2836) that added Core.escapeHtml() protection was already present in the upstream 2.26.0 release when TuxCare onboarded it. Additionally, the entire vulnerable code path was subsequently removed by the HawtIO 2 migration (commit 0ce173dcb5, ARTEMIS...",
      "justification": "vulnerable_code_not_present",
      "vulnerability": {
        "name": "CVE-2020-13932"
      },
      "impact_statement": "not_affected \u2014 Apache ActiveMQ Artemis 2.26.0 is not affected by CVE-2020-13932 (XSS in admin console diagram plugin). The upstream fix (commit a69b2aee7b, ARTEMIS-2836) that added Core.escapeHtml() protection was already present in the upstream 2.26.0 release when TuxCare onboarded it. Additionally, the entire vulnerable code path was subsequently removed by the HawtIO 2 migration (commit 0ce173dcb5, ARTEMIS..."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.activemq/apache-artemis@2.26.0-tuxcare.2",
          "identifiers": {
            "purl": "pkg:maven/org.apache.activemq/apache-artemis@2.26.0-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-10-28T21:58:36.804623+00:00",
      "status_notes": "Vulnerability CVE-2021-26117 affects version 2.26.0-tuxcare.2 of org.apache.activemq:apache-artemis.",
      "vulnerability": {
        "name": "CVE-2021-26117"
      },
      "action_statement": "Vulnerability CVE-2021-26117 affects version 2.26.0-tuxcare.2 of org.apache.activemq:apache-artemis."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.activemq/apache-artemis@2.26.0-tuxcare.2",
          "identifiers": {
            "purl": "pkg:maven/org.apache.activemq/apache-artemis@2.26.0-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-10-28T22:44:11.275398+00:00",
      "status_notes": "Vulnerability CVE-2021-26118 affects version 2.26.0-tuxcare.2 of org.apache.activemq:apache-artemis.",
      "vulnerability": {
        "name": "CVE-2021-26118"
      },
      "action_statement": "Vulnerability CVE-2021-26118 affects version 2.26.0-tuxcare.2 of org.apache.activemq:apache-artemis."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.activemq/apache-artemis@2.26.0-tuxcare.2",
          "identifiers": {
            "purl": "pkg:maven/org.apache.activemq/apache-artemis@2.26.0-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-10-28T22:44:11.275398+00:00",
      "status_notes": "Vulnerability CVE-2021-4040 affects version 2.26.0-tuxcare.2 of org.apache.activemq:apache-artemis.",
      "vulnerability": {
        "name": "CVE-2021-4040"
      },
      "action_statement": "Vulnerability CVE-2021-4040 affects version 2.26.0-tuxcare.2 of org.apache.activemq:apache-artemis."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.activemq/apache-artemis@2.26.0-tuxcare.2",
          "identifiers": {
            "purl": "pkg:maven/org.apache.activemq/apache-artemis@2.26.0-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-10-28T22:44:11.275398+00:00",
      "status_notes": "Vulnerability CVE-2022-23913 affects version 2.26.0-tuxcare.2 of org.apache.activemq:apache-artemis.",
      "vulnerability": {
        "name": "CVE-2022-23913"
      },
      "action_statement": "Vulnerability CVE-2022-23913 affects version 2.26.0-tuxcare.2 of org.apache.activemq:apache-artemis."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.activemq/apache-artemis@2.26.0-tuxcare.2",
          "identifiers": {
            "purl": "pkg:maven/org.apache.activemq/apache-artemis@2.26.0-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-10-28T22:44:11.275398+00:00",
      "status_notes": "Vulnerability CVE-2022-35278 affects version 2.26.0-tuxcare.2 of org.apache.activemq:apache-artemis.",
      "vulnerability": {
        "name": "CVE-2022-35278"
      },
      "action_statement": "Vulnerability CVE-2022-35278 affects version 2.26.0-tuxcare.2 of org.apache.activemq:apache-artemis."
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.activemq/apache-artemis@2.26.0-tuxcare.2",
          "identifiers": {
            "purl": "pkg:maven/org.apache.activemq/apache-artemis@2.26.0-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2023-50780 does not affect version 2.26.0-tuxcare.2 of org.apache.activemq:apache-artemis. not_affected \u2014 CVE-2023-50780 targets Log4J2 MBean exposure via Jolokia endpoint. Target version 2.26.0 uses JBoss LogManager instead of Log4J2, making the Log4J2 MBean vulnerability pattern inapplicable. The logging framework migration to Log4J2 occurred in version 2.27.0 (ARTEMIS-4020), after this version.",
      "justification": "vulnerable_code_not_present",
      "vulnerability": {
        "name": "CVE-2023-50780"
      },
      "impact_statement": "not_affected \u2014 CVE-2023-50780 targets Log4J2 MBean exposure via Jolokia endpoint. Target version 2.26.0 uses JBoss LogManager instead of Log4J2, making the Log4J2 MBean vulnerability pattern inapplicable. The logging framework migration to Log4J2 occurred in version 2.27.0 (ARTEMIS-4020), after this version."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.activemq/apache-artemis@2.26.0-tuxcare.2",
          "identifiers": {
            "purl": "pkg:maven/org.apache.activemq/apache-artemis@2.26.0-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2025-27391 affects version 2.26.0-tuxcare.2 of org.apache.activemq:apache-artemis.",
      "vulnerability": {
        "name": "CVE-2025-27391"
      },
      "action_statement": "Vulnerability CVE-2025-27391 affects version 2.26.0-tuxcare.2 of org.apache.activemq:apache-artemis."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/org.apache.activemq/apache-artemis@2.26.0-tuxcare.2",
          "identifiers": {
            "purl": "pkg:maven/org.apache.activemq/apache-artemis@2.26.0-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2025-27427 is fixed in version 2.26.0-tuxcare.2 of org.apache.activemq:apache-artemis.",
      "vulnerability": {
        "name": "CVE-2025-27427"
      }
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.activemq/apache-artemis@2.26.0-tuxcare.2",
          "identifiers": {
            "purl": "pkg:maven/org.apache.activemq/apache-artemis@2.26.0-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-27446 affects version 2.26.0-tuxcare.2 of org.apache.activemq:apache-artemis, and is fixed in 2.26.0-tuxcare.3.",
      "vulnerability": {
        "name": "CVE-2026-27446"
      },
      "action_statement": "Vulnerability CVE-2026-27446 affects version 2.26.0-tuxcare.2 of org.apache.activemq:apache-artemis, and is fixed in 2.26.0-tuxcare.3."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.activemq/apache-artemis@2.26.0-tuxcare.2",
          "identifiers": {
            "purl": "pkg:maven/org.apache.activemq/apache-artemis@2.26.0-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-32642 affects version 2.26.0-tuxcare.2 of org.apache.activemq:apache-artemis.",
      "vulnerability": {
        "name": "CVE-2026-32642"
      },
      "action_statement": "Vulnerability CVE-2026-32642 affects version 2.26.0-tuxcare.2 of org.apache.activemq:apache-artemis."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.activemq/apache-artemis@2.26.0-tuxcare.2",
          "identifiers": {
            "purl": "pkg:maven/org.apache.activemq/apache-artemis@2.26.0-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-10-30T21:32:31.619248+00:00",
      "status_notes": "Vulnerability CVE-2026-49362 affects version 2.26.0-tuxcare.2 of org.apache.activemq:apache-artemis.",
      "vulnerability": {
        "name": "CVE-2026-49362"
      },
      "action_statement": "Vulnerability CVE-2026-49362 affects version 2.26.0-tuxcare.2 of org.apache.activemq:apache-artemis."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.activemq/apache-artemis@2.26.0-tuxcare.2",
          "identifiers": {
            "purl": "pkg:maven/org.apache.activemq/apache-artemis@2.26.0-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-10-30T21:35:35.108755+00:00",
      "status_notes": "Vulnerability CVE-2026-49363 affects version 2.26.0-tuxcare.2 of org.apache.activemq:apache-artemis.",
      "vulnerability": {
        "name": "CVE-2026-49363"
      },
      "action_statement": "Vulnerability CVE-2026-49363 affects version 2.26.0-tuxcare.2 of org.apache.activemq:apache-artemis."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.activemq/apache-artemis@2.26.0-tuxcare.2",
          "identifiers": {
            "purl": "pkg:maven/org.apache.activemq/apache-artemis@2.26.0-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-10-30T21:32:31.619248+00:00",
      "status_notes": "Vulnerability CVE-2026-49364 affects version 2.26.0-tuxcare.2 of org.apache.activemq:apache-artemis.",
      "vulnerability": {
        "name": "CVE-2026-49364"
      },
      "action_statement": "Vulnerability CVE-2026-49364 affects version 2.26.0-tuxcare.2 of org.apache.activemq:apache-artemis."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.activemq/apache-artemis@2.26.0-tuxcare.2",
          "identifiers": {
            "purl": "pkg:maven/org.apache.activemq/apache-artemis@2.26.0-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-10-30T21:32:31.619248+00:00",
      "status_notes": "Vulnerability CVE-2026-57822 affects version 2.26.0-tuxcare.2 of org.apache.activemq:apache-artemis.",
      "vulnerability": {
        "name": "CVE-2026-57822"
      },
      "action_statement": "Vulnerability CVE-2026-57822 affects version 2.26.0-tuxcare.2 of org.apache.activemq:apache-artemis."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.activemq/apache-artemis@2.26.0-tuxcare.2",
          "identifiers": {
            "purl": "pkg:maven/org.apache.activemq/apache-artemis@2.26.0-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-10-30T21:32:31.619248+00:00",
      "status_notes": "Vulnerability CVE-2026-57967 affects version 2.26.0-tuxcare.2 of org.apache.activemq:apache-artemis.",
      "vulnerability": {
        "name": "CVE-2026-57967"
      },
      "action_statement": "Vulnerability CVE-2026-57967 affects version 2.26.0-tuxcare.2 of org.apache.activemq:apache-artemis."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.activemq/apache-artemis@2.26.0-tuxcare.2",
          "identifiers": {
            "purl": "pkg:maven/org.apache.activemq/apache-artemis@2.26.0-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-10-30T21:32:31.619248+00:00",
      "status_notes": "Vulnerability CVE-2026-67593 affects version 2.26.0-tuxcare.2 of org.apache.activemq:apache-artemis.",
      "vulnerability": {
        "name": "CVE-2026-67593"
      },
      "action_statement": "Vulnerability CVE-2026-67593 affects version 2.26.0-tuxcare.2 of org.apache.activemq:apache-artemis."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.activemq/apache-artemis@2.26.0-tuxcare.2",
          "identifiers": {
            "purl": "pkg:maven/org.apache.activemq/apache-artemis@2.26.0-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-10-30T21:32:31.619248+00:00",
      "status_notes": "Vulnerability CVE-2026-75880 affects version 2.26.0-tuxcare.2 of org.apache.activemq:apache-artemis.",
      "vulnerability": {
        "name": "CVE-2026-75880"
      },
      "action_statement": "Vulnerability CVE-2026-75880 affects version 2.26.0-tuxcare.2 of org.apache.activemq:apache-artemis."
    }
  ]
}