{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:f6470898-7e8f-54f7-b6eb-62e99278e76e", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "gitpython", "purl": "pkg:pypi/gitpython@3.1.31.post12+tuxcare", "type": "library", "bom-ref": "pkg:pypi/gitpython@3.1.31.post12+tuxcare", "version": "3.1.31.post12+tuxcare", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2023-40267", "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post12+tuxcare" } ], "bom-ref": "urn:uuid:c37c5b4f-e161-50ce-9b56-5084853b9277", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-40267 is fixed in version 3.1.31.post12+tuxcare of gitpython." } }, { "id": "CVE-2023-40590", "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post12+tuxcare" } ], "bom-ref": "urn:uuid:7bfd54f5-d944-5b9f-b0ac-2b4885d7da1b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-40590 is fixed in version 3.1.31.post12+tuxcare of gitpython." } }, { "id": "CVE-2023-41040", "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post12+tuxcare" } ], "bom-ref": "urn:uuid:376c33cc-10a7-5443-a2be-40e3fb446cbe", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-41040 is fixed in version 3.1.31.post12+tuxcare of gitpython." } }, { "id": "CVE-2024-22190", "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post12+tuxcare" } ], "bom-ref": "urn:uuid:9ab180cf-2ddd-5dd2-94df-2d23613366ed", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22190 is fixed in version 3.1.31.post12+tuxcare of gitpython." } }, { "id": "CVE-2026-42215", "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post12+tuxcare" } ], "bom-ref": "urn:uuid:b4b4c6c8-9ce5-5e38-bf3e-fb3091c0838d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42215 is fixed in version 3.1.31.post12+tuxcare of gitpython." } }, { "id": "CVE-2026-42284", "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post12+tuxcare" } ], "bom-ref": "urn:uuid:4276476c-061f-5d97-ad7e-9c2ffd8ecb0a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42284 affects version 3.1.31.post12+tuxcare of gitpython, and is fixed in 3.1.31.post13+tuxcare." } }, { "id": "CVE-2026-44243", "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post12+tuxcare" } ], "bom-ref": "urn:uuid:636a52d4-924a-5164-9851-518de1f294d3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44243 affects version 3.1.31.post12+tuxcare of gitpython, and is fixed in 3.1.31.post13+tuxcare." } }, { "id": "CVE-2026-44244", "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post12+tuxcare" } ], "bom-ref": "urn:uuid:070b85c4-6632-50d5-9f25-e3f6ff6e4a68", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44244 is fixed in version 3.1.31.post12+tuxcare of gitpython." } }, { "id": "CVE-2026-67322", "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post12+tuxcare" } ], "bom-ref": "urn:uuid:88e8a259-1d06-58aa-8bb0-ae130e1e6a44", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-67322 is fixed in version 3.1.31.post12+tuxcare of gitpython." } }, { "id": "CVE-2026-67323", "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post12+tuxcare" } ], "bom-ref": "urn:uuid:cf35300f-80d9-5d81-9d60-ca95b0238ad9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-67323 is fixed in version 3.1.31.post12+tuxcare of gitpython." } }, { "id": "CVE-2026-67325", "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post12+tuxcare" } ], "bom-ref": "urn:uuid:e92e8644-9466-5959-8805-402028f73e6d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-67325 is fixed in version 3.1.31.post12+tuxcare of gitpython." } }, { "id": "CVE-2026-76217", "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post12+tuxcare" } ], "bom-ref": "urn:uuid:4334b7b8-9ed0-57ff-9a8a-dce442bbe199", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-76217 is fixed in version 3.1.31.post12+tuxcare of gitpython." } }, { "id": "CVE-2026-76218", "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post12+tuxcare" } ], "bom-ref": "urn:uuid:1679a864-dc7e-5abb-a168-5f771e799a56", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-76218 is fixed in version 3.1.31.post12+tuxcare of gitpython." } }, { "id": "CVE-2026-76219", "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post12+tuxcare" } ], "bom-ref": "urn:uuid:47edcccf-57fb-5c01-87df-79cb74355d06", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-76219 is fixed in version 3.1.31.post12+tuxcare of gitpython." } }, { "id": "CVE-2026-76220", "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post12+tuxcare" } ], "bom-ref": "urn:uuid:2bd576b8-bb55-59d8-b44b-a064982acd94", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-76220 is fixed in version 3.1.31.post12+tuxcare of gitpython." } }, { "id": "CVE-2026-76222", "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post12+tuxcare" } ], "bom-ref": "urn:uuid:3a5a9b49-7dc4-5305-80c8-3e88f1384a86", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-76222 is fixed in version 3.1.31.post12+tuxcare of gitpython." } }, { "id": "CVE-2026-78675", "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post12+tuxcare" } ], "bom-ref": "urn:uuid:42606140-4a3b-599d-a80b-60416d15d515", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-78675 is fixed in version 3.1.31.post12+tuxcare of gitpython." } }, { "id": "CVE-2026-78676", "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post12+tuxcare" } ], "bom-ref": "urn:uuid:10e83f34-387f-5bcf-aa0c-fd98f4fbc635", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-78676 is fixed in version 3.1.31.post12+tuxcare of gitpython." } }, { "id": "CVE-2026-78677", "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post12+tuxcare" } ], "bom-ref": "urn:uuid:4a60bf30-4314-590a-923e-fc5c652df714", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-78677 is fixed in version 3.1.31.post12+tuxcare of gitpython." } }, { "id": "CVE-2026-78678", "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post12+tuxcare" } ], "bom-ref": "urn:uuid:2174b4b4-297f-54a0-a5bd-2871d6c833ce", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-78678 is fixed in version 3.1.31.post12+tuxcare of gitpython." } }, { "id": "CVE-2026-78679", "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post12+tuxcare" } ], "bom-ref": "urn:uuid:1387ae79-626d-59f3-b51b-18171ec33c32", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-78679 is fixed in version 3.1.31.post12+tuxcare of gitpython." } }, { "id": "GHSA-298h-jpq4-m665", "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post12+tuxcare" } ], "bom-ref": "urn:uuid:960695b0-e3c9-5f94-9250-d283661cbf65", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-298h-jpq4-m665 is a false positive for gitpython 3.1.31.post12+tuxcare." } }, { "id": "GHSA-2f96-g7mh-g2hx", "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post12+tuxcare" } ], "bom-ref": "urn:uuid:eeaef256-c89f-5799-83a1-444ce694c26e", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-2f96-g7mh-g2hx is fixed in version 3.1.31.post12+tuxcare of gitpython." } }, { "id": "GHSA-3f7w-8rr8-f37f", "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post12+tuxcare" } ], "bom-ref": "urn:uuid:625f2ea3-a1b2-5b78-8bba-14cadecc638d", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-3f7w-8rr8-f37f is fixed in version 3.1.31.post12+tuxcare of gitpython." } }, { "id": "GHSA-3rp5-jjmw-4wv2", "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post12+tuxcare" } ], "bom-ref": "urn:uuid:18e961e1-afcd-5d79-ad3e-4840d22615e9", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-3rp5-jjmw-4wv2 is fixed in version 3.1.31.post12+tuxcare of gitpython." } }, { "id": "GHSA-3vrx-526r-64rm", "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post12+tuxcare" } ], "bom-ref": "urn:uuid:ae1f1b24-cb10-5830-a24f-140c2caf166a", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-3vrx-526r-64rm is a false positive for gitpython 3.1.31.post12+tuxcare." } }, { "id": "GHSA-4gmw-gg2m-w46p", "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post12+tuxcare" } ], "bom-ref": "urn:uuid:5201deb8-1039-54c5-a349-1ddc53081389", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-4gmw-gg2m-w46p is fixed in version 3.1.31.post12+tuxcare of gitpython." } }, { "id": "GHSA-4vpg-pfj8-m33q", "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post12+tuxcare" } ], "bom-ref": "urn:uuid:e70893ce-924a-57d8-91f0-007e0139a7f4", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-4vpg-pfj8-m33q is a false positive for gitpython 3.1.31.post12+tuxcare." } }, { "id": "GHSA-539m-9xh6-q6rr", "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post12+tuxcare" } ], "bom-ref": "urn:uuid:405e4e9c-6072-5103-80a1-35138fe32513", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-539m-9xh6-q6rr is fixed in version 3.1.31.post12+tuxcare of gitpython." } }, { "id": "GHSA-6p8h-3wgx-97gf", "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post12+tuxcare" } ], "bom-ref": "urn:uuid:ffd5d97b-3fb7-5557-89a9-41f2cad693bd", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-6p8h-3wgx-97gf is fixed in version 3.1.31.post12+tuxcare of gitpython." } }, { "id": "GHSA-6r2r-ww24-7h52", "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post12+tuxcare" } ], "bom-ref": "urn:uuid:11062ac6-352a-5c64-b9c8-565de8d991a3", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-6r2r-ww24-7h52 is a false positive for gitpython 3.1.31.post12+tuxcare." } }, { "id": "GHSA-6rj2-96f5-chj9", "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post12+tuxcare" } ], "bom-ref": "urn:uuid:9f8b4d16-b032-5fea-addb-c798403f40e2", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-6rj2-96f5-chj9 is a false positive for gitpython 3.1.31.post12+tuxcare." } }, { "id": "GHSA-7jx3-jqcp-hhgc", "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post12+tuxcare" } ], "bom-ref": "urn:uuid:328b50fd-d0fe-5a49-aa53-d809c66b79d2", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-7jx3-jqcp-hhgc is a false positive for gitpython 3.1.31.post12+tuxcare." } }, { "id": "GHSA-7r39-6q8m-qw68", "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post12+tuxcare" } ], "bom-ref": "urn:uuid:ccfb869d-8d85-5fbd-9502-7b950317a479", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-7r39-6q8m-qw68 is a false positive for gitpython 3.1.31.post12+tuxcare." } }, { "id": "GHSA-89ff-m8wv-p99r", "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post12+tuxcare" } ], "bom-ref": "urn:uuid:cfa449a7-a26b-5268-bfc2-5a4c009c1301", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-89ff-m8wv-p99r is a false positive for gitpython 3.1.31.post12+tuxcare." } }, { "id": "GHSA-94p4-4cq8-9g67", "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post12+tuxcare" } ], "bom-ref": "urn:uuid:1666787d-2885-597a-9cf0-64e56e1d4c22", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-94p4-4cq8-9g67 is fixed in version 3.1.31.post12+tuxcare of gitpython." } }, { "id": "GHSA-9557-234j-7rv9", "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post12+tuxcare" } ], "bom-ref": "urn:uuid:fee92516-ac06-5805-9659-528d97171358", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-9557-234j-7rv9 is a false positive for gitpython 3.1.31.post12+tuxcare." } }, { "id": "GHSA-956x-8gvw-wg5v", "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post12+tuxcare" } ], "bom-ref": "urn:uuid:04d03111-4d5f-5bcd-b87b-9f725fd1b70c", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-956x-8gvw-wg5v is fixed in version 3.1.31.post12+tuxcare of gitpython." } }, { "id": "GHSA-9rj7-rf2p-w77r", "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post12+tuxcare" } ], "bom-ref": "urn:uuid:f9f836b9-1ac9-5901-ad2a-aca1dec6617b", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-9rj7-rf2p-w77r is fixed in version 3.1.31.post12+tuxcare of gitpython." } }, { "id": "GHSA-crmc-f4m7-33fj", "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post12+tuxcare" } ], "bom-ref": "urn:uuid:79096755-8d5b-5a20-89ff-cc1e1cc5979a", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-crmc-f4m7-33fj is a false positive for gitpython 3.1.31.post12+tuxcare." } }, { "id": "GHSA-fjr4-x663-mwxc", "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post12+tuxcare" } ], "bom-ref": "urn:uuid:f1be7ba8-7aa3-55ac-9af0-bdd434c48e50", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-fjr4-x663-mwxc is fixed in version 3.1.31.post12+tuxcare of gitpython." } }, { "id": "GHSA-hh9p-6wh2-4mfc", "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post12+tuxcare" } ], "bom-ref": "urn:uuid:e45046d5-8aa6-5df4-8e58-812643373f34", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-hh9p-6wh2-4mfc is fixed in version 3.1.31.post12+tuxcare of gitpython." } }, { "id": "GHSA-hmq2-w58f-27jc", "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post12+tuxcare" } ], "bom-ref": "urn:uuid:66a8e326-0e67-51ef-ab0b-9a08cc7a6053", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-hmq2-w58f-27jc is fixed in version 3.1.31.post12+tuxcare of gitpython." } }, { "id": "GHSA-jm78-9fvv-mhgr", "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post12+tuxcare" } ], "bom-ref": "urn:uuid:ebbba6e5-b621-5e38-8031-f5e0145156af", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-jm78-9fvv-mhgr is fixed in version 3.1.31.post12+tuxcare of gitpython." } }, { "id": "GHSA-m4f3-g4cq-hqrx", "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post12+tuxcare" } ], "bom-ref": "urn:uuid:a6318a6a-78b0-56df-b92f-45a1f3d6e143", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-m4f3-g4cq-hqrx is a false positive for gitpython 3.1.31.post12+tuxcare." } }, { "id": "GHSA-mv93-w799-cj2w", "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post12+tuxcare" } ], "bom-ref": "urn:uuid:037c9b76-3cd5-5809-b3d6-25f6a8845149", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-mv93-w799-cj2w is fixed in version 3.1.31.post12+tuxcare of gitpython." } }, { "id": "GHSA-p538-c434-8v24", "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post12+tuxcare" } ], "bom-ref": "urn:uuid:17213f34-4ca8-5086-8190-5a27a40c50eb", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-p538-c434-8v24 is fixed in version 3.1.31.post12+tuxcare of gitpython." } }, { "id": "GHSA-rwj8-pgh3-r573", "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post12+tuxcare" } ], "bom-ref": "urn:uuid:93ab4ce7-8f3a-5de3-901d-1b817f09d9ef", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-rwj8-pgh3-r573 is fixed in version 3.1.31.post12+tuxcare of gitpython." } }, { "id": "GHSA-w672-239g-c3gr", "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post12+tuxcare" } ], "bom-ref": "urn:uuid:2d65cf59-07f2-5393-85f1-356044e027d5", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-w672-239g-c3gr is a false positive for gitpython 3.1.31.post12+tuxcare." } }, { "id": "GHSA-wv46-xpj8-pw53", "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post12+tuxcare" } ], "bom-ref": "urn:uuid:e6849b99-9e68-5401-9035-d242e96f67c9", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-wv46-xpj8-pw53 is a false positive for gitpython 3.1.31.post12+tuxcare." } }, { "id": "GHSA-wvpp-8hx9-p66j", "affects": [ { "ref": "pkg:pypi/gitpython@3.1.31.post12+tuxcare" } ], "bom-ref": "urn:uuid:9284fe86-6d0d-5733-bc2c-347acdb43944", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-wvpp-8hx9-p66j is fixed in version 3.1.31.post12+tuxcare of gitpython." } } ], "dependencies": [ { "ref": "pkg:pypi/gitpython@3.1.31.post12+tuxcare" } ] }