{
  "@id": "urn:uuid:be5382e5-5bb0-4a70-8385-fd1fd767f740",
  "role": "Document Creator",
  "author": "https://tuxcare.com",
  "version": 16,
  "@context": "https://openvex.dev/ns/v0.2.0",
  "timestamp": "2026-10-30T21:29:49.692596+00:00",
  "statements": [
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.cxf/cxf-tools-validator@3.4.5-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.cxf/cxf-tools-validator@3.4.5-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-29T12:34:45.947906+00:00",
      "status_notes": "Vulnerability CVE-2014-0035 affects version 3.4.5-tuxcare.1 of org.apache.cxf:cxf-tools-validator.",
      "vulnerability": {
        "name": "CVE-2014-0035"
      },
      "action_statement": "Vulnerability CVE-2014-0035 affects version 3.4.5-tuxcare.1 of org.apache.cxf:cxf-tools-validator."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.cxf/cxf-tools-validator@3.4.5-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.cxf/cxf-tools-validator@3.4.5-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-29T12:34:45.947906+00:00",
      "status_notes": "Vulnerability CVE-2014-0109 affects version 3.4.5-tuxcare.1 of org.apache.cxf:cxf-tools-validator.",
      "vulnerability": {
        "name": "CVE-2014-0109"
      },
      "action_statement": "Vulnerability CVE-2014-0109 affects version 3.4.5-tuxcare.1 of org.apache.cxf:cxf-tools-validator."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.cxf/cxf-tools-validator@3.4.5-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.cxf/cxf-tools-validator@3.4.5-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-29T12:34:45.947906+00:00",
      "status_notes": "Vulnerability CVE-2014-0110 affects version 3.4.5-tuxcare.1 of org.apache.cxf:cxf-tools-validator.",
      "vulnerability": {
        "name": "CVE-2014-0110"
      },
      "action_statement": "Vulnerability CVE-2014-0110 affects version 3.4.5-tuxcare.1 of org.apache.cxf:cxf-tools-validator."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.cxf/cxf-tools-validator@3.4.5-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.cxf/cxf-tools-validator@3.4.5-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-29T01:02:19.900071+00:00",
      "status_notes": "Vulnerability CVE-2016-6812 affects version 3.4.5-tuxcare.1 of org.apache.cxf:cxf-tools-validator.",
      "vulnerability": {
        "name": "CVE-2016-6812"
      },
      "action_statement": "Vulnerability CVE-2016-6812 affects version 3.4.5-tuxcare.1 of org.apache.cxf:cxf-tools-validator."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.cxf/cxf-tools-validator@3.4.5-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.cxf/cxf-tools-validator@3.4.5-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-29T01:02:19.900071+00:00",
      "status_notes": "Vulnerability CVE-2016-8739 affects version 3.4.5-tuxcare.1 of org.apache.cxf:cxf-tools-validator.",
      "vulnerability": {
        "name": "CVE-2016-8739"
      },
      "action_statement": "Vulnerability CVE-2016-8739 affects version 3.4.5-tuxcare.1 of org.apache.cxf:cxf-tools-validator."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.cxf/cxf-tools-validator@3.4.5-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.cxf/cxf-tools-validator@3.4.5-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-29T01:02:19.900071+00:00",
      "status_notes": "Vulnerability CVE-2017-12624 affects version 3.4.5-tuxcare.1 of org.apache.cxf:cxf-tools-validator.",
      "vulnerability": {
        "name": "CVE-2017-12624"
      },
      "action_statement": "Vulnerability CVE-2017-12624 affects version 3.4.5-tuxcare.1 of org.apache.cxf:cxf-tools-validator."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.cxf/cxf-tools-validator@3.4.5-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.cxf/cxf-tools-validator@3.4.5-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-29T01:02:19.900071+00:00",
      "status_notes": "Vulnerability CVE-2017-5653 affects version 3.4.5-tuxcare.1 of org.apache.cxf:cxf-tools-validator.",
      "vulnerability": {
        "name": "CVE-2017-5653"
      },
      "action_statement": "Vulnerability CVE-2017-5653 affects version 3.4.5-tuxcare.1 of org.apache.cxf:cxf-tools-validator."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.cxf/cxf-tools-validator@3.4.5-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.cxf/cxf-tools-validator@3.4.5-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-29T01:02:19.900071+00:00",
      "status_notes": "Vulnerability CVE-2017-5656 affects version 3.4.5-tuxcare.1 of org.apache.cxf:cxf-tools-validator.",
      "vulnerability": {
        "name": "CVE-2017-5656"
      },
      "action_statement": "Vulnerability CVE-2017-5656 affects version 3.4.5-tuxcare.1 of org.apache.cxf:cxf-tools-validator."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/org.apache.cxf/cxf-tools-validator@3.4.5-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.cxf/cxf-tools-validator@3.4.5-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2022-46363 is fixed in version 3.4.5-tuxcare.1 of org.apache.cxf:cxf-tools-validator.",
      "vulnerability": {
        "name": "CVE-2022-46363"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/org.apache.cxf/cxf-tools-validator@3.4.5-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.cxf/cxf-tools-validator@3.4.5-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2022-46364 is fixed in version 3.4.5-tuxcare.1 of org.apache.cxf:cxf-tools-validator.",
      "vulnerability": {
        "name": "CVE-2022-46364"
      }
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.cxf/cxf-tools-validator@3.4.5-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.cxf/cxf-tools-validator@3.4.5-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2025-23184 affects version 3.4.5-tuxcare.1 of org.apache.cxf:cxf-tools-validator.",
      "vulnerability": {
        "name": "CVE-2025-23184"
      },
      "action_statement": "Vulnerability CVE-2025-23184 affects version 3.4.5-tuxcare.1 of org.apache.cxf:cxf-tools-validator."
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.cxf/cxf-tools-validator@3.4.5-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.cxf/cxf-tools-validator@3.4.5-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2025-48795 does not affect version 3.4.5-tuxcare.1 of org.apache.cxf:cxf-tools-validator. not_affected \u2014 Version 3.4.5 does not contain the vulnerable code path. The CVE-2025-48795 vulnerability exists in DelayedCachedOutputStreamCleaner class which was introduced in version 3.5.11 (September 2024). Version 3.4.5 predates this component and lacks the leak detection logging mechanism that causes the vulnerability.",
      "justification": "vulnerable_code_not_present",
      "vulnerability": {
        "name": "CVE-2025-48795"
      },
      "impact_statement": "not_affected \u2014 Version 3.4.5 does not contain the vulnerable code path. The CVE-2025-48795 vulnerability exists in DelayedCachedOutputStreamCleaner class which was introduced in version 3.5.11 (September 2024). Version 3.4.5 predates this component and lacks the leak detection logging mechanism that causes the vulnerability."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.cxf/cxf-tools-validator@3.4.5-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.cxf/cxf-tools-validator@3.4.5-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-09T10:35:00.151559+00:00",
      "status_notes": "Vulnerability CVE-2026-107937 affects version 3.4.5-tuxcare.1 of org.apache.cxf:cxf-tools-validator.",
      "vulnerability": {
        "name": "CVE-2026-107937"
      },
      "action_statement": "Vulnerability CVE-2026-107937 affects version 3.4.5-tuxcare.1 of org.apache.cxf:cxf-tools-validator."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.cxf/cxf-tools-validator@3.4.5-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.cxf/cxf-tools-validator@3.4.5-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-09T10:36:00.171692+00:00",
      "status_notes": "Vulnerability CVE-2026-108039 affects version 3.4.5-tuxcare.1 of org.apache.cxf:cxf-tools-validator.",
      "vulnerability": {
        "name": "CVE-2026-108039"
      },
      "action_statement": "Vulnerability CVE-2026-108039 affects version 3.4.5-tuxcare.1 of org.apache.cxf:cxf-tools-validator."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.cxf/cxf-tools-validator@3.4.5-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.cxf/cxf-tools-validator@3.4.5-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-49875 affects version 3.4.5-tuxcare.1 of org.apache.cxf:cxf-tools-validator.",
      "vulnerability": {
        "name": "CVE-2026-49875"
      },
      "action_statement": "Vulnerability CVE-2026-49875 affects version 3.4.5-tuxcare.1 of org.apache.cxf:cxf-tools-validator."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.cxf/cxf-tools-validator@3.4.5-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.cxf/cxf-tools-validator@3.4.5-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-50645 affects version 3.4.5-tuxcare.1 of org.apache.cxf:cxf-tools-validator.",
      "vulnerability": {
        "name": "CVE-2026-50645"
      },
      "action_statement": "Vulnerability CVE-2026-50645 affects version 3.4.5-tuxcare.1 of org.apache.cxf:cxf-tools-validator."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.cxf/cxf-tools-validator@3.4.5-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.cxf/cxf-tools-validator@3.4.5-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-30T21:29:49.692596+00:00",
      "status_notes": "Vulnerability CVE-2026-54225 affects version 3.4.5-tuxcare.1 of org.apache.cxf:cxf-tools-validator.",
      "vulnerability": {
        "name": "CVE-2026-54225"
      },
      "action_statement": "Vulnerability CVE-2026-54225 affects version 3.4.5-tuxcare.1 of org.apache.cxf:cxf-tools-validator."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.cxf/cxf-tools-validator@3.4.5-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.cxf/cxf-tools-validator@3.4.5-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-30T21:29:49.692596+00:00",
      "status_notes": "Vulnerability CVE-2026-64958 affects version 3.4.5-tuxcare.1 of org.apache.cxf:cxf-tools-validator.",
      "vulnerability": {
        "name": "CVE-2026-64958"
      },
      "action_statement": "Vulnerability CVE-2026-64958 affects version 3.4.5-tuxcare.1 of org.apache.cxf:cxf-tools-validator."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.cxf/cxf-tools-validator@3.4.5-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.cxf/cxf-tools-validator@3.4.5-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-30T21:29:49.692596+00:00",
      "status_notes": "Vulnerability CVE-2026-65432 affects version 3.4.5-tuxcare.1 of org.apache.cxf:cxf-tools-validator.",
      "vulnerability": {
        "name": "CVE-2026-65432"
      },
      "action_statement": "Vulnerability CVE-2026-65432 affects version 3.4.5-tuxcare.1 of org.apache.cxf:cxf-tools-validator."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.cxf/cxf-tools-validator@3.4.5-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.cxf/cxf-tools-validator@3.4.5-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-09T10:37:00.118141+00:00",
      "status_notes": "Vulnerability CVE-2026-78384 affects version 3.4.5-tuxcare.1 of org.apache.cxf:cxf-tools-validator.",
      "vulnerability": {
        "name": "CVE-2026-78384"
      },
      "action_statement": "Vulnerability CVE-2026-78384 affects version 3.4.5-tuxcare.1 of org.apache.cxf:cxf-tools-validator."
    }
  ]
}