{
  "@id": "urn:uuid:e9a449fb-2c15-4164-8d6e-2155f096b04a",
  "role": "Document Creator",
  "author": "https://tuxcare.com",
  "version": 10,
  "@context": "https://openvex.dev/ns/v0.2.0",
  "timestamp": "2026-10-20T12:46:51.138394+00:00",
  "statements": [
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/vm2@3.11.7",
          "identifiers": {
            "purl": "pkg:npm/vm2@3.11.7"
          }
        }
      ],
      "timestamp": "2026-10-13T10:41:00.100659+00:00",
      "status_notes": "Vulnerability CVE-2026-100721 affects version 3.11.7 of vm2, and is fixed in 3.11.7-tuxcare.3.",
      "vulnerability": {
        "name": "CVE-2026-100721"
      },
      "action_statement": "Vulnerability CVE-2026-100721 affects version 3.11.7 of vm2, and is fixed in 3.11.7-tuxcare.3."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/vm2@3.11.7",
          "identifiers": {
            "purl": "pkg:npm/vm2@3.11.7"
          }
        }
      ],
      "timestamp": "2026-10-06T09:33:00.606939+00:00",
      "status_notes": "Vulnerability CVE-2026-100722 affects version 3.11.7 of vm2, and is fixed in 3.11.7-tuxcare.1.",
      "vulnerability": {
        "name": "CVE-2026-100722"
      },
      "action_statement": "Vulnerability CVE-2026-100722 affects version 3.11.7 of vm2, and is fixed in 3.11.7-tuxcare.1."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/vm2@3.11.7",
          "identifiers": {
            "purl": "pkg:npm/vm2@3.11.7"
          }
        }
      ],
      "timestamp": "2026-10-06T09:33:00.606939+00:00",
      "status_notes": "Vulnerability CVE-2026-100723 affects version 3.11.7 of vm2, and is fixed in 3.11.7-tuxcare.1.",
      "vulnerability": {
        "name": "CVE-2026-100723"
      },
      "action_statement": "Vulnerability CVE-2026-100723 affects version 3.11.7 of vm2, and is fixed in 3.11.7-tuxcare.1."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/vm2@3.11.7",
          "identifiers": {
            "purl": "pkg:npm/vm2@3.11.7"
          }
        }
      ],
      "timestamp": "2026-10-06T09:33:00.606939+00:00",
      "status_notes": "Vulnerability CVE-2026-92933 affects version 3.11.7 of vm2, and is fixed in 3.11.7-tuxcare.1.",
      "vulnerability": {
        "name": "CVE-2026-92933"
      },
      "action_statement": "Vulnerability CVE-2026-92933 affects version 3.11.7 of vm2, and is fixed in 3.11.7-tuxcare.1."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/vm2@3.11.7",
          "identifiers": {
            "purl": "pkg:npm/vm2@3.11.7"
          }
        }
      ],
      "timestamp": "2026-10-06T09:33:00.606939+00:00",
      "status_notes": "Vulnerability CVE-2026-92934 affects version 3.11.7 of vm2, and is fixed in 3.11.7-tuxcare.1.",
      "vulnerability": {
        "name": "CVE-2026-92934"
      },
      "action_statement": "Vulnerability CVE-2026-92934 affects version 3.11.7 of vm2, and is fixed in 3.11.7-tuxcare.1."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/vm2@3.11.7",
          "identifiers": {
            "purl": "pkg:npm/vm2@3.11.7"
          }
        }
      ],
      "timestamp": "2026-10-06T09:33:00.606939+00:00",
      "status_notes": "Vulnerability CVE-2026-92953 affects version 3.11.7 of vm2, and is fixed in 3.11.7-tuxcare.1.",
      "vulnerability": {
        "name": "CVE-2026-92953"
      },
      "action_statement": "Vulnerability CVE-2026-92953 affects version 3.11.7 of vm2, and is fixed in 3.11.7-tuxcare.1."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/vm2@3.11.7",
          "identifiers": {
            "purl": "pkg:npm/vm2@3.11.7"
          }
        }
      ],
      "timestamp": "2026-10-06T09:33:00.606939+00:00",
      "status_notes": "Vulnerability CVE-2026-92954 affects version 3.11.7 of vm2, and is fixed in 3.11.7-tuxcare.1.",
      "vulnerability": {
        "name": "CVE-2026-92954"
      },
      "action_statement": "Vulnerability CVE-2026-92954 affects version 3.11.7 of vm2, and is fixed in 3.11.7-tuxcare.1."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/vm2@3.11.7",
          "identifiers": {
            "purl": "pkg:npm/vm2@3.11.7"
          }
        }
      ],
      "timestamp": "2026-10-06T09:33:00.606939+00:00",
      "status_notes": "Vulnerability CVE-2026-92955 affects version 3.11.7 of vm2, and is fixed in 3.11.7-tuxcare.1.",
      "vulnerability": {
        "name": "CVE-2026-92955"
      },
      "action_statement": "Vulnerability CVE-2026-92955 affects version 3.11.7 of vm2, and is fixed in 3.11.7-tuxcare.1."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/vm2@3.11.7",
          "identifiers": {
            "purl": "pkg:npm/vm2@3.11.7"
          }
        }
      ],
      "timestamp": "2026-10-06T09:33:00.606939+00:00",
      "status_notes": "Vulnerability CVE-2026-92959 affects version 3.11.7 of vm2, and is fixed in 3.11.7-tuxcare.1.",
      "vulnerability": {
        "name": "CVE-2026-92959"
      },
      "action_statement": "Vulnerability CVE-2026-92959 affects version 3.11.7 of vm2, and is fixed in 3.11.7-tuxcare.1."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/vm2@3.11.7",
          "identifiers": {
            "purl": "pkg:npm/vm2@3.11.7"
          }
        }
      ],
      "timestamp": "2026-10-10T09:58:00.126624+00:00",
      "status_notes": "Vulnerability CVE-2026-93605 affects version 3.11.7 of vm2, and is fixed in 3.11.7-tuxcare.2.",
      "vulnerability": {
        "name": "CVE-2026-93605"
      },
      "action_statement": "Vulnerability CVE-2026-93605 affects version 3.11.7 of vm2, and is fixed in 3.11.7-tuxcare.2."
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:npm/vm2@3.11.7",
          "identifiers": {
            "purl": "pkg:npm/vm2@3.11.7"
          }
        }
      ],
      "timestamp": "2026-10-20T12:46:51.138394+00:00",
      "status_notes": "Vulnerability GHSA-2vh9-cv26-p97m is a false positive for vm2 3.11.7.",
      "vulnerability": {
        "name": "GHSA-2vh9-cv26-p97m"
      },
      "impact_statement": "The vulnerability has been withdrawn."
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:npm/vm2@3.11.7",
          "identifiers": {
            "purl": "pkg:npm/vm2@3.11.7"
          }
        }
      ],
      "timestamp": "2026-10-20T12:46:51.138394+00:00",
      "status_notes": "Vulnerability GHSA-43rv-jrfh-9mrr is a false positive for vm2 3.11.7.",
      "vulnerability": {
        "name": "GHSA-43rv-jrfh-9mrr"
      },
      "impact_statement": "The vulnerability has been withdrawn."
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:npm/vm2@3.11.7",
          "identifiers": {
            "purl": "pkg:npm/vm2@3.11.7"
          }
        }
      ],
      "timestamp": "2026-10-20T12:46:51.138394+00:00",
      "status_notes": "Vulnerability GHSA-4xmw-hh9q-4q7c is a false positive for vm2 3.11.7.",
      "vulnerability": {
        "name": "GHSA-4xmw-hh9q-4q7c"
      },
      "impact_statement": "The vulnerability has been withdrawn."
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:npm/vm2@3.11.7",
          "identifiers": {
            "purl": "pkg:npm/vm2@3.11.7"
          }
        }
      ],
      "timestamp": "2026-10-20T12:46:51.138394+00:00",
      "status_notes": "Vulnerability GHSA-5v7w-95g5-pj6q is a false positive for vm2 3.11.7.",
      "vulnerability": {
        "name": "GHSA-5v7w-95g5-pj6q"
      },
      "impact_statement": "The vulnerability has been withdrawn."
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:npm/vm2@3.11.7",
          "identifiers": {
            "purl": "pkg:npm/vm2@3.11.7"
          }
        }
      ],
      "timestamp": "2026-10-20T12:46:51.138394+00:00",
      "status_notes": "Vulnerability GHSA-7rr2-8fr3-fjqx is a false positive for vm2 3.11.7.",
      "vulnerability": {
        "name": "GHSA-7rr2-8fr3-fjqx"
      },
      "impact_statement": "The vulnerability has been withdrawn."
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:npm/vm2@3.11.7",
          "identifiers": {
            "purl": "pkg:npm/vm2@3.11.7"
          }
        }
      ],
      "timestamp": "2026-10-20T12:46:51.138394+00:00",
      "status_notes": "Vulnerability GHSA-9538-79j2-h62h is a false positive for vm2 3.11.7.",
      "vulnerability": {
        "name": "GHSA-9538-79j2-h62h"
      },
      "impact_statement": "The vulnerability has been withdrawn."
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:npm/vm2@3.11.7",
          "identifiers": {
            "purl": "pkg:npm/vm2@3.11.7"
          }
        }
      ],
      "timestamp": "2026-10-20T12:46:51.138394+00:00",
      "status_notes": "Vulnerability GHSA-9hxx-m5g2-2q3h is a false positive for vm2 3.11.7.",
      "vulnerability": {
        "name": "GHSA-9hxx-m5g2-2q3h"
      },
      "impact_statement": "The vulnerability has been withdrawn."
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:npm/vm2@3.11.7",
          "identifiers": {
            "purl": "pkg:npm/vm2@3.11.7"
          }
        }
      ],
      "timestamp": "2026-10-20T12:46:51.138394+00:00",
      "status_notes": "Vulnerability GHSA-c9wr-qm7p-p6vc is a false positive for vm2 3.11.7.",
      "vulnerability": {
        "name": "GHSA-c9wr-qm7p-p6vc"
      },
      "impact_statement": "The vulnerability has been withdrawn."
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:npm/vm2@3.11.7",
          "identifiers": {
            "purl": "pkg:npm/vm2@3.11.7"
          }
        }
      ],
      "timestamp": "2026-10-20T12:46:51.138394+00:00",
      "status_notes": "Vulnerability GHSA-gg6f-mhqm-f7gp is a false positive for vm2 3.11.7.",
      "vulnerability": {
        "name": "GHSA-gg6f-mhqm-f7gp"
      },
      "impact_statement": "The vulnerability has been withdrawn."
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:npm/vm2@3.11.7",
          "identifiers": {
            "purl": "pkg:npm/vm2@3.11.7"
          }
        }
      ],
      "timestamp": "2026-10-20T12:46:51.138394+00:00",
      "status_notes": "Vulnerability GHSA-mgj2-jqjq-q8gg is a false positive for vm2 3.11.7.",
      "vulnerability": {
        "name": "GHSA-mgj2-jqjq-q8gg"
      },
      "impact_statement": "The vulnerability has been withdrawn."
    }
  ]
}