{
  "@id": "urn:uuid:da2712cc-93ad-47d0-8773-e28cb1be5fea",
  "role": "Document Creator",
  "author": "https://tuxcare.com",
  "version": 4,
  "@context": "https://openvex.dev/ns/v0.2.0",
  "timestamp": "2026-11-06T18:11:48.485293+00:00",
  "statements": [
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework.ldap/spring-ldap-core@2.3.3.RELEASE-tuxcare.2",
          "identifiers": {
            "purl": "pkg:maven/org.springframework.ldap/spring-ldap-core@2.3.3.RELEASE-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-11-06T18:11:48.485293+00:00",
      "status_notes": "Vulnerability CVE-2017-8028 does not affect version 2.3.3.RELEASE-tuxcare.2 of org.springframework.ldap:spring-ldap-core. Prechecker: An upstream release that contains the fix is part of this version's source history, and the code the fix removes is gone. The upstream fix was released in 2.3.2, and version 2.3.3.RELEASE is a later release of the same line. Advisories: GitHub GHSA-pjqh-2jcc-5j84 (fixed in 2.3.2), NVD (last affected 2.3.1), Snyk (fixed in 2.3.2.RELEASE).",
      "justification": "vulnerable_code_not_present",
      "vulnerability": {
        "name": "CVE-2017-8028"
      },
      "impact_statement": "Prechecker: An upstream release that contains the fix is part of this version's source history, and the code the fix removes is gone. The upstream fix was released in 2.3.2, and version 2.3.3.RELEASE is a later release of the same line. Advisories: GitHub GHSA-pjqh-2jcc-5j84 (fixed in 2.3.2), NVD (last affected 2.3.1), Snyk (fixed in 2.3.2.RELEASE)."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework.ldap/spring-ldap-core@2.3.3.RELEASE-tuxcare.2",
          "identifiers": {
            "purl": "pkg:maven/org.springframework.ldap/spring-ldap-core@2.3.3.RELEASE-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-10-14T21:04:00.126703+00:00",
      "status_notes": "Vulnerability CVE-2024-38829 affects version 2.3.3.RELEASE-tuxcare.2 of org.springframework.ldap:spring-ldap-core.",
      "vulnerability": {
        "name": "CVE-2024-38829"
      },
      "action_statement": "Vulnerability CVE-2024-38829 affects version 2.3.3.RELEASE-tuxcare.2 of org.springframework.ldap:spring-ldap-core."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/org.springframework.ldap/spring-ldap-core@2.3.3.RELEASE-tuxcare.2",
          "identifiers": {
            "purl": "pkg:maven/org.springframework.ldap/spring-ldap-core@2.3.3.RELEASE-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-10-14T21:04:00.126703+00:00",
      "status_notes": "Vulnerability CVE-2026-41720 is fixed in version 2.3.3.RELEASE-tuxcare.2 of org.springframework.ldap:spring-ldap-core.",
      "vulnerability": {
        "name": "CVE-2026-41720"
      }
    }
  ]
}