{
  "@id": "urn:uuid:817a3d66-3e6d-4153-879a-3dd610c0da25",
  "role": "Document Creator",
  "author": "https://tuxcare.com",
  "version": 3,
  "@context": "https://openvex.dev/ns/v0.2.0",
  "timestamp": "2026-11-09T16:14:07.860712+00:00",
  "statements": [
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.codehaus.plexus/plexus-utils@1.1-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.codehaus.plexus/plexus-utils@1.1-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-11-09T16:14:07.860712+00:00",
      "status_notes": "Vulnerability CVE-2017-1000487 affects version 1.1-tuxcare.1 of org.codehaus.plexus:plexus-utils, and is fixed in 1.1-tuxcare.2.",
      "vulnerability": {
        "name": "CVE-2017-1000487"
      },
      "action_statement": "Vulnerability CVE-2017-1000487 affects version 1.1-tuxcare.1 of org.codehaus.plexus:plexus-utils, and is fixed in 1.1-tuxcare.2."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.codehaus.plexus/plexus-utils@1.1-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.codehaus.plexus/plexus-utils@1.1-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-11-04T22:23:21.025750+00:00",
      "status_notes": "Vulnerability CVE-2022-4244 affects version 1.1-tuxcare.1 of org.codehaus.plexus:plexus-utils.",
      "vulnerability": {
        "name": "CVE-2022-4244"
      },
      "action_statement": "Vulnerability CVE-2022-4244 affects version 1.1-tuxcare.1 of org.codehaus.plexus:plexus-utils."
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:maven/org.codehaus.plexus/plexus-utils@1.1-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.codehaus.plexus/plexus-utils@1.1-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-11-04T22:23:21.025750+00:00",
      "status_notes": "Vulnerability CVE-2022-4245 does not affect version 1.1-tuxcare.1 of org.codehaus.plexus:plexus-utils. not_affected \u2014 CVE-2022-4245 targets org.codehaus.plexus.util.xml.XmlWriterUtil#writeComment, which does not exist in version 1.1. The XmlWriterUtil class was introduced in version 1.5.4, and version 1.1 predates this by several releases. Exhaustive search confirmed the affected class and method are completely absent from the version 1.1 codebase.",
      "justification": "vulnerable_code_not_present",
      "vulnerability": {
        "name": "CVE-2022-4245"
      },
      "impact_statement": "not_affected \u2014 CVE-2022-4245 targets org.codehaus.plexus.util.xml.XmlWriterUtil#writeComment, which does not exist in version 1.1. The XmlWriterUtil class was introduced in version 1.5.4, and version 1.1 predates this by several releases. Exhaustive search confirmed the affected class and method are completely absent from the version 1.1 codebase."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/org.codehaus.plexus/plexus-utils@1.1-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.codehaus.plexus/plexus-utils@1.1-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-11-04T22:23:43.472140+00:00",
      "status_notes": "Vulnerability CVE-2025-67030 is fixed in version 1.1-tuxcare.1 of org.codehaus.plexus:plexus-utils.",
      "vulnerability": {
        "name": "CVE-2025-67030"
      }
    }
  ]
}