{ "@id": "urn:uuid:b25315a0-ef68-473f-85e6-c86c12c1e877", "role": "Document Creator", "author": "https://tuxcare.com", "version": 3, "@context": "https://openvex.dev/ns/v0.2.0", "timestamp": "2026-10-20T12:46:51.138394+00:00", "statements": [ { "status": "affected", "products": [ { "@id": "pkg:npm/vm2@3.11.5-tuxcare.7", "identifiers": { "purl": "pkg:npm/vm2@3.11.5-tuxcare.7" } } ], "timestamp": "2026-10-13T10:44:00.074980+00:00", "status_notes": "Vulnerability CVE-2026-100721 affects version 3.11.5-tuxcare.7 of vm2, and is fixed in 3.11.5-tuxcare.8.", "vulnerability": { "name": "CVE-2026-100721" }, "action_statement": "Vulnerability CVE-2026-100721 affects version 3.11.5-tuxcare.7 of vm2, and is fixed in 3.11.5-tuxcare.8." }, { "status": "fixed", "products": [ { "@id": "pkg:npm/vm2@3.11.5-tuxcare.7", "identifiers": { "purl": "pkg:npm/vm2@3.11.5-tuxcare.7" } } ], "timestamp": "2026-10-10T21:12:00.086111+00:00", "status_notes": "Vulnerability CVE-2026-100722 is fixed in version 3.11.5-tuxcare.7 of vm2.", "vulnerability": { "name": "CVE-2026-100722" } }, { "status": "fixed", "products": [ { "@id": "pkg:npm/vm2@3.11.5-tuxcare.7", "identifiers": { "purl": "pkg:npm/vm2@3.11.5-tuxcare.7" } } ], "timestamp": "2026-10-10T21:12:00.086111+00:00", "status_notes": "Vulnerability CVE-2026-100723 is fixed in version 3.11.5-tuxcare.7 of vm2.", "vulnerability": { "name": "CVE-2026-100723" } }, { "status": "fixed", "products": [ { "@id": "pkg:npm/vm2@3.11.5-tuxcare.7", "identifiers": { "purl": "pkg:npm/vm2@3.11.5-tuxcare.7" } } ], "timestamp": "2026-10-10T21:12:00.086111+00:00", "status_notes": "Vulnerability CVE-2026-47683 is fixed in version 3.11.5-tuxcare.7 of vm2.", "vulnerability": { "name": "CVE-2026-47683" } }, { "status": "fixed", "products": [ { "@id": "pkg:npm/vm2@3.11.5-tuxcare.7", "identifiers": { "purl": "pkg:npm/vm2@3.11.5-tuxcare.7" } } ], "timestamp": "2026-10-10T21:12:00.086111+00:00", "status_notes": "Vulnerability CVE-2026-47686 is fixed in version 3.11.5-tuxcare.7 of vm2.", "vulnerability": { "name": "CVE-2026-47686" } }, { "status": "fixed", "products": [ { "@id": "pkg:npm/vm2@3.11.5-tuxcare.7", "identifiers": { "purl": "pkg:npm/vm2@3.11.5-tuxcare.7" } } ], "timestamp": "2026-10-10T21:12:00.086111+00:00", "status_notes": "Vulnerability CVE-2026-47698 is fixed in version 3.11.5-tuxcare.7 of vm2.", "vulnerability": { "name": "CVE-2026-47698" } }, { "status": "fixed", "products": [ { "@id": "pkg:npm/vm2@3.11.5-tuxcare.7", "identifiers": { "purl": "pkg:npm/vm2@3.11.5-tuxcare.7" } } ], "timestamp": "2026-10-10T21:12:00.086111+00:00", "status_notes": "Vulnerability CVE-2026-92933 is fixed in version 3.11.5-tuxcare.7 of vm2.", "vulnerability": { "name": "CVE-2026-92933" } }, { "status": "fixed", "products": [ { "@id": "pkg:npm/vm2@3.11.5-tuxcare.7", "identifiers": { "purl": "pkg:npm/vm2@3.11.5-tuxcare.7" } } ], "timestamp": "2026-10-10T21:12:00.086111+00:00", "status_notes": "Vulnerability CVE-2026-92934 is fixed in version 3.11.5-tuxcare.7 of vm2.", "vulnerability": { "name": "CVE-2026-92934" } }, { "status": "fixed", "products": [ { "@id": "pkg:npm/vm2@3.11.5-tuxcare.7", "identifiers": { "purl": "pkg:npm/vm2@3.11.5-tuxcare.7" } } ], "timestamp": "2026-10-10T21:12:00.086111+00:00", "status_notes": "Vulnerability CVE-2026-92935 is fixed in version 3.11.5-tuxcare.7 of vm2.", "vulnerability": { "name": "CVE-2026-92935" } }, { "status": "fixed", "products": [ { "@id": "pkg:npm/vm2@3.11.5-tuxcare.7", "identifiers": { "purl": "pkg:npm/vm2@3.11.5-tuxcare.7" } } ], "timestamp": "2026-10-10T21:12:00.086111+00:00", "status_notes": "Vulnerability CVE-2026-92936 is fixed in version 3.11.5-tuxcare.7 of vm2.", "vulnerability": { "name": "CVE-2026-92936" } }, { "status": "fixed", "products": [ { "@id": "pkg:npm/vm2@3.11.5-tuxcare.7", "identifiers": { "purl": "pkg:npm/vm2@3.11.5-tuxcare.7" } } ], "timestamp": "2026-10-10T21:12:00.086111+00:00", "status_notes": "Vulnerability CVE-2026-92938 is fixed in version 3.11.5-tuxcare.7 of vm2.", "vulnerability": { "name": "CVE-2026-92938" } }, { "status": "fixed", "products": [ { "@id": "pkg:npm/vm2@3.11.5-tuxcare.7", "identifiers": { "purl": "pkg:npm/vm2@3.11.5-tuxcare.7" } } ], "timestamp": "2026-10-10T21:12:00.086111+00:00", "status_notes": "Vulnerability CVE-2026-92939 is fixed in version 3.11.5-tuxcare.7 of vm2.", "vulnerability": { "name": "CVE-2026-92939" } }, { "status": "fixed", "products": [ { "@id": "pkg:npm/vm2@3.11.5-tuxcare.7", "identifiers": { "purl": "pkg:npm/vm2@3.11.5-tuxcare.7" } } ], "timestamp": "2026-10-10T21:12:00.086111+00:00", "status_notes": "Vulnerability CVE-2026-92940 is fixed in version 3.11.5-tuxcare.7 of vm2.", "vulnerability": { "name": "CVE-2026-92940" } }, { "status": "not_affected", "products": [ { "@id": "pkg:npm/vm2@3.11.5-tuxcare.7", "identifiers": { "purl": "pkg:npm/vm2@3.11.5-tuxcare.7" } } ], "timestamp": "2026-10-10T21:12:00.086111+00:00", "status_notes": "Vulnerability CVE-2026-92941 does not affect version 3.11.5-tuxcare.7 of vm2. not_affected \u2014 vm2 3.11.5 does not block the `tls` builtin from DANGEROUS_BUILTINS (same pattern as CVE-2026-92941 describes for 3.11.6), but exploitation requires the `tls.setDefaultCACertificates()` API which only exists in Node.js 22.19.0+/24.5.0+. On the analyzed runtime (Node.js 20.20.2), this API does not exist, breaking the chain from INPUT (tls module access) to GOAL (process-wide TLS trust mutation)....", "justification": "vulnerable_code_not_in_execute_path", "vulnerability": { "name": "CVE-2026-92941" }, "impact_statement": "not_affected \u2014 vm2 3.11.5 does not block the `tls` builtin from DANGEROUS_BUILTINS (same pattern as CVE-2026-92941 describes for 3.11.6), but exploitation requires the `tls.setDefaultCACertificates()` API which only exists in Node.js 22.19.0+/24.5.0+. On the analyzed runtime (Node.js 20.20.2), this API does not exist, breaking the chain from INPUT (tls module access) to GOAL (process-wide TLS trust mutation)...." }, { "status": "fixed", "products": [ { "@id": "pkg:npm/vm2@3.11.5-tuxcare.7", "identifiers": { "purl": "pkg:npm/vm2@3.11.5-tuxcare.7" } } ], "timestamp": "2026-10-10T21:12:00.086111+00:00", "status_notes": "Vulnerability CVE-2026-92942 is fixed in version 3.11.5-tuxcare.7 of vm2.", "vulnerability": { "name": "CVE-2026-92942" } }, { "status": "fixed", "products": [ { "@id": "pkg:npm/vm2@3.11.5-tuxcare.7", "identifiers": { "purl": "pkg:npm/vm2@3.11.5-tuxcare.7" } } ], "timestamp": "2026-10-10T21:12:00.086111+00:00", "status_notes": "Vulnerability CVE-2026-92944 is fixed in version 3.11.5-tuxcare.7 of vm2.", "vulnerability": { "name": "CVE-2026-92944" } }, { "status": "fixed", "products": [ { "@id": "pkg:npm/vm2@3.11.5-tuxcare.7", "identifiers": { "purl": "pkg:npm/vm2@3.11.5-tuxcare.7" } } ], "timestamp": "2026-10-10T21:12:00.086111+00:00", "status_notes": "Vulnerability CVE-2026-92945 is fixed in version 3.11.5-tuxcare.7 of vm2.", "vulnerability": { "name": "CVE-2026-92945" } }, { "status": "fixed", "products": [ { "@id": "pkg:npm/vm2@3.11.5-tuxcare.7", "identifiers": { "purl": "pkg:npm/vm2@3.11.5-tuxcare.7" } } ], "timestamp": "2026-10-10T21:12:00.086111+00:00", "status_notes": "Vulnerability CVE-2026-92946 is fixed in version 3.11.5-tuxcare.7 of vm2.", "vulnerability": { "name": "CVE-2026-92946" } }, { "status": "fixed", "products": [ { "@id": "pkg:npm/vm2@3.11.5-tuxcare.7", "identifiers": { "purl": "pkg:npm/vm2@3.11.5-tuxcare.7" } } ], "timestamp": "2026-10-10T21:12:00.086111+00:00", "status_notes": "Vulnerability CVE-2026-92947 is fixed in version 3.11.5-tuxcare.7 of vm2.", "vulnerability": { "name": "CVE-2026-92947" } }, { "status": "fixed", "products": [ { "@id": "pkg:npm/vm2@3.11.5-tuxcare.7", "identifiers": { "purl": "pkg:npm/vm2@3.11.5-tuxcare.7" } } ], "timestamp": "2026-10-10T21:12:00.086111+00:00", "status_notes": "Vulnerability CVE-2026-92948 is fixed in version 3.11.5-tuxcare.7 of vm2.", "vulnerability": { "name": "CVE-2026-92948" } }, { "status": "fixed", "products": [ { "@id": "pkg:npm/vm2@3.11.5-tuxcare.7", "identifiers": { "purl": "pkg:npm/vm2@3.11.5-tuxcare.7" } } ], "timestamp": "2026-10-10T21:12:00.086111+00:00", "status_notes": "Vulnerability CVE-2026-92949 is fixed in version 3.11.5-tuxcare.7 of vm2.", "vulnerability": { "name": "CVE-2026-92949" } }, { "status": "fixed", "products": [ { "@id": "pkg:npm/vm2@3.11.5-tuxcare.7", "identifiers": { "purl": "pkg:npm/vm2@3.11.5-tuxcare.7" } } ], "timestamp": "2026-10-10T21:12:00.086111+00:00", "status_notes": "Vulnerability CVE-2026-92950 is fixed in version 3.11.5-tuxcare.7 of vm2.", "vulnerability": { "name": "CVE-2026-92950" } }, { "status": "fixed", "products": [ { "@id": "pkg:npm/vm2@3.11.5-tuxcare.7", "identifiers": { "purl": "pkg:npm/vm2@3.11.5-tuxcare.7" } } ], "timestamp": "2026-10-10T21:12:00.086111+00:00", "status_notes": "Vulnerability CVE-2026-92951 is fixed in version 3.11.5-tuxcare.7 of vm2.", "vulnerability": { "name": "CVE-2026-92951" } }, { "status": "fixed", "products": [ { "@id": "pkg:npm/vm2@3.11.5-tuxcare.7", "identifiers": { "purl": "pkg:npm/vm2@3.11.5-tuxcare.7" } } ], "timestamp": "2026-10-10T21:12:00.086111+00:00", "status_notes": "Vulnerability CVE-2026-92952 is fixed in version 3.11.5-tuxcare.7 of vm2.", "vulnerability": { "name": "CVE-2026-92952" } }, { "status": "fixed", "products": [ { "@id": "pkg:npm/vm2@3.11.5-tuxcare.7", "identifiers": { "purl": "pkg:npm/vm2@3.11.5-tuxcare.7" } } ], "timestamp": "2026-10-10T21:12:00.086111+00:00", "status_notes": "Vulnerability CVE-2026-92953 is fixed in version 3.11.5-tuxcare.7 of vm2.", "vulnerability": { "name": "CVE-2026-92953" } }, { "status": "fixed", "products": [ { "@id": "pkg:npm/vm2@3.11.5-tuxcare.7", "identifiers": { "purl": "pkg:npm/vm2@3.11.5-tuxcare.7" } } ], "timestamp": "2026-10-10T21:12:00.086111+00:00", "status_notes": "Vulnerability CVE-2026-92954 is fixed in version 3.11.5-tuxcare.7 of vm2.", "vulnerability": { "name": "CVE-2026-92954" } }, { "status": "fixed", "products": [ { "@id": "pkg:npm/vm2@3.11.5-tuxcare.7", "identifiers": { "purl": "pkg:npm/vm2@3.11.5-tuxcare.7" } } ], "timestamp": "2026-10-10T21:12:00.086111+00:00", "status_notes": "Vulnerability CVE-2026-92955 is fixed in version 3.11.5-tuxcare.7 of vm2.", "vulnerability": { "name": "CVE-2026-92955" } }, { "status": "fixed", "products": [ { "@id": "pkg:npm/vm2@3.11.5-tuxcare.7", "identifiers": { "purl": "pkg:npm/vm2@3.11.5-tuxcare.7" } } ], "timestamp": "2026-10-10T21:12:00.086111+00:00", "status_notes": "Vulnerability CVE-2026-92956 is fixed in version 3.11.5-tuxcare.7 of vm2.", "vulnerability": { "name": "CVE-2026-92956" } }, { "status": "fixed", "products": [ { "@id": "pkg:npm/vm2@3.11.5-tuxcare.7", "identifiers": { "purl": "pkg:npm/vm2@3.11.5-tuxcare.7" } } ], "timestamp": "2026-10-10T21:12:00.086111+00:00", "status_notes": "Vulnerability CVE-2026-92957 is fixed in version 3.11.5-tuxcare.7 of vm2.", "vulnerability": { "name": "CVE-2026-92957" } }, { "status": "fixed", "products": [ { "@id": "pkg:npm/vm2@3.11.5-tuxcare.7", "identifiers": { "purl": "pkg:npm/vm2@3.11.5-tuxcare.7" } } ], "timestamp": "2026-10-10T21:12:00.086111+00:00", "status_notes": "Vulnerability CVE-2026-92958 is fixed in version 3.11.5-tuxcare.7 of vm2.", "vulnerability": { "name": "CVE-2026-92958" } }, { "status": "affected", "products": [ { "@id": "pkg:npm/vm2@3.11.5-tuxcare.7", "identifiers": { "purl": "pkg:npm/vm2@3.11.5-tuxcare.7" } } ], "timestamp": "2026-10-13T10:44:00.074980+00:00", "status_notes": "Vulnerability CVE-2026-92959 affects version 3.11.5-tuxcare.7 of vm2, and is fixed in 3.11.5-tuxcare.8.", "vulnerability": { "name": "CVE-2026-92959" }, "action_statement": "Vulnerability CVE-2026-92959 affects version 3.11.5-tuxcare.7 of vm2, and is fixed in 3.11.5-tuxcare.8." }, { "status": "fixed", "products": [ { "@id": "pkg:npm/vm2@3.11.5-tuxcare.7", "identifiers": { "purl": "pkg:npm/vm2@3.11.5-tuxcare.7" } } ], "timestamp": "2026-10-10T21:12:00.086111+00:00", "status_notes": "Vulnerability CVE-2026-92960 is fixed in version 3.11.5-tuxcare.7 of vm2.", "vulnerability": { "name": "CVE-2026-92960" } }, { "status": "fixed", "products": [ { "@id": "pkg:npm/vm2@3.11.5-tuxcare.7", "identifiers": { "purl": "pkg:npm/vm2@3.11.5-tuxcare.7" } } ], "timestamp": "2026-10-10T21:12:00.086111+00:00", "status_notes": "Vulnerability CVE-2026-92961 is fixed in version 3.11.5-tuxcare.7 of vm2.", "vulnerability": { "name": "CVE-2026-92961" } }, { "status": "fixed", "products": [ { "@id": "pkg:npm/vm2@3.11.5-tuxcare.7", "identifiers": { "purl": "pkg:npm/vm2@3.11.5-tuxcare.7" } } ], "timestamp": "2026-10-10T21:12:00.086111+00:00", "status_notes": "Vulnerability CVE-2026-93605 is fixed in version 3.11.5-tuxcare.7 of vm2.", "vulnerability": { "name": "CVE-2026-93605" } }, { "status": "not_affected", "products": [ { "@id": "pkg:npm/vm2@3.11.5-tuxcare.7", "identifiers": { "purl": "pkg:npm/vm2@3.11.5-tuxcare.7" } } ], "timestamp": "2026-10-20T12:46:51.138394+00:00", "status_notes": "Vulnerability GHSA-28q4-xrqh-9479 is a false positive for vm2 3.11.5-tuxcare.7.", "vulnerability": { "name": "GHSA-28q4-xrqh-9479" }, "impact_statement": "The vulnerability has been withdrawn." }, { "status": "not_affected", "products": [ { "@id": "pkg:npm/vm2@3.11.5-tuxcare.7", "identifiers": { "purl": "pkg:npm/vm2@3.11.5-tuxcare.7" } } ], "timestamp": "2026-10-20T12:46:51.138394+00:00", "status_notes": "Vulnerability GHSA-29x6-9qh5-83gg is a false positive for vm2 3.11.5-tuxcare.7.", "vulnerability": { "name": "GHSA-29x6-9qh5-83gg" }, "impact_statement": "The vulnerability has been withdrawn." }, { "status": "not_affected", "products": [ { "@id": "pkg:npm/vm2@3.11.5-tuxcare.7", "identifiers": { "purl": "pkg:npm/vm2@3.11.5-tuxcare.7" } } ], "timestamp": "2026-10-20T12:46:51.138394+00:00", "status_notes": "Vulnerability GHSA-2vh9-cv26-p97m is a false positive for vm2 3.11.5-tuxcare.7.", "vulnerability": { "name": "GHSA-2vh9-cv26-p97m" }, "impact_statement": "The vulnerability has been withdrawn." }, { "status": "not_affected", "products": [ { "@id": "pkg:npm/vm2@3.11.5-tuxcare.7", "identifiers": { "purl": "pkg:npm/vm2@3.11.5-tuxcare.7" } } ], "timestamp": "2026-10-20T12:46:51.138394+00:00", "status_notes": "Vulnerability GHSA-43rv-jrfh-9mrr is a false positive for vm2 3.11.5-tuxcare.7.", "vulnerability": { "name": "GHSA-43rv-jrfh-9mrr" }, "impact_statement": "The vulnerability has been withdrawn." }, { "status": "not_affected", "products": [ { "@id": "pkg:npm/vm2@3.11.5-tuxcare.7", "identifiers": { "purl": "pkg:npm/vm2@3.11.5-tuxcare.7" } } ], "timestamp": "2026-10-20T12:46:51.138394+00:00", "status_notes": "Vulnerability GHSA-4xmw-hh9q-4q7c is a false positive for vm2 3.11.5-tuxcare.7.", "vulnerability": { "name": "GHSA-4xmw-hh9q-4q7c" }, "impact_statement": "The vulnerability has been withdrawn." }, { "status": "not_affected", "products": [ { "@id": "pkg:npm/vm2@3.11.5-tuxcare.7", "identifiers": { "purl": "pkg:npm/vm2@3.11.5-tuxcare.7" } } ], "timestamp": "2026-10-20T12:46:51.138394+00:00", "status_notes": "Vulnerability GHSA-538q-xxpg-6h4r is a false positive for vm2 3.11.5-tuxcare.7.", "vulnerability": { "name": "GHSA-538q-xxpg-6h4r" }, "impact_statement": "The vulnerability has been withdrawn." }, { "status": "not_affected", "products": [ { "@id": "pkg:npm/vm2@3.11.5-tuxcare.7", "identifiers": { "purl": "pkg:npm/vm2@3.11.5-tuxcare.7" } } ], "timestamp": "2026-10-20T12:46:51.138394+00:00", "status_notes": "Vulnerability GHSA-5843-9mh5-hhgw is a false positive for vm2 3.11.5-tuxcare.7.", "vulnerability": { "name": "GHSA-5843-9mh5-hhgw" }, "impact_statement": "The vulnerability has been withdrawn." }, { "status": "not_affected", "products": [ { "@id": "pkg:npm/vm2@3.11.5-tuxcare.7", "identifiers": { "purl": "pkg:npm/vm2@3.11.5-tuxcare.7" } } ], "timestamp": "2026-10-20T12:46:51.138394+00:00", "status_notes": "Vulnerability GHSA-5v7w-95g5-pj6q is a false positive for vm2 3.11.5-tuxcare.7.", "vulnerability": { "name": "GHSA-5v7w-95g5-pj6q" }, "impact_statement": "The vulnerability has been withdrawn." }, { "status": "not_affected", "products": [ { "@id": "pkg:npm/vm2@3.11.5-tuxcare.7", "identifiers": { "purl": "pkg:npm/vm2@3.11.5-tuxcare.7" } } ], "timestamp": "2026-10-20T12:46:51.138394+00:00", "status_notes": "Vulnerability GHSA-63m2-qqch-jxv2 is a false positive for vm2 3.11.5-tuxcare.7.", "vulnerability": { "name": "GHSA-63m2-qqch-jxv2" }, "impact_statement": "The vulnerability has been withdrawn." }, { "status": "not_affected", "products": [ { "@id": "pkg:npm/vm2@3.11.5-tuxcare.7", "identifiers": { "purl": "pkg:npm/vm2@3.11.5-tuxcare.7" } } ], "timestamp": "2026-10-20T12:46:51.138394+00:00", "status_notes": "Vulnerability GHSA-6fvh-fgmg-3x7v is a false positive for vm2 3.11.5-tuxcare.7.", "vulnerability": { "name": "GHSA-6fvh-fgmg-3x7v" }, "impact_statement": "The vulnerability has been withdrawn." }, { "status": "not_affected", "products": [ { "@id": "pkg:npm/vm2@3.11.5-tuxcare.7", "identifiers": { "purl": "pkg:npm/vm2@3.11.5-tuxcare.7" } } ], "timestamp": "2026-10-20T12:46:51.138394+00:00", "status_notes": "Vulnerability GHSA-6jgm-4w45-vh8j is a false positive for vm2 3.11.5-tuxcare.7.", "vulnerability": { "name": "GHSA-6jgm-4w45-vh8j" }, "impact_statement": "The vulnerability has been withdrawn." }, { "status": "not_affected", "products": [ { "@id": "pkg:npm/vm2@3.11.5-tuxcare.7", "identifiers": { "purl": "pkg:npm/vm2@3.11.5-tuxcare.7" } } ], "timestamp": "2026-10-20T12:46:51.138394+00:00", "status_notes": "Vulnerability GHSA-7c3p-84r8-h79q is a false positive for vm2 3.11.5-tuxcare.7.", "vulnerability": { "name": "GHSA-7c3p-84r8-h79q" }, "impact_statement": "The vulnerability has been withdrawn." }, { "status": "not_affected", "products": [ { "@id": "pkg:npm/vm2@3.11.5-tuxcare.7", "identifiers": { "purl": "pkg:npm/vm2@3.11.5-tuxcare.7" } } ], "timestamp": "2026-10-20T12:46:51.138394+00:00", "status_notes": "Vulnerability GHSA-7rr2-8fr3-fjqx is a false positive for vm2 3.11.5-tuxcare.7.", "vulnerability": { "name": "GHSA-7rr2-8fr3-fjqx" }, "impact_statement": "The vulnerability has been withdrawn." }, { "status": "fixed", "products": [ { "@id": "pkg:npm/vm2@3.11.5-tuxcare.7", "identifiers": { "purl": "pkg:npm/vm2@3.11.5-tuxcare.7" } } ], "timestamp": "2026-10-10T21:12:00.086111+00:00", "status_notes": "Vulnerability GHSA-8686-vhfx-7r3j is fixed in version 3.11.5-tuxcare.7 of vm2.", "vulnerability": { "name": "GHSA-8686-vhfx-7r3j" } }, { "status": "fixed", "products": [ { "@id": "pkg:npm/vm2@3.11.5-tuxcare.7", "identifiers": { "purl": "pkg:npm/vm2@3.11.5-tuxcare.7" } } ], "timestamp": "2026-10-10T21:12:00.086111+00:00", "status_notes": "Vulnerability GHSA-8hr7-r645-pc6w is fixed in version 3.11.5-tuxcare.7 of vm2.", "vulnerability": { "name": "GHSA-8hr7-r645-pc6w" } }, { "status": "not_affected", "products": [ { "@id": "pkg:npm/vm2@3.11.5-tuxcare.7", "identifiers": { "purl": "pkg:npm/vm2@3.11.5-tuxcare.7" } } ], "timestamp": "2026-10-20T12:46:51.138394+00:00", "status_notes": "Vulnerability GHSA-8mvv-mcc3-xwhh is a false positive for vm2 3.11.5-tuxcare.7.", "vulnerability": { "name": "GHSA-8mvv-mcc3-xwhh" }, "impact_statement": "The vulnerability has been withdrawn." }, { "status": "not_affected", "products": [ { "@id": "pkg:npm/vm2@3.11.5-tuxcare.7", "identifiers": { "purl": "pkg:npm/vm2@3.11.5-tuxcare.7" } } ], "timestamp": "2026-10-20T12:46:51.138394+00:00", "status_notes": "Vulnerability GHSA-9538-79j2-h62h is a false positive for vm2 3.11.5-tuxcare.7.", "vulnerability": { "name": "GHSA-9538-79j2-h62h" }, "impact_statement": "The vulnerability has been withdrawn." }, { "status": "not_affected", "products": [ { "@id": "pkg:npm/vm2@3.11.5-tuxcare.7", "identifiers": { "purl": "pkg:npm/vm2@3.11.5-tuxcare.7" } } ], "timestamp": "2026-10-20T12:46:51.138394+00:00", "status_notes": "Vulnerability GHSA-9f3g-34x8-92jc is a false positive for vm2 3.11.5-tuxcare.7.", "vulnerability": { "name": "GHSA-9f3g-34x8-92jc" }, "impact_statement": "The vulnerability has been withdrawn." }, { "status": "not_affected", "products": [ { "@id": "pkg:npm/vm2@3.11.5-tuxcare.7", "identifiers": { "purl": "pkg:npm/vm2@3.11.5-tuxcare.7" } } ], "timestamp": "2026-10-20T12:46:51.138394+00:00", "status_notes": "Vulnerability GHSA-9fxx-mv6c-j5xp is a false positive for vm2 3.11.5-tuxcare.7.", "vulnerability": { "name": "GHSA-9fxx-mv6c-j5xp" }, "impact_statement": "The vulnerability has been withdrawn." }, { "status": "not_affected", "products": [ { "@id": "pkg:npm/vm2@3.11.5-tuxcare.7", "identifiers": { "purl": "pkg:npm/vm2@3.11.5-tuxcare.7" } } ], "timestamp": "2026-10-20T12:46:51.138394+00:00", "status_notes": "Vulnerability GHSA-9hxx-m5g2-2q3h is a false positive for vm2 3.11.5-tuxcare.7.", "vulnerability": { "name": "GHSA-9hxx-m5g2-2q3h" }, "impact_statement": "The vulnerability has been withdrawn." }, { "status": "not_affected", "products": [ { "@id": "pkg:npm/vm2@3.11.5-tuxcare.7", "identifiers": { "purl": "pkg:npm/vm2@3.11.5-tuxcare.7" } } ], "timestamp": "2026-10-20T12:46:51.138394+00:00", "status_notes": "Vulnerability GHSA-c9wr-qm7p-p6vc is a false positive for vm2 3.11.5-tuxcare.7.", "vulnerability": { "name": "GHSA-c9wr-qm7p-p6vc" }, "impact_statement": "The vulnerability has been withdrawn." }, { "status": "not_affected", "products": [ { "@id": "pkg:npm/vm2@3.11.5-tuxcare.7", "identifiers": { "purl": "pkg:npm/vm2@3.11.5-tuxcare.7" } } ], "timestamp": "2026-10-20T12:46:51.138394+00:00", "status_notes": "Vulnerability GHSA-gg6f-mhqm-f7gp is a false positive for vm2 3.11.5-tuxcare.7.", "vulnerability": { "name": "GHSA-gg6f-mhqm-f7gp" }, "impact_statement": "The vulnerability has been withdrawn." }, { "status": "not_affected", "products": [ { "@id": "pkg:npm/vm2@3.11.5-tuxcare.7", "identifiers": { "purl": "pkg:npm/vm2@3.11.5-tuxcare.7" } } ], "timestamp": "2026-10-20T12:46:51.138394+00:00", "status_notes": "Vulnerability GHSA-hc6q-4vvg-jf79 is a false positive for vm2 3.11.5-tuxcare.7.", "vulnerability": { "name": "GHSA-hc6q-4vvg-jf79" }, "impact_statement": "The vulnerability has been withdrawn." }, { "status": "not_affected", "products": [ { "@id": "pkg:npm/vm2@3.11.5-tuxcare.7", "identifiers": { "purl": "pkg:npm/vm2@3.11.5-tuxcare.7" } } ], "timestamp": "2026-10-20T12:46:51.138394+00:00", "status_notes": "Vulnerability GHSA-hmpr-c9rf-qcrf is a false positive for vm2 3.11.5-tuxcare.7.", "vulnerability": { "name": "GHSA-hmpr-c9rf-qcrf" }, "impact_statement": "The vulnerability has been withdrawn." }, { "status": "not_affected", "products": [ { "@id": "pkg:npm/vm2@3.11.5-tuxcare.7", "identifiers": { "purl": "pkg:npm/vm2@3.11.5-tuxcare.7" } } ], "timestamp": "2026-10-20T12:46:51.138394+00:00", "status_notes": "Vulnerability GHSA-hwr5-cm8v-c76q is a false positive for vm2 3.11.5-tuxcare.7.", "vulnerability": { "name": "GHSA-hwr5-cm8v-c76q" }, "impact_statement": "The vulnerability has been withdrawn." }, { "status": "fixed", "products": [ { "@id": "pkg:npm/vm2@3.11.5-tuxcare.7", "identifiers": { "purl": "pkg:npm/vm2@3.11.5-tuxcare.7" } } ], "timestamp": "2026-10-10T21:12:00.086111+00:00", "status_notes": "Vulnerability GHSA-m5w8-4gq2-6f8x is fixed in version 3.11.5-tuxcare.7 of vm2.", "vulnerability": { "name": "GHSA-m5w8-4gq2-6f8x" } }, { "status": "not_affected", "products": [ { "@id": "pkg:npm/vm2@3.11.5-tuxcare.7", "identifiers": { "purl": "pkg:npm/vm2@3.11.5-tuxcare.7" } } ], "timestamp": "2026-10-20T12:46:51.138394+00:00", "status_notes": "Vulnerability GHSA-m7cq-7f2q-f9fh is a false positive for vm2 3.11.5-tuxcare.7.", "vulnerability": { "name": "GHSA-m7cq-7f2q-f9fh" }, "impact_statement": "The vulnerability has been withdrawn." }, { "status": "not_affected", "products": [ { "@id": "pkg:npm/vm2@3.11.5-tuxcare.7", "identifiers": { "purl": "pkg:npm/vm2@3.11.5-tuxcare.7" } } ], "timestamp": "2026-10-20T12:46:51.138394+00:00", "status_notes": "Vulnerability GHSA-mgj2-jqjq-q8gg is a false positive for vm2 3.11.5-tuxcare.7.", "vulnerability": { "name": "GHSA-mgj2-jqjq-q8gg" }, "impact_statement": "The vulnerability has been withdrawn." }, { "status": "fixed", "products": [ { "@id": "pkg:npm/vm2@3.11.5-tuxcare.7", "identifiers": { "purl": "pkg:npm/vm2@3.11.5-tuxcare.7" } } ], "timestamp": "2026-10-10T21:12:00.086111+00:00", "status_notes": "Vulnerability GHSA-pq68-rvw4-xp4r is fixed in version 3.11.5-tuxcare.7 of vm2.", "vulnerability": { "name": "GHSA-pq68-rvw4-xp4r" } }, { "status": "fixed", "products": [ { "@id": "pkg:npm/vm2@3.11.5-tuxcare.7", "identifiers": { "purl": "pkg:npm/vm2@3.11.5-tuxcare.7" } } ], "timestamp": "2026-10-10T21:12:00.086111+00:00", "status_notes": "Vulnerability GHSA-v836-6xw4-9cx3 is fixed in version 3.11.5-tuxcare.7 of vm2.", "vulnerability": { "name": "GHSA-v836-6xw4-9cx3" } }, { "status": "not_affected", "products": [ { "@id": "pkg:npm/vm2@3.11.5-tuxcare.7", "identifiers": { "purl": "pkg:npm/vm2@3.11.5-tuxcare.7" } } ], "timestamp": "2026-10-20T12:46:51.138394+00:00", "status_notes": "Vulnerability GHSA-vjcv-9j33-wj62 is a false positive for vm2 3.11.5-tuxcare.7.", "vulnerability": { "name": "GHSA-vjcv-9j33-wj62" }, "impact_statement": "The vulnerability has been withdrawn." }, { "status": "not_affected", "products": [ { "@id": "pkg:npm/vm2@3.11.5-tuxcare.7", "identifiers": { "purl": "pkg:npm/vm2@3.11.5-tuxcare.7" } } ], "timestamp": "2026-10-20T12:46:51.138394+00:00", "status_notes": "Vulnerability GHSA-wqg3-r97q-73xm is a false positive for vm2 3.11.5-tuxcare.7.", "vulnerability": { "name": "GHSA-wqg3-r97q-73xm" }, "impact_statement": "The vulnerability has been withdrawn." }, { "status": "not_affected", "products": [ { "@id": "pkg:npm/vm2@3.11.5-tuxcare.7", "identifiers": { "purl": "pkg:npm/vm2@3.11.5-tuxcare.7" } } ], "timestamp": "2026-10-20T12:46:51.138394+00:00", "status_notes": "Vulnerability GHSA-x5qg-8pq6-39h6 is a false positive for vm2 3.11.5-tuxcare.7.", "vulnerability": { "name": "GHSA-x5qg-8pq6-39h6" }, "impact_statement": "The vulnerability has been withdrawn." }, { "status": "not_affected", "products": [ { "@id": "pkg:npm/vm2@3.11.5-tuxcare.7", "identifiers": { "purl": "pkg:npm/vm2@3.11.5-tuxcare.7" } } ], "timestamp": "2026-10-20T12:46:51.138394+00:00", "status_notes": "Vulnerability GHSA-xq74-c7jx-8w5j is a false positive for vm2 3.11.5-tuxcare.7.", "vulnerability": { "name": "GHSA-xq74-c7jx-8w5j" }, "impact_statement": "The vulnerability has been withdrawn." } ] }