{
  "@id": "urn:uuid:8f797f35-fe22-4892-8446-93310d808c6e",
  "role": "Document Creator",
  "author": "https://tuxcare.com",
  "version": 6,
  "@context": "https://openvex.dev/ns/v0.2.0",
  "timestamp": "2026-10-31T11:18:00.109709+00:00",
  "statements": [
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.grails/grails-plugin-rest@5.3.6-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.grails/grails-plugin-rest@5.3.6-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-29T00:36:14.768306+00:00",
      "status_notes": "Vulnerability CVE-2018-1000529 affects version 5.3.6-tuxcare.3 of org.grails:grails-plugin-rest.",
      "vulnerability": {
        "name": "CVE-2018-1000529"
      },
      "action_statement": "Vulnerability CVE-2018-1000529 affects version 5.3.6-tuxcare.3 of org.grails:grails-plugin-rest."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.grails/grails-plugin-rest@5.3.6-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.grails/grails-plugin-rest@5.3.6-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-30T15:44:00.110412+00:00",
      "status_notes": "Vulnerability CVE-2019-12728 affects version 5.3.6-tuxcare.3 of org.grails:grails-plugin-rest.",
      "vulnerability": {
        "name": "CVE-2019-12728"
      },
      "action_statement": "Vulnerability CVE-2019-12728 affects version 5.3.6-tuxcare.3 of org.grails:grails-plugin-rest."
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:maven/org.grails/grails-plugin-rest@5.3.6-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.grails/grails-plugin-rest@5.3.6-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-31T11:18:00.109709+00:00",
      "status_notes": "Vulnerability CVE-2023-46131 does not affect version 5.3.6-tuxcare.3 of org.grails:grails-plugin-rest. not_affected \u2014 The target grails-core 5.3.6-tuxcare.3 is NOT vulnerable to CVE-2023-46131. The security fix that prevents binding to dangerous Groovy metaclass properties (metaPropertyValues, properties, MetaProperty.class, CachedMethod.class) was already present in the upstream Grails 5.3.6 release that TuxCare onboarded. The fix was authored by Puneet Behl (upstream contributor) on 2023-11-01, merged before...",
      "justification": "vulnerable_code_not_present",
      "vulnerability": {
        "name": "CVE-2023-46131"
      },
      "impact_statement": "not_affected \u2014 The target grails-core 5.3.6-tuxcare.3 is NOT vulnerable to CVE-2023-46131. The security fix that prevents binding to dangerous Groovy metaclass properties (metaPropertyValues, properties, MetaProperty.class, CachedMethod.class) was already present in the upstream Grails 5.3.6 release that TuxCare onboarded. The fix was authored by Puneet Behl (upstream contributor) on 2023-11-01, merged before..."
    }
  ]
}