{
  "@id": "urn:uuid:3611601e-eac5-4234-b625-b05f1bcdf946",
  "role": "Document Creator",
  "author": "https://tuxcare.com",
  "version": 3,
  "@context": "https://openvex.dev/ns/v0.2.0",
  "timestamp": "2026-11-03T22:42:59.641005+00:00",
  "statements": [
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/bl@1.1.2",
          "identifiers": {
            "purl": "pkg:npm/bl@1.1.2"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2020-8244 affects version 1.1.2 of bl, and is fixed in 1.1.2-tuxcare.1.",
      "vulnerability": {
        "name": "CVE-2020-8244"
      },
      "action_statement": "Vulnerability CVE-2020-8244 affects version 1.1.2 of bl, and is fixed in 1.1.2-tuxcare.1."
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:npm/bl@1.1.2",
          "identifiers": {
            "purl": "pkg:npm/bl@1.1.2"
          }
        }
      ],
      "timestamp": "2026-11-03T22:42:59.641005+00:00",
      "status_notes": "Vulnerability GHSA-wrw9-m778-g6mc does not affect version 1.1.2 of bl. not_affected \u2014 The target bl library version 1.1.2-tuxcare.1 is NOT AFFECTED by GHSA-wrw9-m778-g6mc (memory exposure via bl.append(number)). The vulnerability pattern is not present because the upstream fix was already included in the base release that TuxCare onboarded. The fix commit (061279d) was authored by upstream maintainer Feross Aboukhadijeh and was part of the original v1.0.1+ releases, which predat...",
      "justification": "vulnerable_code_not_present",
      "vulnerability": {
        "name": "GHSA-wrw9-m778-g6mc"
      },
      "impact_statement": "not_affected \u2014 The target bl library version 1.1.2-tuxcare.1 is NOT AFFECTED by GHSA-wrw9-m778-g6mc (memory exposure via bl.append(number)). The vulnerability pattern is not present because the upstream fix was already included in the base release that TuxCare onboarded. The fix commit (061279d) was authored by upstream maintainer Feross Aboukhadijeh and was part of the original v1.0.1+ releases, which predat..."
    }
  ]
}