{
  "@id": "urn:uuid:12e8d561-d170-4aac-82ff-498148f36f91",
  "role": "Document Creator",
  "author": "https://tuxcare.com",
  "version": 6,
  "@context": "https://openvex.dev/ns/v0.2.0",
  "timestamp": "2026-10-31T11:17:00.072623+00:00",
  "statements": [
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.grails/grails-web-url-mappings@6.2.3-tuxcare.7",
          "identifiers": {
            "purl": "pkg:maven/org.grails/grails-web-url-mappings@6.2.3-tuxcare.7"
          }
        }
      ],
      "timestamp": "2026-10-29T00:36:14.768306+00:00",
      "status_notes": "Vulnerability CVE-2018-1000529 affects version 6.2.3-tuxcare.7 of org.grails:grails-web-url-mappings.",
      "vulnerability": {
        "name": "CVE-2018-1000529"
      },
      "action_statement": "Vulnerability CVE-2018-1000529 affects version 6.2.3-tuxcare.7 of org.grails:grails-web-url-mappings."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.grails/grails-web-url-mappings@6.2.3-tuxcare.7",
          "identifiers": {
            "purl": "pkg:maven/org.grails/grails-web-url-mappings@6.2.3-tuxcare.7"
          }
        }
      ],
      "timestamp": "2026-10-30T15:44:00.110412+00:00",
      "status_notes": "Vulnerability CVE-2019-12728 affects version 6.2.3-tuxcare.7 of org.grails:grails-web-url-mappings.",
      "vulnerability": {
        "name": "CVE-2019-12728"
      },
      "action_statement": "Vulnerability CVE-2019-12728 affects version 6.2.3-tuxcare.7 of org.grails:grails-web-url-mappings."
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:maven/org.grails/grails-web-url-mappings@6.2.3-tuxcare.7",
          "identifiers": {
            "purl": "pkg:maven/org.grails/grails-web-url-mappings@6.2.3-tuxcare.7"
          }
        }
      ],
      "timestamp": "2026-10-31T11:17:00.072623+00:00",
      "status_notes": "Vulnerability CVE-2023-46131 does not affect version 6.2.3-tuxcare.7 of org.grails:grails-web-url-mappings. not_affected \u2014 CVE-2023-46131 does not affect this target. The vulnerability involves Grails data binding allowing access to dangerous reflection properties (metaPropertyValues, properties, MetaProperty, CachedMethod) that can lead to JVM crash or DoS. The fix was already present in upstream Grails 6.2.3 before TuxCare onboarded this version. Commit bdf5a73ed74 by Puneet Behl (behlp@unityfoundation.io) added ...",
      "justification": "vulnerable_code_not_present",
      "vulnerability": {
        "name": "CVE-2023-46131"
      },
      "impact_statement": "not_affected \u2014 CVE-2023-46131 does not affect this target. The vulnerability involves Grails data binding allowing access to dangerous reflection properties (metaPropertyValues, properties, MetaProperty, CachedMethod) that can lead to JVM crash or DoS. The fix was already present in upstream Grails 6.2.3 before TuxCare onboarded this version. Commit bdf5a73ed74 by Puneet Behl (behlp@unityfoundation.io) added ..."
    }
  ]
}