{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:2d2d2d93-87d4-509d-8161-147de72f658d",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:pypi/gitpython@3.1.31.post2+tuxcare",
      "type": "library",
      "name": "gitpython",
      "version": "3.1.31.post2+tuxcare",
      "purl": "pkg:pypi/gitpython@3.1.31.post2+tuxcare"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:19f82a98-dbd3-58f7-9cb3-51457cb5e162",
      "id": "CVE-2023-40267",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-40267 affects version 3.1.31.post2+tuxcare of gitpython."
      },
      "affects": [
        {
          "ref": "pkg:pypi/gitpython@3.1.31.post2+tuxcare"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e504d958-fc86-540e-aa76-6f66eaff4917",
      "id": "CVE-2023-40590",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-40590 is fixed in version 3.1.31.post2+tuxcare of gitpython."
      },
      "affects": [
        {
          "ref": "pkg:pypi/gitpython@3.1.31.post2+tuxcare"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ad2ef30f-a4b5-5205-8355-034d907c164d",
      "id": "CVE-2023-41040",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-41040 is fixed in version 3.1.31.post2+tuxcare of gitpython."
      },
      "affects": [
        {
          "ref": "pkg:pypi/gitpython@3.1.31.post2+tuxcare"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:01da89ef-f807-5547-a499-fb3af55ed3d5",
      "id": "CVE-2024-22190",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22190 is fixed in version 3.1.31.post2+tuxcare of gitpython."
      },
      "affects": [
        {
          "ref": "pkg:pypi/gitpython@3.1.31.post2+tuxcare"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0227928f-9c94-5a92-9994-f27a29259464",
      "id": "CVE-2026-42215",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42215 affects version 3.1.31.post2+tuxcare of gitpython."
      },
      "affects": [
        {
          "ref": "pkg:pypi/gitpython@3.1.31.post2+tuxcare"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2c49c095-afc5-5abf-b3c8-0d41ce5f8ad4",
      "id": "CVE-2026-42284",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42284 affects version 3.1.31.post2+tuxcare of gitpython."
      },
      "affects": [
        {
          "ref": "pkg:pypi/gitpython@3.1.31.post2+tuxcare"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:406bf01e-801a-5ebc-a31c-1b1d24b6a6ab",
      "id": "CVE-2026-44243",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44243 affects version 3.1.31.post2+tuxcare of gitpython."
      },
      "affects": [
        {
          "ref": "pkg:pypi/gitpython@3.1.31.post2+tuxcare"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c7924597-3d89-53e7-afd8-27628071aca4",
      "id": "CVE-2026-44244",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44244 is fixed in version 3.1.31.post2+tuxcare of gitpython."
      },
      "affects": [
        {
          "ref": "pkg:pypi/gitpython@3.1.31.post2+tuxcare"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:28c1fe42-9f57-5db2-bf57-4a25eb95c4ae",
      "id": "GHSA-2f96-g7mh-g2hx",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-2f96-g7mh-g2hx affects version 3.1.31.post2+tuxcare of gitpython."
      },
      "affects": [
        {
          "ref": "pkg:pypi/gitpython@3.1.31.post2+tuxcare"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f92a9327-7297-53d9-8aa4-b5668a1cedec",
      "id": "GHSA-3f7w-8rr8-f37f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-3f7w-8rr8-f37f affects version 3.1.31.post2+tuxcare of gitpython."
      },
      "affects": [
        {
          "ref": "pkg:pypi/gitpython@3.1.31.post2+tuxcare"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:de24b0dd-ec50-5bcb-804e-7b7a8ac43464",
      "id": "GHSA-3rp5-jjmw-4wv2",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-3rp5-jjmw-4wv2 affects version 3.1.31.post2+tuxcare of gitpython."
      },
      "affects": [
        {
          "ref": "pkg:pypi/gitpython@3.1.31.post2+tuxcare"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6ce0a09b-55cd-5bad-afe7-d6f2e3fa4dc9",
      "id": "GHSA-4gmw-gg2m-w46p",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-4gmw-gg2m-w46p affects version 3.1.31.post2+tuxcare of gitpython."
      },
      "affects": [
        {
          "ref": "pkg:pypi/gitpython@3.1.31.post2+tuxcare"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b6728279-81da-5fe8-a5b0-95549483541e",
      "id": "GHSA-539m-9xh6-q6rr",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-539m-9xh6-q6rr affects version 3.1.31.post2+tuxcare of gitpython."
      },
      "affects": [
        {
          "ref": "pkg:pypi/gitpython@3.1.31.post2+tuxcare"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c5de3469-3605-5b61-9802-5a44d9333d9d",
      "id": "GHSA-6p8h-3wgx-97gf",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-6p8h-3wgx-97gf affects version 3.1.31.post2+tuxcare of gitpython."
      },
      "affects": [
        {
          "ref": "pkg:pypi/gitpython@3.1.31.post2+tuxcare"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e934ee8b-8a8b-5b0d-983f-92279cd2385b",
      "id": "GHSA-94p4-4cq8-9g67",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-94p4-4cq8-9g67 affects version 3.1.31.post2+tuxcare of gitpython."
      },
      "affects": [
        {
          "ref": "pkg:pypi/gitpython@3.1.31.post2+tuxcare"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d51d7c87-f670-5439-a19e-5f01b83bb209",
      "id": "GHSA-956x-8gvw-wg5v",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-956x-8gvw-wg5v affects version 3.1.31.post2+tuxcare of gitpython."
      },
      "affects": [
        {
          "ref": "pkg:pypi/gitpython@3.1.31.post2+tuxcare"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8a6eb14f-d621-5fac-ba28-e4601b519365",
      "id": "GHSA-9rj7-rf2p-w77r",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-9rj7-rf2p-w77r affects version 3.1.31.post2+tuxcare of gitpython."
      },
      "affects": [
        {
          "ref": "pkg:pypi/gitpython@3.1.31.post2+tuxcare"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:06ce1321-fcdb-5af4-bb7c-80534610b68b",
      "id": "GHSA-fjr4-x663-mwxc",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-fjr4-x663-mwxc affects version 3.1.31.post2+tuxcare of gitpython."
      },
      "affects": [
        {
          "ref": "pkg:pypi/gitpython@3.1.31.post2+tuxcare"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d208df60-da2e-55cd-a645-9d4ee7264acf",
      "id": "GHSA-hh9p-6wh2-4mfc",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-hh9p-6wh2-4mfc affects version 3.1.31.post2+tuxcare of gitpython."
      },
      "affects": [
        {
          "ref": "pkg:pypi/gitpython@3.1.31.post2+tuxcare"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f6e2e185-d97b-5711-9211-c53f9ab1ad92",
      "id": "GHSA-hmq2-w58f-27jc",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-hmq2-w58f-27jc affects version 3.1.31.post2+tuxcare of gitpython."
      },
      "affects": [
        {
          "ref": "pkg:pypi/gitpython@3.1.31.post2+tuxcare"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:da37837a-a362-5577-a8ae-239028de087a",
      "id": "GHSA-jm78-9fvv-mhgr",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-jm78-9fvv-mhgr affects version 3.1.31.post2+tuxcare of gitpython."
      },
      "affects": [
        {
          "ref": "pkg:pypi/gitpython@3.1.31.post2+tuxcare"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d1b00462-2f61-58eb-8c3d-6835bc231474",
      "id": "GHSA-mv93-w799-cj2w",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mv93-w799-cj2w affects version 3.1.31.post2+tuxcare of gitpython."
      },
      "affects": [
        {
          "ref": "pkg:pypi/gitpython@3.1.31.post2+tuxcare"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e3e47334-8b41-5312-b286-eded3b7ab494",
      "id": "GHSA-p538-c434-8v24",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-p538-c434-8v24 affects version 3.1.31.post2+tuxcare of gitpython."
      },
      "affects": [
        {
          "ref": "pkg:pypi/gitpython@3.1.31.post2+tuxcare"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6025f472-68f8-5943-86fe-6ca8c0f752ec",
      "id": "GHSA-r9mr-m37c-5fr3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-r9mr-m37c-5fr3 affects version 3.1.31.post2+tuxcare of gitpython."
      },
      "affects": [
        {
          "ref": "pkg:pypi/gitpython@3.1.31.post2+tuxcare"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:22e40aef-789e-58ae-9432-5f3b500344c9",
      "id": "GHSA-rwj8-pgh3-r573",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-rwj8-pgh3-r573 affects version 3.1.31.post2+tuxcare of gitpython."
      },
      "affects": [
        {
          "ref": "pkg:pypi/gitpython@3.1.31.post2+tuxcare"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8ba0d57b-19e3-5b34-99bc-4ba48b13451e",
      "id": "GHSA-wvpp-8hx9-p66j",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-wvpp-8hx9-p66j affects version 3.1.31.post2+tuxcare of gitpython."
      },
      "affects": [
        {
          "ref": "pkg:pypi/gitpython@3.1.31.post2+tuxcare"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:pypi/gitpython@3.1.31.post2+tuxcare"
    }
  ]
}