{
  "@id": "urn:uuid:e6736bdd-784c-45fa-853b-cbeabee07052",
  "role": "Document Creator",
  "author": "https://tuxcare.com",
  "version": 16,
  "@context": "https://openvex.dev/ns/v0.2.0",
  "timestamp": "2026-10-30T21:29:49.692596+00:00",
  "statements": [
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.cxf.systests/cxf-systests-rs-security@3.4.5-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.cxf.systests/cxf-systests-rs-security@3.4.5-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-29T07:42:31.773838+00:00",
      "status_notes": "Vulnerability CVE-2010-2076 affects version 3.4.5-tuxcare.1 of org.apache.cxf.systests:cxf-systests-rs-security.",
      "vulnerability": {
        "name": "CVE-2010-2076"
      },
      "action_statement": "Vulnerability CVE-2010-2076 affects version 3.4.5-tuxcare.1 of org.apache.cxf.systests:cxf-systests-rs-security."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.cxf.systests/cxf-systests-rs-security@3.4.5-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.cxf.systests/cxf-systests-rs-security@3.4.5-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-29T02:58:41.168574+00:00",
      "status_notes": "Vulnerability CVE-2012-5575 affects version 3.4.5-tuxcare.1 of org.apache.cxf.systests:cxf-systests-rs-security.",
      "vulnerability": {
        "name": "CVE-2012-5575"
      },
      "action_statement": "Vulnerability CVE-2012-5575 affects version 3.4.5-tuxcare.1 of org.apache.cxf.systests:cxf-systests-rs-security."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.cxf.systests/cxf-systests-rs-security@3.4.5-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.cxf.systests/cxf-systests-rs-security@3.4.5-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-29T03:08:22.902372+00:00",
      "status_notes": "Vulnerability CVE-2013-0239 affects version 3.4.5-tuxcare.1 of org.apache.cxf.systests:cxf-systests-rs-security.",
      "vulnerability": {
        "name": "CVE-2013-0239"
      },
      "action_statement": "Vulnerability CVE-2013-0239 affects version 3.4.5-tuxcare.1 of org.apache.cxf.systests:cxf-systests-rs-security."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.cxf.systests/cxf-systests-rs-security@3.4.5-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.cxf.systests/cxf-systests-rs-security@3.4.5-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-29T03:08:22.902372+00:00",
      "status_notes": "Vulnerability CVE-2013-2160 affects version 3.4.5-tuxcare.1 of org.apache.cxf.systests:cxf-systests-rs-security.",
      "vulnerability": {
        "name": "CVE-2013-2160"
      },
      "action_statement": "Vulnerability CVE-2013-2160 affects version 3.4.5-tuxcare.1 of org.apache.cxf.systests:cxf-systests-rs-security."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.cxf.systests/cxf-systests-rs-security@3.4.5-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.cxf.systests/cxf-systests-rs-security@3.4.5-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-29T12:34:45.947906+00:00",
      "status_notes": "Vulnerability CVE-2014-0035 affects version 3.4.5-tuxcare.1 of org.apache.cxf.systests:cxf-systests-rs-security.",
      "vulnerability": {
        "name": "CVE-2014-0035"
      },
      "action_statement": "Vulnerability CVE-2014-0035 affects version 3.4.5-tuxcare.1 of org.apache.cxf.systests:cxf-systests-rs-security."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.cxf.systests/cxf-systests-rs-security@3.4.5-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.cxf.systests/cxf-systests-rs-security@3.4.5-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-29T12:34:45.947906+00:00",
      "status_notes": "Vulnerability CVE-2014-0109 affects version 3.4.5-tuxcare.1 of org.apache.cxf.systests:cxf-systests-rs-security.",
      "vulnerability": {
        "name": "CVE-2014-0109"
      },
      "action_statement": "Vulnerability CVE-2014-0109 affects version 3.4.5-tuxcare.1 of org.apache.cxf.systests:cxf-systests-rs-security."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.cxf.systests/cxf-systests-rs-security@3.4.5-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.cxf.systests/cxf-systests-rs-security@3.4.5-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-29T12:34:45.947906+00:00",
      "status_notes": "Vulnerability CVE-2014-0110 affects version 3.4.5-tuxcare.1 of org.apache.cxf.systests:cxf-systests-rs-security.",
      "vulnerability": {
        "name": "CVE-2014-0110"
      },
      "action_statement": "Vulnerability CVE-2014-0110 affects version 3.4.5-tuxcare.1 of org.apache.cxf.systests:cxf-systests-rs-security."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.cxf.systests/cxf-systests-rs-security@3.4.5-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.cxf.systests/cxf-systests-rs-security@3.4.5-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-29T03:08:22.902372+00:00",
      "status_notes": "Vulnerability CVE-2014-3584 affects version 3.4.5-tuxcare.1 of org.apache.cxf.systests:cxf-systests-rs-security.",
      "vulnerability": {
        "name": "CVE-2014-3584"
      },
      "action_statement": "Vulnerability CVE-2014-3584 affects version 3.4.5-tuxcare.1 of org.apache.cxf.systests:cxf-systests-rs-security."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.cxf.systests/cxf-systests-rs-security@3.4.5-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.cxf.systests/cxf-systests-rs-security@3.4.5-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-29T01:02:19.900071+00:00",
      "status_notes": "Vulnerability CVE-2016-6812 affects version 3.4.5-tuxcare.1 of org.apache.cxf.systests:cxf-systests-rs-security.",
      "vulnerability": {
        "name": "CVE-2016-6812"
      },
      "action_statement": "Vulnerability CVE-2016-6812 affects version 3.4.5-tuxcare.1 of org.apache.cxf.systests:cxf-systests-rs-security."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.cxf.systests/cxf-systests-rs-security@3.4.5-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.cxf.systests/cxf-systests-rs-security@3.4.5-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-29T01:02:19.900071+00:00",
      "status_notes": "Vulnerability CVE-2016-8739 affects version 3.4.5-tuxcare.1 of org.apache.cxf.systests:cxf-systests-rs-security.",
      "vulnerability": {
        "name": "CVE-2016-8739"
      },
      "action_statement": "Vulnerability CVE-2016-8739 affects version 3.4.5-tuxcare.1 of org.apache.cxf.systests:cxf-systests-rs-security."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.cxf.systests/cxf-systests-rs-security@3.4.5-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.cxf.systests/cxf-systests-rs-security@3.4.5-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-29T01:02:19.900071+00:00",
      "status_notes": "Vulnerability CVE-2017-12624 affects version 3.4.5-tuxcare.1 of org.apache.cxf.systests:cxf-systests-rs-security.",
      "vulnerability": {
        "name": "CVE-2017-12624"
      },
      "action_statement": "Vulnerability CVE-2017-12624 affects version 3.4.5-tuxcare.1 of org.apache.cxf.systests:cxf-systests-rs-security."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.cxf.systests/cxf-systests-rs-security@3.4.5-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.cxf.systests/cxf-systests-rs-security@3.4.5-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-29T01:02:19.900071+00:00",
      "status_notes": "Vulnerability CVE-2017-5653 affects version 3.4.5-tuxcare.1 of org.apache.cxf.systests:cxf-systests-rs-security.",
      "vulnerability": {
        "name": "CVE-2017-5653"
      },
      "action_statement": "Vulnerability CVE-2017-5653 affects version 3.4.5-tuxcare.1 of org.apache.cxf.systests:cxf-systests-rs-security."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.cxf.systests/cxf-systests-rs-security@3.4.5-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.cxf.systests/cxf-systests-rs-security@3.4.5-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-29T01:02:19.900071+00:00",
      "status_notes": "Vulnerability CVE-2017-5656 affects version 3.4.5-tuxcare.1 of org.apache.cxf.systests:cxf-systests-rs-security.",
      "vulnerability": {
        "name": "CVE-2017-5656"
      },
      "action_statement": "Vulnerability CVE-2017-5656 affects version 3.4.5-tuxcare.1 of org.apache.cxf.systests:cxf-systests-rs-security."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.cxf.systests/cxf-systests-rs-security@3.4.5-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.cxf.systests/cxf-systests-rs-security@3.4.5-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-28T22:44:11.275398+00:00",
      "status_notes": "Vulnerability CVE-2018-8039 affects version 3.4.5-tuxcare.1 of org.apache.cxf.systests:cxf-systests-rs-security.",
      "vulnerability": {
        "name": "CVE-2018-8039"
      },
      "action_statement": "Vulnerability CVE-2018-8039 affects version 3.4.5-tuxcare.1 of org.apache.cxf.systests:cxf-systests-rs-security."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/org.apache.cxf.systests/cxf-systests-rs-security@3.4.5-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.cxf.systests/cxf-systests-rs-security@3.4.5-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2022-46363 is fixed in version 3.4.5-tuxcare.1 of org.apache.cxf.systests:cxf-systests-rs-security.",
      "vulnerability": {
        "name": "CVE-2022-46363"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/org.apache.cxf.systests/cxf-systests-rs-security@3.4.5-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.cxf.systests/cxf-systests-rs-security@3.4.5-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2022-46364 is fixed in version 3.4.5-tuxcare.1 of org.apache.cxf.systests:cxf-systests-rs-security.",
      "vulnerability": {
        "name": "CVE-2022-46364"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/org.apache.cxf.systests/cxf-systests-rs-security@3.4.5-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.cxf.systests/cxf-systests-rs-security@3.4.5-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2024-32007 is fixed in version 3.4.5-tuxcare.1 of org.apache.cxf.systests:cxf-systests-rs-security.",
      "vulnerability": {
        "name": "CVE-2024-32007"
      }
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.cxf.systests/cxf-systests-rs-security@3.4.5-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.cxf.systests/cxf-systests-rs-security@3.4.5-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-29T12:34:45.947906+00:00",
      "status_notes": "Vulnerability CVE-2024-41172 affects version 3.4.5-tuxcare.1 of org.apache.cxf.systests:cxf-systests-rs-security.",
      "vulnerability": {
        "name": "CVE-2024-41172"
      },
      "action_statement": "Vulnerability CVE-2024-41172 affects version 3.4.5-tuxcare.1 of org.apache.cxf.systests:cxf-systests-rs-security."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.cxf.systests/cxf-systests-rs-security@3.4.5-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.cxf.systests/cxf-systests-rs-security@3.4.5-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2025-23184 affects version 3.4.5-tuxcare.1 of org.apache.cxf.systests:cxf-systests-rs-security.",
      "vulnerability": {
        "name": "CVE-2025-23184"
      },
      "action_statement": "Vulnerability CVE-2025-23184 affects version 3.4.5-tuxcare.1 of org.apache.cxf.systests:cxf-systests-rs-security."
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.cxf.systests/cxf-systests-rs-security@3.4.5-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.cxf.systests/cxf-systests-rs-security@3.4.5-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2025-48795 does not affect version 3.4.5-tuxcare.1 of org.apache.cxf.systests:cxf-systests-rs-security. not_affected \u2014 Version 3.4.5 does not contain the vulnerable code path. The CVE-2025-48795 vulnerability exists in DelayedCachedOutputStreamCleaner class which was introduced in version 3.5.11 (September 2024). Version 3.4.5 predates this component and lacks the leak detection logging mechanism that causes the vulnerability.",
      "justification": "vulnerable_code_not_present",
      "vulnerability": {
        "name": "CVE-2025-48795"
      },
      "impact_statement": "not_affected \u2014 Version 3.4.5 does not contain the vulnerable code path. The CVE-2025-48795 vulnerability exists in DelayedCachedOutputStreamCleaner class which was introduced in version 3.5.11 (September 2024). Version 3.4.5 predates this component and lacks the leak detection logging mechanism that causes the vulnerability."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.cxf.systests/cxf-systests-rs-security@3.4.5-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.cxf.systests/cxf-systests-rs-security@3.4.5-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-09T10:35:00.151559+00:00",
      "status_notes": "Vulnerability CVE-2026-100227 affects version 3.4.5-tuxcare.1 of org.apache.cxf.systests:cxf-systests-rs-security.",
      "vulnerability": {
        "name": "CVE-2026-100227"
      },
      "action_statement": "Vulnerability CVE-2026-100227 affects version 3.4.5-tuxcare.1 of org.apache.cxf.systests:cxf-systests-rs-security."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.cxf.systests/cxf-systests-rs-security@3.4.5-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.cxf.systests/cxf-systests-rs-security@3.4.5-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-09T10:35:00.151559+00:00",
      "status_notes": "Vulnerability CVE-2026-107937 affects version 3.4.5-tuxcare.1 of org.apache.cxf.systests:cxf-systests-rs-security.",
      "vulnerability": {
        "name": "CVE-2026-107937"
      },
      "action_statement": "Vulnerability CVE-2026-107937 affects version 3.4.5-tuxcare.1 of org.apache.cxf.systests:cxf-systests-rs-security."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.cxf.systests/cxf-systests-rs-security@3.4.5-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.cxf.systests/cxf-systests-rs-security@3.4.5-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-09T10:36:00.171692+00:00",
      "status_notes": "Vulnerability CVE-2026-108039 affects version 3.4.5-tuxcare.1 of org.apache.cxf.systests:cxf-systests-rs-security.",
      "vulnerability": {
        "name": "CVE-2026-108039"
      },
      "action_statement": "Vulnerability CVE-2026-108039 affects version 3.4.5-tuxcare.1 of org.apache.cxf.systests:cxf-systests-rs-security."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.cxf.systests/cxf-systests-rs-security@3.4.5-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.cxf.systests/cxf-systests-rs-security@3.4.5-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-49875 affects version 3.4.5-tuxcare.1 of org.apache.cxf.systests:cxf-systests-rs-security.",
      "vulnerability": {
        "name": "CVE-2026-49875"
      },
      "action_statement": "Vulnerability CVE-2026-49875 affects version 3.4.5-tuxcare.1 of org.apache.cxf.systests:cxf-systests-rs-security."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.cxf.systests/cxf-systests-rs-security@3.4.5-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.cxf.systests/cxf-systests-rs-security@3.4.5-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-50623 affects version 3.4.5-tuxcare.1 of org.apache.cxf.systests:cxf-systests-rs-security.",
      "vulnerability": {
        "name": "CVE-2026-50623"
      },
      "action_statement": "Vulnerability CVE-2026-50623 affects version 3.4.5-tuxcare.1 of org.apache.cxf.systests:cxf-systests-rs-security."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.cxf.systests/cxf-systests-rs-security@3.4.5-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.cxf.systests/cxf-systests-rs-security@3.4.5-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-50627 affects version 3.4.5-tuxcare.1 of org.apache.cxf.systests:cxf-systests-rs-security.",
      "vulnerability": {
        "name": "CVE-2026-50627"
      },
      "action_statement": "Vulnerability CVE-2026-50627 affects version 3.4.5-tuxcare.1 of org.apache.cxf.systests:cxf-systests-rs-security."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.cxf.systests/cxf-systests-rs-security@3.4.5-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.cxf.systests/cxf-systests-rs-security@3.4.5-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-50628 affects version 3.4.5-tuxcare.1 of org.apache.cxf.systests:cxf-systests-rs-security.",
      "vulnerability": {
        "name": "CVE-2026-50628"
      },
      "action_statement": "Vulnerability CVE-2026-50628 affects version 3.4.5-tuxcare.1 of org.apache.cxf.systests:cxf-systests-rs-security."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.cxf.systests/cxf-systests-rs-security@3.4.5-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.cxf.systests/cxf-systests-rs-security@3.4.5-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-50629 affects version 3.4.5-tuxcare.1 of org.apache.cxf.systests:cxf-systests-rs-security.",
      "vulnerability": {
        "name": "CVE-2026-50629"
      },
      "action_statement": "Vulnerability CVE-2026-50629 affects version 3.4.5-tuxcare.1 of org.apache.cxf.systests:cxf-systests-rs-security."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.cxf.systests/cxf-systests-rs-security@3.4.5-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.cxf.systests/cxf-systests-rs-security@3.4.5-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-50630 affects version 3.4.5-tuxcare.1 of org.apache.cxf.systests:cxf-systests-rs-security.",
      "vulnerability": {
        "name": "CVE-2026-50630"
      },
      "action_statement": "Vulnerability CVE-2026-50630 affects version 3.4.5-tuxcare.1 of org.apache.cxf.systests:cxf-systests-rs-security."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.cxf.systests/cxf-systests-rs-security@3.4.5-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.cxf.systests/cxf-systests-rs-security@3.4.5-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-50631 affects version 3.4.5-tuxcare.1 of org.apache.cxf.systests:cxf-systests-rs-security.",
      "vulnerability": {
        "name": "CVE-2026-50631"
      },
      "action_statement": "Vulnerability CVE-2026-50631 affects version 3.4.5-tuxcare.1 of org.apache.cxf.systests:cxf-systests-rs-security."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.cxf.systests/cxf-systests-rs-security@3.4.5-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.cxf.systests/cxf-systests-rs-security@3.4.5-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-50634 affects version 3.4.5-tuxcare.1 of org.apache.cxf.systests:cxf-systests-rs-security.",
      "vulnerability": {
        "name": "CVE-2026-50634"
      },
      "action_statement": "Vulnerability CVE-2026-50634 affects version 3.4.5-tuxcare.1 of org.apache.cxf.systests:cxf-systests-rs-security."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.cxf.systests/cxf-systests-rs-security@3.4.5-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.cxf.systests/cxf-systests-rs-security@3.4.5-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-50645 affects version 3.4.5-tuxcare.1 of org.apache.cxf.systests:cxf-systests-rs-security.",
      "vulnerability": {
        "name": "CVE-2026-50645"
      },
      "action_statement": "Vulnerability CVE-2026-50645 affects version 3.4.5-tuxcare.1 of org.apache.cxf.systests:cxf-systests-rs-security."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.cxf.systests/cxf-systests-rs-security@3.4.5-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.cxf.systests/cxf-systests-rs-security@3.4.5-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-30T21:29:49.692596+00:00",
      "status_notes": "Vulnerability CVE-2026-54225 affects version 3.4.5-tuxcare.1 of org.apache.cxf.systests:cxf-systests-rs-security.",
      "vulnerability": {
        "name": "CVE-2026-54225"
      },
      "action_statement": "Vulnerability CVE-2026-54225 affects version 3.4.5-tuxcare.1 of org.apache.cxf.systests:cxf-systests-rs-security."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.cxf.systests/cxf-systests-rs-security@3.4.5-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.cxf.systests/cxf-systests-rs-security@3.4.5-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-30T21:29:49.692596+00:00",
      "status_notes": "Vulnerability CVE-2026-57817 affects version 3.4.5-tuxcare.1 of org.apache.cxf.systests:cxf-systests-rs-security.",
      "vulnerability": {
        "name": "CVE-2026-57817"
      },
      "action_statement": "Vulnerability CVE-2026-57817 affects version 3.4.5-tuxcare.1 of org.apache.cxf.systests:cxf-systests-rs-security."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.cxf.systests/cxf-systests-rs-security@3.4.5-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.cxf.systests/cxf-systests-rs-security@3.4.5-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-30T21:29:49.692596+00:00",
      "status_notes": "Vulnerability CVE-2026-57818 affects version 3.4.5-tuxcare.1 of org.apache.cxf.systests:cxf-systests-rs-security.",
      "vulnerability": {
        "name": "CVE-2026-57818"
      },
      "action_statement": "Vulnerability CVE-2026-57818 affects version 3.4.5-tuxcare.1 of org.apache.cxf.systests:cxf-systests-rs-security."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.cxf.systests/cxf-systests-rs-security@3.4.5-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.cxf.systests/cxf-systests-rs-security@3.4.5-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-30T21:29:49.692596+00:00",
      "status_notes": "Vulnerability CVE-2026-57819 affects version 3.4.5-tuxcare.1 of org.apache.cxf.systests:cxf-systests-rs-security.",
      "vulnerability": {
        "name": "CVE-2026-57819"
      },
      "action_statement": "Vulnerability CVE-2026-57819 affects version 3.4.5-tuxcare.1 of org.apache.cxf.systests:cxf-systests-rs-security."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.cxf.systests/cxf-systests-rs-security@3.4.5-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.cxf.systests/cxf-systests-rs-security@3.4.5-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-30T21:29:49.692596+00:00",
      "status_notes": "Vulnerability CVE-2026-61466 affects version 3.4.5-tuxcare.1 of org.apache.cxf.systests:cxf-systests-rs-security.",
      "vulnerability": {
        "name": "CVE-2026-61466"
      },
      "action_statement": "Vulnerability CVE-2026-61466 affects version 3.4.5-tuxcare.1 of org.apache.cxf.systests:cxf-systests-rs-security."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.cxf.systests/cxf-systests-rs-security@3.4.5-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.cxf.systests/cxf-systests-rs-security@3.4.5-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-30T21:29:49.692596+00:00",
      "status_notes": "Vulnerability CVE-2026-63687 affects version 3.4.5-tuxcare.1 of org.apache.cxf.systests:cxf-systests-rs-security.",
      "vulnerability": {
        "name": "CVE-2026-63687"
      },
      "action_statement": "Vulnerability CVE-2026-63687 affects version 3.4.5-tuxcare.1 of org.apache.cxf.systests:cxf-systests-rs-security."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.cxf.systests/cxf-systests-rs-security@3.4.5-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.cxf.systests/cxf-systests-rs-security@3.4.5-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-30T21:29:49.692596+00:00",
      "status_notes": "Vulnerability CVE-2026-64958 affects version 3.4.5-tuxcare.1 of org.apache.cxf.systests:cxf-systests-rs-security.",
      "vulnerability": {
        "name": "CVE-2026-64958"
      },
      "action_statement": "Vulnerability CVE-2026-64958 affects version 3.4.5-tuxcare.1 of org.apache.cxf.systests:cxf-systests-rs-security."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.cxf.systests/cxf-systests-rs-security@3.4.5-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.cxf.systests/cxf-systests-rs-security@3.4.5-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-30T21:29:49.692596+00:00",
      "status_notes": "Vulnerability CVE-2026-65432 affects version 3.4.5-tuxcare.1 of org.apache.cxf.systests:cxf-systests-rs-security.",
      "vulnerability": {
        "name": "CVE-2026-65432"
      },
      "action_statement": "Vulnerability CVE-2026-65432 affects version 3.4.5-tuxcare.1 of org.apache.cxf.systests:cxf-systests-rs-security."
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.cxf.systests/cxf-systests-rs-security@3.4.5-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.cxf.systests/cxf-systests-rs-security@3.4.5-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-30T21:29:49.692596+00:00",
      "status_notes": "Vulnerability CVE-2026-65583 does not affect version 3.4.5-tuxcare.1 of org.apache.cxf.systests:cxf-systests-rs-security. not_affected \u2014 Apache CXF 3.4.5 contains the vulnerable code pattern (empty validateSelfIssuedProvider method), but the vulnerability is NOT exploitable in the default configuration. The supportSelfIssuedProvider flag defaults to false, causing self-issued OIDC tokens to be rejected by normal issuer validation logic. Exploitation requires explicit configuration via setSupportSelfIssuedProvider(true), which is...",
      "vulnerability": {
        "name": "CVE-2026-65583"
      },
      "impact_statement": "not_affected \u2014 Apache CXF 3.4.5 contains the vulnerable code pattern (empty validateSelfIssuedProvider method), but the vulnerability is NOT exploitable in the default configuration. The supportSelfIssuedProvider flag defaults to false, causing self-issued OIDC tokens to be rejected by normal issuer validation logic. Exploitation requires explicit configuration via setSupportSelfIssuedProvider(true), which is..."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.cxf.systests/cxf-systests-rs-security@3.4.5-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.cxf.systests/cxf-systests-rs-security@3.4.5-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-30T21:29:49.692596+00:00",
      "status_notes": "Vulnerability CVE-2026-68079 affects version 3.4.5-tuxcare.1 of org.apache.cxf.systests:cxf-systests-rs-security.",
      "vulnerability": {
        "name": "CVE-2026-68079"
      },
      "action_statement": "Vulnerability CVE-2026-68079 affects version 3.4.5-tuxcare.1 of org.apache.cxf.systests:cxf-systests-rs-security."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.cxf.systests/cxf-systests-rs-security@3.4.5-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.cxf.systests/cxf-systests-rs-security@3.4.5-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-30T21:29:49.692596+00:00",
      "status_notes": "Vulnerability CVE-2026-68481 affects version 3.4.5-tuxcare.1 of org.apache.cxf.systests:cxf-systests-rs-security.",
      "vulnerability": {
        "name": "CVE-2026-68481"
      },
      "action_statement": "Vulnerability CVE-2026-68481 affects version 3.4.5-tuxcare.1 of org.apache.cxf.systests:cxf-systests-rs-security."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.cxf.systests/cxf-systests-rs-security@3.4.5-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.cxf.systests/cxf-systests-rs-security@3.4.5-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-09T10:36:00.171692+00:00",
      "status_notes": "Vulnerability CVE-2026-71575 affects version 3.4.5-tuxcare.1 of org.apache.cxf.systests:cxf-systests-rs-security.",
      "vulnerability": {
        "name": "CVE-2026-71575"
      },
      "action_statement": "Vulnerability CVE-2026-71575 affects version 3.4.5-tuxcare.1 of org.apache.cxf.systests:cxf-systests-rs-security."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.cxf.systests/cxf-systests-rs-security@3.4.5-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.cxf.systests/cxf-systests-rs-security@3.4.5-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-09T10:36:00.171692+00:00",
      "status_notes": "Vulnerability CVE-2026-73179 affects version 3.4.5-tuxcare.1 of org.apache.cxf.systests:cxf-systests-rs-security.",
      "vulnerability": {
        "name": "CVE-2026-73179"
      },
      "action_statement": "Vulnerability CVE-2026-73179 affects version 3.4.5-tuxcare.1 of org.apache.cxf.systests:cxf-systests-rs-security."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.cxf.systests/cxf-systests-rs-security@3.4.5-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.cxf.systests/cxf-systests-rs-security@3.4.5-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-09T10:37:00.118141+00:00",
      "status_notes": "Vulnerability CVE-2026-78384 affects version 3.4.5-tuxcare.1 of org.apache.cxf.systests:cxf-systests-rs-security.",
      "vulnerability": {
        "name": "CVE-2026-78384"
      },
      "action_statement": "Vulnerability CVE-2026-78384 affects version 3.4.5-tuxcare.1 of org.apache.cxf.systests:cxf-systests-rs-security."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.cxf.systests/cxf-systests-rs-security@3.4.5-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.cxf.systests/cxf-systests-rs-security@3.4.5-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-09T10:37:00.118141+00:00",
      "status_notes": "Vulnerability CVE-2026-79650 affects version 3.4.5-tuxcare.1 of org.apache.cxf.systests:cxf-systests-rs-security.",
      "vulnerability": {
        "name": "CVE-2026-79650"
      },
      "action_statement": "Vulnerability CVE-2026-79650 affects version 3.4.5-tuxcare.1 of org.apache.cxf.systests:cxf-systests-rs-security."
    }
  ]
}