{
  "@id": "urn:uuid:c930be59-5b26-48b1-af8e-5cb667cab82c",
  "role": "Document Creator",
  "author": "https://tuxcare.com",
  "version": 1,
  "@context": "https://openvex.dev/ns/v0.2.0",
  "timestamp": "2026-09-24T09:31:26.931840+00:00",
  "statements": [
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:composer/league/commonmark@1.6.7-p5+tuxcare",
          "identifiers": {
            "purl": "pkg:composer/league/commonmark@1.6.7-p5+tuxcare"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2025-46734 is fixed in version 1.6.7-p5+tuxcare of league/commonmark.",
      "vulnerability": {
        "name": "CVE-2025-46734"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:composer/league/commonmark@1.6.7-p5+tuxcare",
          "identifiers": {
            "purl": "pkg:composer/league/commonmark@1.6.7-p5+tuxcare"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-30838 is fixed in version 1.6.7-p5+tuxcare of league/commonmark.",
      "vulnerability": {
        "name": "CVE-2026-30838"
      }
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:composer/league/commonmark@1.6.7-p5+tuxcare",
          "identifiers": {
            "purl": "pkg:composer/league/commonmark@1.6.7-p5+tuxcare"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-33347 does not affect version 1.6.7-p5+tuxcare of league/commonmark. The affected files doesn't exist in the version 1.6.7 and also The GitHub Advisory (GHSA-hh8v-hgvp-g3f5) lists the vulnerable range as >= 2.3.0 <= 2.8.1",
      "justification": "vulnerable_code_not_present",
      "vulnerability": {
        "name": "CVE-2026-33347"
      },
      "impact_statement": "The affected files doesn't exist in the version 1.6.7 and also The GitHub Advisory (GHSA-hh8v-hgvp-g3f5) lists the vulnerable range as >= 2.3.0 <= 2.8.1"
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:composer/league/commonmark@1.6.7-p5+tuxcare",
          "identifiers": {
            "purl": "pkg:composer/league/commonmark@1.6.7-p5+tuxcare"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-71478 is fixed in version 1.6.7-p5+tuxcare of league/commonmark.",
      "vulnerability": {
        "name": "CVE-2026-71478"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:composer/league/commonmark@1.6.7-p5+tuxcare",
          "identifiers": {
            "purl": "pkg:composer/league/commonmark@1.6.7-p5+tuxcare"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-71488 is fixed in version 1.6.7-p5+tuxcare of league/commonmark.",
      "vulnerability": {
        "name": "CVE-2026-71488"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:composer/league/commonmark@1.6.7-p5+tuxcare",
          "identifiers": {
            "purl": "pkg:composer/league/commonmark@1.6.7-p5+tuxcare"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability GHSA-8rr7-cvq3-gmfh is fixed in version 1.6.7-p5+tuxcare of league/commonmark.",
      "vulnerability": {
        "name": "GHSA-8rr7-cvq3-gmfh"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:composer/league/commonmark@1.6.7-p5+tuxcare",
          "identifiers": {
            "purl": "pkg:composer/league/commonmark@1.6.7-p5+tuxcare"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability GHSA-c2pc-g5qf-rfrf is fixed in version 1.6.7-p5+tuxcare of league/commonmark.",
      "vulnerability": {
        "name": "GHSA-c2pc-g5qf-rfrf"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:composer/league/commonmark@1.6.7-p5+tuxcare",
          "identifiers": {
            "purl": "pkg:composer/league/commonmark@1.6.7-p5+tuxcare"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability GHSA-g2gp-3wwq-f4ph is fixed in version 1.6.7-p5+tuxcare of league/commonmark.",
      "vulnerability": {
        "name": "GHSA-g2gp-3wwq-f4ph"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:composer/league/commonmark@1.6.7-p5+tuxcare",
          "identifiers": {
            "purl": "pkg:composer/league/commonmark@1.6.7-p5+tuxcare"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability GHSA-j8pm-gj4c-rq4x is fixed in version 1.6.7-p5+tuxcare of league/commonmark.",
      "vulnerability": {
        "name": "GHSA-j8pm-gj4c-rq4x"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:composer/league/commonmark@1.6.7-p5+tuxcare",
          "identifiers": {
            "purl": "pkg:composer/league/commonmark@1.6.7-p5+tuxcare"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability GHSA-jfm3-95jq-q3rf is fixed in version 1.6.7-p5+tuxcare of league/commonmark.",
      "vulnerability": {
        "name": "GHSA-jfm3-95jq-q3rf"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:composer/league/commonmark@1.6.7-p5+tuxcare",
          "identifiers": {
            "purl": "pkg:composer/league/commonmark@1.6.7-p5+tuxcare"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability GHSA-jjv6-8j6v-6j52 is fixed in version 1.6.7-p5+tuxcare of league/commonmark.",
      "vulnerability": {
        "name": "GHSA-jjv6-8j6v-6j52"
      }
    }
  ]
}