{
  "@id": "urn:uuid:7dc3290a-94ce-4d7d-a8e4-2220f29a6d81",
  "role": "Document Creator",
  "author": "https://tuxcare.com",
  "version": 6,
  "@context": "https://openvex.dev/ns/v0.2.0",
  "timestamp": "2026-10-31T11:17:00.072623+00:00",
  "statements": [
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.grails/grails-test@6.2.1-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.grails/grails-test@6.2.1-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-29T00:36:14.768306+00:00",
      "status_notes": "Vulnerability CVE-2018-1000529 affects version 6.2.1-tuxcare.3 of org.grails:grails-test.",
      "vulnerability": {
        "name": "CVE-2018-1000529"
      },
      "action_statement": "Vulnerability CVE-2018-1000529 affects version 6.2.1-tuxcare.3 of org.grails:grails-test."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.grails/grails-test@6.2.1-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.grails/grails-test@6.2.1-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-30T15:44:00.110412+00:00",
      "status_notes": "Vulnerability CVE-2019-12728 affects version 6.2.1-tuxcare.3 of org.grails:grails-test.",
      "vulnerability": {
        "name": "CVE-2019-12728"
      },
      "action_statement": "Vulnerability CVE-2019-12728 affects version 6.2.1-tuxcare.3 of org.grails:grails-test."
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:maven/org.grails/grails-test@6.2.1-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.grails/grails-test@6.2.1-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-31T11:17:00.072623+00:00",
      "status_notes": "Vulnerability CVE-2023-46131 does not affect version 6.2.1-tuxcare.3 of org.grails:grails-test. not_affected \u2014 CVE-2023-46131 is not present in grails-core 6.2.1-tuxcare.4. The vulnerability was fixed upstream in Grails by adding blacklist checks for 'metaPropertyValues' and 'properties' property names, and type checks for MetaProperty and CachedMethod classes in SimpleDataBinder.groovy. This fix was already present in the Grails 6.2.1 release that TuxCare onboarded (commit bdf5a73ed743792ddcc067e2b4450...",
      "justification": "vulnerable_code_not_present",
      "vulnerability": {
        "name": "CVE-2023-46131"
      },
      "impact_statement": "not_affected \u2014 CVE-2023-46131 is not present in grails-core 6.2.1-tuxcare.4. The vulnerability was fixed upstream in Grails by adding blacklist checks for 'metaPropertyValues' and 'properties' property names, and type checks for MetaProperty and CachedMethod classes in SimpleDataBinder.groovy. This fix was already present in the Grails 6.2.1 release that TuxCare onboarded (commit bdf5a73ed743792ddcc067e2b4450..."
    }
  ]
}