{
  "@context": "https://openvex.dev/ns/v0.2.0",
  "@id": "https://openvex.dev/docs/public/vex-8fd92ba69e2cd756304fa93213192b22af49976ffc6510483a90f91b1a9f14e9",
  "author": "minimus",
  "timestamp": "2026-06-25T20:33:11.875610721Z",
  "version": 1,
  "statements": [
    {
      "vulnerability": {
        "name": "MINI-23p3-qw4q-3336",
        "aliases": [
          "CVE-2026-4438"
        ]
      },
      "products": [
        {
          "@id": "pkg:oci/distribution-registry",
          "hashes": {
            "sha-256": "sha256:f863dee83f11545364146f67843a64c66b54951b8d5aaa78b5005ba575317a58"
          },
          "subcomponents": [
            {
              "@id": "pkg:apk/minimos/glibc@2.43-r4"
            },
            {
              "@id": "pkg:apk/minimos/glibc-locale-posix@2.43-r4"
            },
            {
              "@id": "pkg:apk/minimos/ld-linux@2.43-r4"
            }
          ]
        }
      ],
      "status": "fixed"
    },
    {
      "vulnerability": {
        "name": "MINI-2ff7-jphc-36c6",
        "aliases": [
          "CVE-2025-61724"
        ]
      },
      "products": [
        {
          "@id": "pkg:oci/distribution-registry",
          "hashes": {
            "sha-256": "sha256:f863dee83f11545364146f67843a64c66b54951b8d5aaa78b5005ba575317a58"
          },
          "subcomponents": [
            {
              "@id": "pkg:apk/minimos/distribution-registry-2.8@2.8.3-r0"
            }
          ]
        }
      ],
      "status": "under_investigation"
    },
    {
      "vulnerability": {
        "name": "MINI-2h4r-7rh6-7gxc",
        "aliases": [
          "CVE-2026-42501"
        ]
      },
      "products": [
        {
          "@id": "pkg:oci/distribution-registry",
          "hashes": {
            "sha-256": "sha256:f863dee83f11545364146f67843a64c66b54951b8d5aaa78b5005ba575317a58"
          },
          "subcomponents": [
            {
              "@id": "pkg:apk/minimos/distribution-registry-2.8@2.8.3-r0"
            }
          ]
        }
      ],
      "status": "not_affected",
      "justification": "vulnerable_code_not_present"
    },
    {
      "vulnerability": {
        "name": "MINI-2v62-4c2p-jf4p",
        "aliases": [
          "CVE-2026-32283"
        ]
      },
      "products": [
        {
          "@id": "pkg:oci/distribution-registry",
          "hashes": {
            "sha-256": "sha256:f863dee83f11545364146f67843a64c66b54951b8d5aaa78b5005ba575317a58"
          },
          "subcomponents": [
            {
              "@id": "pkg:apk/minimos/distribution-registry-2.8@2.8.3-r0"
            }
          ]
        }
      ],
      "status": "affected",
      "action_statement": "For more context and potential remediation information, review the References tab: https://images.minimus.io/advisories/CVE-2026-32283/references"
    },
    {
      "vulnerability": {
        "name": "MINI-2vwg-hgf7-6gf5",
        "aliases": [
          "CVE-2025-61730"
        ]
      },
      "products": [
        {
          "@id": "pkg:oci/distribution-registry",
          "hashes": {
            "sha-256": "sha256:f863dee83f11545364146f67843a64c66b54951b8d5aaa78b5005ba575317a58"
          },
          "subcomponents": [
            {
              "@id": "pkg:apk/minimos/distribution-registry-2.8@2.8.3-r0"
            }
          ]
        }
      ],
      "status": "under_investigation"
    },
    {
      "vulnerability": {
        "name": "MINI-3729-6w87-2929",
        "aliases": [
          "CVE-2025-60876"
        ]
      },
      "products": [
        {
          "@id": "pkg:oci/distribution-registry",
          "hashes": {
            "sha-256": "sha256:f863dee83f11545364146f67843a64c66b54951b8d5aaa78b5005ba575317a58"
          },
          "subcomponents": [
            {
              "@id": "pkg:apk/minimos/busybox@1.37.0-r7"
            }
          ]
        }
      ],
      "status": "fixed"
    },
    {
      "vulnerability": {
        "name": "MINI-3jx9-w69q-v5j9",
        "aliases": [
          "CVE-2026-0861"
        ]
      },
      "products": [
        {
          "@id": "pkg:oci/distribution-registry",
          "hashes": {
            "sha-256": "sha256:f863dee83f11545364146f67843a64c66b54951b8d5aaa78b5005ba575317a58"
          },
          "subcomponents": [
            {
              "@id": "pkg:apk/minimos/glibc@2.43-r4"
            },
            {
              "@id": "pkg:apk/minimos/glibc-locale-posix@2.43-r4"
            },
            {
              "@id": "pkg:apk/minimos/ld-linux@2.43-r4"
            }
          ]
        }
      ],
      "status": "fixed"
    },
    {
      "vulnerability": {
        "name": "MINI-3wm7-v2vh-gjhp",
        "aliases": [
          "CVE-2025-61729"
        ]
      },
      "products": [
        {
          "@id": "pkg:oci/distribution-registry",
          "hashes": {
            "sha-256": "sha256:f863dee83f11545364146f67843a64c66b54951b8d5aaa78b5005ba575317a58"
          },
          "subcomponents": [
            {
              "@id": "pkg:apk/minimos/distribution-registry-2.8@2.8.3-r0"
            }
          ]
        }
      ],
      "status": "not_affected",
      "justification": "vulnerable_code_not_present"
    },
    {
      "vulnerability": {
        "name": "MINI-44q4-hj7w-c4p2",
        "aliases": [
          "CVE-2025-61727"
        ]
      },
      "products": [
        {
          "@id": "pkg:oci/distribution-registry",
          "hashes": {
            "sha-256": "sha256:f863dee83f11545364146f67843a64c66b54951b8d5aaa78b5005ba575317a58"
          },
          "subcomponents": [
            {
              "@id": "pkg:apk/minimos/distribution-registry-2.8@2.8.3-r0"
            }
          ]
        }
      ],
      "status": "under_investigation"
    },
    {
      "vulnerability": {
        "name": "MINI-466f-gj6h-wc92",
        "aliases": [
          "CVE-2025-61731"
        ]
      },
      "products": [
        {
          "@id": "pkg:oci/distribution-registry",
          "hashes": {
            "sha-256": "sha256:f863dee83f11545364146f67843a64c66b54951b8d5aaa78b5005ba575317a58"
          },
          "subcomponents": [
            {
              "@id": "pkg:apk/minimos/distribution-registry-2.8@2.8.3-r0"
            }
          ]
        }
      ],
      "status": "not_affected",
      "justification": "vulnerable_code_not_present"
    },
    {
      "vulnerability": {
        "name": "MINI-48mg-gfrq-mhwq",
        "aliases": [
          "CVE-2025-58183"
        ]
      },
      "products": [
        {
          "@id": "pkg:oci/distribution-registry",
          "hashes": {
            "sha-256": "sha256:f863dee83f11545364146f67843a64c66b54951b8d5aaa78b5005ba575317a58"
          },
          "subcomponents": [
            {
              "@id": "pkg:apk/minimos/distribution-registry-2.8@2.8.3-r0"
            }
          ]
        }
      ],
      "status": "under_investigation"
    },
    {
      "vulnerability": {
        "name": "MINI-4hff-6j5q-cp3r",
        "aliases": [
          "CVE-2025-0395"
        ]
      },
      "products": [
        {
          "@id": "pkg:oci/distribution-registry",
          "hashes": {
            "sha-256": "sha256:f863dee83f11545364146f67843a64c66b54951b8d5aaa78b5005ba575317a58"
          },
          "subcomponents": [
            {
              "@id": "pkg:apk/minimos/glibc@2.43-r4"
            },
            {
              "@id": "pkg:apk/minimos/glibc-locale-posix@2.43-r4"
            },
            {
              "@id": "pkg:apk/minimos/ld-linux@2.43-r4"
            }
          ]
        }
      ],
      "status": "fixed"
    },
    {
      "vulnerability": {
        "name": "MINI-4hjr-3rw9-p262",
        "aliases": [
          "CVE-2019-1010025"
        ]
      },
      "products": [
        {
          "@id": "pkg:oci/distribution-registry",
          "hashes": {
            "sha-256": "sha256:f863dee83f11545364146f67843a64c66b54951b8d5aaa78b5005ba575317a58"
          },
          "subcomponents": [
            {
              "@id": "pkg:apk/minimos/glibc@2.43-r4"
            },
            {
              "@id": "pkg:apk/minimos/glibc-locale-posix@2.43-r4"
            },
            {
              "@id": "pkg:apk/minimos/ld-linux@2.43-r4"
            }
          ]
        }
      ],
      "status": "not_affected",
      "justification": "vulnerable_code_not_present",
      "impact_statement": "The CVE is disputed and the upstream project has determined it does not pose a risk."
    },
    {
      "vulnerability": {
        "name": "MINI-4hx7-r8fj-4v45",
        "aliases": [
          "CVE-2026-5928"
        ]
      },
      "products": [
        {
          "@id": "pkg:oci/distribution-registry",
          "hashes": {
            "sha-256": "sha256:f863dee83f11545364146f67843a64c66b54951b8d5aaa78b5005ba575317a58"
          },
          "subcomponents": [
            {
              "@id": "pkg:apk/minimos/glibc@2.43-r4"
            },
            {
              "@id": "pkg:apk/minimos/glibc-locale-posix@2.43-r4"
            },
            {
              "@id": "pkg:apk/minimos/ld-linux@2.43-r4"
            }
          ]
        }
      ],
      "status": "fixed"
    },
    {
      "vulnerability": {
        "name": "MINI-4mwp-32g3-4x3m",
        "aliases": [
          "CVE-2026-5358"
        ]
      },
      "products": [
        {
          "@id": "pkg:oci/distribution-registry",
          "hashes": {
            "sha-256": "sha256:f863dee83f11545364146f67843a64c66b54951b8d5aaa78b5005ba575317a58"
          },
          "subcomponents": [
            {
              "@id": "pkg:apk/minimos/glibc@2.43-r4"
            },
            {
              "@id": "pkg:apk/minimos/glibc-locale-posix@2.43-r4"
            },
            {
              "@id": "pkg:apk/minimos/ld-linux@2.43-r4"
            }
          ]
        }
      ],
      "status": "not_affected",
      "justification": "vulnerable_code_not_present",
      "impact_statement": "This CVE was rejected by sourceware, for more details refer to - https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2026-0008;h=43b38ce38a78b6458608fa4c044994b8d8516751;hb=HEAD"
    },
    {
      "vulnerability": {
        "name": "MINI-4rc8-6m25-xp2p",
        "aliases": [
          "CVE-2026-39823"
        ]
      },
      "products": [
        {
          "@id": "pkg:oci/distribution-registry",
          "hashes": {
            "sha-256": "sha256:f863dee83f11545364146f67843a64c66b54951b8d5aaa78b5005ba575317a58"
          },
          "subcomponents": [
            {
              "@id": "pkg:apk/minimos/distribution-registry-2.8@2.8.3-r0"
            }
          ]
        }
      ],
      "status": "under_investigation"
    },
    {
      "vulnerability": {
        "name": "MINI-4v7f-4r7m-ccjh",
        "aliases": [
          "CVE-2026-33811"
        ]
      },
      "products": [
        {
          "@id": "pkg:oci/distribution-registry",
          "hashes": {
            "sha-256": "sha256:f863dee83f11545364146f67843a64c66b54951b8d5aaa78b5005ba575317a58"
          },
          "subcomponents": [
            {
              "@id": "pkg:apk/minimos/distribution-registry-2.8@2.8.3-r0"
            }
          ]
        }
      ],
      "status": "not_affected",
      "justification": "vulnerable_code_not_in_execute_path"
    },
    {
      "vulnerability": {
        "name": "MINI-5699-2qf6-m8cp",
        "aliases": [
          "CVE-2026-5435"
        ]
      },
      "products": [
        {
          "@id": "pkg:oci/distribution-registry",
          "hashes": {
            "sha-256": "sha256:f863dee83f11545364146f67843a64c66b54951b8d5aaa78b5005ba575317a58"
          },
          "subcomponents": [
            {
              "@id": "pkg:apk/minimos/glibc@2.43-r4"
            },
            {
              "@id": "pkg:apk/minimos/glibc-locale-posix@2.43-r4"
            },
            {
              "@id": "pkg:apk/minimos/ld-linux@2.43-r4"
            }
          ]
        }
      ],
      "status": "fixed"
    },
    {
      "vulnerability": {
        "name": "MINI-58v8-5q82-8fc7",
        "aliases": [
          "CVE-2025-22871"
        ]
      },
      "products": [
        {
          "@id": "pkg:oci/distribution-registry",
          "hashes": {
            "sha-256": "sha256:f863dee83f11545364146f67843a64c66b54951b8d5aaa78b5005ba575317a58"
          },
          "subcomponents": [
            {
              "@id": "pkg:apk/minimos/distribution-registry-2.8@2.8.3-r0"
            }
          ]
        }
      ],
      "status": "not_affected",
      "justification": "vulnerable_code_not_present"
    },
    {
      "vulnerability": {
        "name": "MINI-687r-q4hf-j4cr",
        "aliases": [
          "CVE-2026-32282"
        ]
      },
      "products": [
        {
          "@id": "pkg:oci/distribution-registry",
          "hashes": {
            "sha-256": "sha256:f863dee83f11545364146f67843a64c66b54951b8d5aaa78b5005ba575317a58"
          },
          "subcomponents": [
            {
              "@id": "pkg:apk/minimos/distribution-registry-2.8@2.8.3-r0"
            }
          ]
        }
      ],
      "status": "under_investigation"
    },
    {
      "vulnerability": {
        "name": "MINI-6v9p-5fcx-jqfm",
        "aliases": [
          "CVE-2026-39836"
        ]
      },
      "products": [
        {
          "@id": "pkg:oci/distribution-registry",
          "hashes": {
            "sha-256": "sha256:f863dee83f11545364146f67843a64c66b54951b8d5aaa78b5005ba575317a58"
          },
          "subcomponents": [
            {
              "@id": "pkg:apk/minimos/distribution-registry-2.8@2.8.3-r0"
            }
          ]
        }
      ],
      "status": "not_affected",
      "justification": "vulnerable_code_not_in_execute_path"
    },
    {
      "vulnerability": {
        "name": "MINI-747w-4j5j-cfpx",
        "aliases": [
          "CVE-2026-32281"
        ]
      },
      "products": [
        {
          "@id": "pkg:oci/distribution-registry",
          "hashes": {
            "sha-256": "sha256:f863dee83f11545364146f67843a64c66b54951b8d5aaa78b5005ba575317a58"
          },
          "subcomponents": [
            {
              "@id": "pkg:apk/minimos/distribution-registry-2.8@2.8.3-r0"
            }
          ]
        }
      ],
      "status": "not_affected",
      "justification": "vulnerable_code_not_present"
    },
    {
      "vulnerability": {
        "name": "MINI-79j5-j6q5-x94f",
        "aliases": [
          "CVE-2026-27143"
        ]
      },
      "products": [
        {
          "@id": "pkg:oci/distribution-registry",
          "hashes": {
            "sha-256": "sha256:f863dee83f11545364146f67843a64c66b54951b8d5aaa78b5005ba575317a58"
          },
          "subcomponents": [
            {
              "@id": "pkg:apk/minimos/distribution-registry-2.8@2.8.3-r0"
            }
          ]
        }
      ],
      "status": "affected",
      "action_statement": "For more context and potential remediation information, review the References tab: https://images.minimus.io/advisories/CVE-2026-27143/references"
    },
    {
      "vulnerability": {
        "name": "MINI-79m5-j3pp-cj2w",
        "aliases": [
          "CVE-2026-42507"
        ]
      },
      "products": [
        {
          "@id": "pkg:oci/distribution-registry",
          "hashes": {
            "sha-256": "sha256:f863dee83f11545364146f67843a64c66b54951b8d5aaa78b5005ba575317a58"
          },
          "subcomponents": [
            {
              "@id": "pkg:apk/minimos/distribution-registry-2.8@2.8.3-r0"
            }
          ]
        }
      ],
      "status": "under_investigation"
    },
    {
      "vulnerability": {
        "name": "MINI-7xq4-37v3-672q",
        "aliases": [
          "CVE-2025-46394"
        ]
      },
      "products": [
        {
          "@id": "pkg:oci/distribution-registry",
          "hashes": {
            "sha-256": "sha256:f863dee83f11545364146f67843a64c66b54951b8d5aaa78b5005ba575317a58"
          },
          "subcomponents": [
            {
              "@id": "pkg:apk/minimos/busybox@1.37.0-r7"
            }
          ]
        }
      ],
      "status": "fixed"
    },
    {
      "vulnerability": {
        "name": "MINI-7xvq-xgp2-wgr9",
        "aliases": [
          "CVE-2025-4673"
        ]
      },
      "products": [
        {
          "@id": "pkg:oci/distribution-registry",
          "hashes": {
            "sha-256": "sha256:f863dee83f11545364146f67843a64c66b54951b8d5aaa78b5005ba575317a58"
          },
          "subcomponents": [
            {
              "@id": "pkg:apk/minimos/distribution-registry-2.8@2.8.3-r0"
            }
          ]
        }
      ],
      "status": "under_investigation"
    },
    {
      "vulnerability": {
        "name": "MINI-87fg-xcx4-qfg6",
        "aliases": [
          "CVE-2026-32288"
        ]
      },
      "products": [
        {
          "@id": "pkg:oci/distribution-registry",
          "hashes": {
            "sha-256": "sha256:f863dee83f11545364146f67843a64c66b54951b8d5aaa78b5005ba575317a58"
          },
          "subcomponents": [
            {
              "@id": "pkg:apk/minimos/distribution-registry-2.8@2.8.3-r0"
            }
          ]
        }
      ],
      "status": "under_investigation"
    },
    {
      "vulnerability": {
        "name": "MINI-8ch2-v8m4-m352",
        "aliases": [
          "CVE-2026-32289"
        ]
      },
      "products": [
        {
          "@id": "pkg:oci/distribution-registry",
          "hashes": {
            "sha-256": "sha256:f863dee83f11545364146f67843a64c66b54951b8d5aaa78b5005ba575317a58"
          },
          "subcomponents": [
            {
              "@id": "pkg:apk/minimos/distribution-registry-2.8@2.8.3-r0"
            }
          ]
        }
      ],
      "status": "under_investigation"
    },
    {
      "vulnerability": {
        "name": "MINI-8fq4-p7r9-vcm5",
        "aliases": [
          "CVE-2010-4756"
        ]
      },
      "products": [
        {
          "@id": "pkg:oci/distribution-registry",
          "hashes": {
            "sha-256": "sha256:f863dee83f11545364146f67843a64c66b54951b8d5aaa78b5005ba575317a58"
          },
          "subcomponents": [
            {
              "@id": "pkg:apk/minimos/glibc@2.43-r4"
            },
            {
              "@id": "pkg:apk/minimos/glibc-locale-posix@2.43-r4"
            },
            {
              "@id": "pkg:apk/minimos/ld-linux@2.43-r4"
            }
          ]
        }
      ],
      "status": "not_affected",
      "justification": "vulnerable_code_not_present",
      "impact_statement": "The CVE in glibc is not considered a vulnerability by most distributions. Glibc implements glob according to POSIX standards, which do not guarantee memory safety. Network facing services should sanitize the inputs to glob, or configure resource limits."
    },
    {
      "vulnerability": {
        "name": "MINI-8q56-px35-cj2m",
        "aliases": [
          "CVE-2025-58185"
        ]
      },
      "products": [
        {
          "@id": "pkg:oci/distribution-registry",
          "hashes": {
            "sha-256": "sha256:f863dee83f11545364146f67843a64c66b54951b8d5aaa78b5005ba575317a58"
          },
          "subcomponents": [
            {
              "@id": "pkg:apk/minimos/distribution-registry-2.8@2.8.3-r0"
            }
          ]
        }
      ],
      "status": "under_investigation"
    },
    {
      "vulnerability": {
        "name": "MINI-8qf7-3jq4-43w3",
        "aliases": [
          "CVE-2025-5702"
        ]
      },
      "products": [
        {
          "@id": "pkg:oci/distribution-registry",
          "hashes": {
            "sha-256": "sha256:f863dee83f11545364146f67843a64c66b54951b8d5aaa78b5005ba575317a58"
          },
          "subcomponents": [
            {
              "@id": "pkg:apk/minimos/glibc@2.43-r4"
            },
            {
              "@id": "pkg:apk/minimos/glibc-locale-posix@2.43-r4"
            },
            {
              "@id": "pkg:apk/minimos/ld-linux@2.43-r4"
            }
          ]
        }
      ],
      "status": "not_affected",
      "justification": "component_not_present",
      "impact_statement": "The CVE is specific to PowerPC environments and it does not affect Minimus packages."
    },
    {
      "vulnerability": {
        "name": "MINI-8r65-2r9v-72x7",
        "aliases": [
          "CVE-2025-61728"
        ]
      },
      "products": [
        {
          "@id": "pkg:oci/distribution-registry",
          "hashes": {
            "sha-256": "sha256:f863dee83f11545364146f67843a64c66b54951b8d5aaa78b5005ba575317a58"
          },
          "subcomponents": [
            {
              "@id": "pkg:apk/minimos/distribution-registry-2.8@2.8.3-r0"
            }
          ]
        }
      ],
      "status": "under_investigation"
    },
    {
      "vulnerability": {
        "name": "MINI-9482-2jh4-39pv",
        "aliases": [
          "CVE-2026-6238"
        ]
      },
      "products": [
        {
          "@id": "pkg:oci/distribution-registry",
          "hashes": {
            "sha-256": "sha256:f863dee83f11545364146f67843a64c66b54951b8d5aaa78b5005ba575317a58"
          },
          "subcomponents": [
            {
              "@id": "pkg:apk/minimos/glibc@2.43-r4"
            },
            {
              "@id": "pkg:apk/minimos/glibc-locale-posix@2.43-r4"
            },
            {
              "@id": "pkg:apk/minimos/ld-linux@2.43-r4"
            }
          ]
        }
      ],
      "status": "fixed"
    },
    {
      "vulnerability": {
        "name": "MINI-9grj-5c4x-v8hf",
        "aliases": [
          "CVE-2025-61723"
        ]
      },
      "products": [
        {
          "@id": "pkg:oci/distribution-registry",
          "hashes": {
            "sha-256": "sha256:f863dee83f11545364146f67843a64c66b54951b8d5aaa78b5005ba575317a58"
          },
          "subcomponents": [
            {
              "@id": "pkg:apk/minimos/distribution-registry-2.8@2.8.3-r0"
            }
          ]
        }
      ],
      "status": "affected",
      "action_statement": "For more context and potential remediation information, review the References tab: https://images.minimus.io/advisories/CVE-2025-61723/references"
    },
    {
      "vulnerability": {
        "name": "MINI-9qmc-r74r-pf6m",
        "aliases": [
          "CVE-2025-0913"
        ]
      },
      "products": [
        {
          "@id": "pkg:oci/distribution-registry",
          "hashes": {
            "sha-256": "sha256:f863dee83f11545364146f67843a64c66b54951b8d5aaa78b5005ba575317a58"
          },
          "subcomponents": [
            {
              "@id": "pkg:apk/minimos/distribution-registry-2.8@2.8.3-r0"
            }
          ]
        }
      ],
      "status": "under_investigation"
    },
    {
      "vulnerability": {
        "name": "MINI-9w5m-f95v-57hf",
        "aliases": [
          "CVE-2024-58251"
        ]
      },
      "products": [
        {
          "@id": "pkg:oci/distribution-registry",
          "hashes": {
            "sha-256": "sha256:f863dee83f11545364146f67843a64c66b54951b8d5aaa78b5005ba575317a58"
          },
          "subcomponents": [
            {
              "@id": "pkg:apk/minimos/busybox@1.37.0-r7"
            }
          ]
        }
      ],
      "status": "fixed"
    },
    {
      "vulnerability": {
        "name": "MINI-9x7c-882f-gc36",
        "aliases": [
          "CVE-2019-1010022"
        ]
      },
      "products": [
        {
          "@id": "pkg:oci/distribution-registry",
          "hashes": {
            "sha-256": "sha256:f863dee83f11545364146f67843a64c66b54951b8d5aaa78b5005ba575317a58"
          },
          "subcomponents": [
            {
              "@id": "pkg:apk/minimos/glibc@2.43-r4"
            },
            {
              "@id": "pkg:apk/minimos/glibc-locale-posix@2.43-r4"
            },
            {
              "@id": "pkg:apk/minimos/ld-linux@2.43-r4"
            }
          ]
        }
      ],
      "status": "not_affected",
      "justification": "vulnerable_code_not_present",
      "impact_statement": "The CVE is disputed and the upstream project has determined it does not pose a risk."
    },
    {
      "vulnerability": {
        "name": "MINI-c9cv-97fj-55x7",
        "aliases": [
          "CVE-2026-39817"
        ]
      },
      "products": [
        {
          "@id": "pkg:oci/distribution-registry",
          "hashes": {
            "sha-256": "sha256:f863dee83f11545364146f67843a64c66b54951b8d5aaa78b5005ba575317a58"
          },
          "subcomponents": [
            {
              "@id": "pkg:apk/minimos/distribution-registry-2.8@2.8.3-r0"
            }
          ]
        }
      ],
      "status": "under_investigation"
    },
    {
      "vulnerability": {
        "name": "MINI-cmmm-vp98-cjhp",
        "aliases": [
          "CVE-2026-5450"
        ]
      },
      "products": [
        {
          "@id": "pkg:oci/distribution-registry",
          "hashes": {
            "sha-256": "sha256:f863dee83f11545364146f67843a64c66b54951b8d5aaa78b5005ba575317a58"
          },
          "subcomponents": [
            {
              "@id": "pkg:apk/minimos/glibc@2.43-r4"
            },
            {
              "@id": "pkg:apk/minimos/glibc-locale-posix@2.43-r4"
            },
            {
              "@id": "pkg:apk/minimos/ld-linux@2.43-r4"
            }
          ]
        }
      ],
      "status": "fixed"
    },
    {
      "vulnerability": {
        "name": "MINI-cphx-f46v-46xm",
        "aliases": [
          "CVE-2025-61726"
        ]
      },
      "products": [
        {
          "@id": "pkg:oci/distribution-registry",
          "hashes": {
            "sha-256": "sha256:f863dee83f11545364146f67843a64c66b54951b8d5aaa78b5005ba575317a58"
          },
          "subcomponents": [
            {
              "@id": "pkg:apk/minimos/distribution-registry-2.8@2.8.3-r0"
            }
          ]
        }
      ],
      "status": "affected",
      "action_statement": "For more context and potential remediation information, review the References tab: https://images.minimus.io/advisories/CVE-2025-61726/references"
    },
    {
      "vulnerability": {
        "name": "MINI-f2xm-cfq8-wp6c",
        "aliases": [
          "CVE-2026-27139"
        ]
      },
      "products": [
        {
          "@id": "pkg:oci/distribution-registry",
          "hashes": {
            "sha-256": "sha256:f863dee83f11545364146f67843a64c66b54951b8d5aaa78b5005ba575317a58"
          },
          "subcomponents": [
            {
              "@id": "pkg:apk/minimos/distribution-registry-2.8@2.8.3-r0"
            }
          ]
        }
      ],
      "status": "under_investigation"
    },
    {
      "vulnerability": {
        "name": "MINI-fg5c-p636-c4pq",
        "aliases": [
          "CVE-2026-39819"
        ]
      },
      "products": [
        {
          "@id": "pkg:oci/distribution-registry",
          "hashes": {
            "sha-256": "sha256:f863dee83f11545364146f67843a64c66b54951b8d5aaa78b5005ba575317a58"
          },
          "subcomponents": [
            {
              "@id": "pkg:apk/minimos/distribution-registry-2.8@2.8.3-r0"
            }
          ]
        }
      ],
      "status": "under_investigation"
    },
    {
      "vulnerability": {
        "name": "MINI-fvjq-8vvr-m54h",
        "aliases": [
          "CVE-2025-58186"
        ]
      },
      "products": [
        {
          "@id": "pkg:oci/distribution-registry",
          "hashes": {
            "sha-256": "sha256:f863dee83f11545364146f67843a64c66b54951b8d5aaa78b5005ba575317a58"
          },
          "subcomponents": [
            {
              "@id": "pkg:apk/minimos/distribution-registry-2.8@2.8.3-r0"
            }
          ]
        }
      ],
      "status": "under_investigation"
    },
    {
      "vulnerability": {
        "name": "MINI-g23x-6vqh-887m",
        "aliases": [
          "CVE-2026-33814"
        ]
      },
      "products": [
        {
          "@id": "pkg:oci/distribution-registry",
          "hashes": {
            "sha-256": "sha256:f863dee83f11545364146f67843a64c66b54951b8d5aaa78b5005ba575317a58"
          },
          "subcomponents": [
            {
              "@id": "pkg:apk/minimos/distribution-registry-2.8@2.8.3-r0"
            }
          ]
        }
      ],
      "status": "affected",
      "action_statement": "For more context and potential remediation information, review the References tab: https://images.minimus.io/advisories/CVE-2026-33814/references"
    },
    {
      "vulnerability": {
        "name": "MINI-g5x3-4gf9-6cp9",
        "aliases": [
          "CVE-2025-58187"
        ]
      },
      "products": [
        {
          "@id": "pkg:oci/distribution-registry",
          "hashes": {
            "sha-256": "sha256:f863dee83f11545364146f67843a64c66b54951b8d5aaa78b5005ba575317a58"
          },
          "subcomponents": [
            {
              "@id": "pkg:apk/minimos/distribution-registry-2.8@2.8.3-r0"
            }
          ]
        }
      ],
      "status": "affected",
      "action_statement": "For more context and potential remediation information, review the References tab: https://images.minimus.io/advisories/CVE-2025-58187/references"
    },
    {
      "vulnerability": {
        "name": "MINI-g9mw-5p83-2vp5",
        "aliases": [
          "CVE-2025-22873"
        ]
      },
      "products": [
        {
          "@id": "pkg:oci/distribution-registry",
          "hashes": {
            "sha-256": "sha256:f863dee83f11545364146f67843a64c66b54951b8d5aaa78b5005ba575317a58"
          },
          "subcomponents": [
            {
              "@id": "pkg:apk/minimos/distribution-registry-2.8@2.8.3-r0"
            }
          ]
        }
      ],
      "status": "under_investigation"
    },
    {
      "vulnerability": {
        "name": "MINI-g9pp-5x9w-7hx6",
        "aliases": [
          "CVE-2025-58189"
        ]
      },
      "products": [
        {
          "@id": "pkg:oci/distribution-registry",
          "hashes": {
            "sha-256": "sha256:f863dee83f11545364146f67843a64c66b54951b8d5aaa78b5005ba575317a58"
          },
          "subcomponents": [
            {
              "@id": "pkg:apk/minimos/distribution-registry-2.8@2.8.3-r0"
            }
          ]
        }
      ],
      "status": "under_investigation"
    },
    {
      "vulnerability": {
        "name": "MINI-ggqv-3w5g-76qx",
        "aliases": [
          "CVE-2026-4437"
        ]
      },
      "products": [
        {
          "@id": "pkg:oci/distribution-registry",
          "hashes": {
            "sha-256": "sha256:f863dee83f11545364146f67843a64c66b54951b8d5aaa78b5005ba575317a58"
          },
          "subcomponents": [
            {
              "@id": "pkg:apk/minimos/glibc@2.43-r4"
            },
            {
              "@id": "pkg:apk/minimos/glibc-locale-posix@2.43-r4"
            },
            {
              "@id": "pkg:apk/minimos/ld-linux@2.43-r4"
            }
          ]
        }
      ],
      "status": "fixed"
    },
    {
      "vulnerability": {
        "name": "MINI-gwhr-m6hw-wwr3",
        "aliases": [
          "CVE-2025-68121"
        ]
      },
      "products": [
        {
          "@id": "pkg:oci/distribution-registry",
          "hashes": {
            "sha-256": "sha256:f863dee83f11545364146f67843a64c66b54951b8d5aaa78b5005ba575317a58"
          },
          "subcomponents": [
            {
              "@id": "pkg:apk/minimos/distribution-registry-2.8@2.8.3-r0"
            }
          ]
        }
      ],
      "status": "affected",
      "action_statement": "For more context and potential remediation information, review the References tab: https://images.minimus.io/advisories/CVE-2025-68121/references"
    },
    {
      "vulnerability": {
        "name": "MINI-h727-2vgq-hq33",
        "aliases": [
          "CVE-2026-39825"
        ]
      },
      "products": [
        {
          "@id": "pkg:oci/distribution-registry",
          "hashes": {
            "sha-256": "sha256:f863dee83f11545364146f67843a64c66b54951b8d5aaa78b5005ba575317a58"
          },
          "subcomponents": [
            {
              "@id": "pkg:apk/minimos/distribution-registry-2.8@2.8.3-r0"
            }
          ]
        }
      ],
      "status": "under_investigation"
    },
    {
      "vulnerability": {
        "name": "MINI-jcg5-vhr7-m3hw",
        "aliases": [
          "CVE-2025-4674"
        ]
      },
      "products": [
        {
          "@id": "pkg:oci/distribution-registry",
          "hashes": {
            "sha-256": "sha256:f863dee83f11545364146f67843a64c66b54951b8d5aaa78b5005ba575317a58"
          },
          "subcomponents": [
            {
              "@id": "pkg:apk/minimos/distribution-registry-2.8@2.8.3-r0"
            }
          ]
        }
      ],
      "status": "not_affected",
      "justification": "vulnerable_code_not_present"
    },
    {
      "vulnerability": {
        "name": "MINI-jmmw-4597-rmjp",
        "aliases": [
          "CVE-2019-1010023"
        ]
      },
      "products": [
        {
          "@id": "pkg:oci/distribution-registry",
          "hashes": {
            "sha-256": "sha256:f863dee83f11545364146f67843a64c66b54951b8d5aaa78b5005ba575317a58"
          },
          "subcomponents": [
            {
              "@id": "pkg:apk/minimos/glibc@2.43-r4"
            },
            {
              "@id": "pkg:apk/minimos/glibc-locale-posix@2.43-r4"
            },
            {
              "@id": "pkg:apk/minimos/ld-linux@2.43-r4"
            }
          ]
        }
      ],
      "status": "not_affected",
      "justification": "vulnerable_code_not_present",
      "impact_statement": "The CVE is disputed and the upstream project has determined it does not pose a risk."
    },
    {
      "vulnerability": {
        "name": "MINI-jqrg-4q44-6g28",
        "aliases": [
          "CVE-2026-27144"
        ]
      },
      "products": [
        {
          "@id": "pkg:oci/distribution-registry",
          "hashes": {
            "sha-256": "sha256:f863dee83f11545364146f67843a64c66b54951b8d5aaa78b5005ba575317a58"
          },
          "subcomponents": [
            {
              "@id": "pkg:apk/minimos/distribution-registry-2.8@2.8.3-r0"
            }
          ]
        }
      ],
      "status": "affected",
      "action_statement": "For more context and potential remediation information, review the References tab: https://images.minimus.io/advisories/CVE-2026-27144/references"
    },
    {
      "vulnerability": {
        "name": "MINI-jww2-8rqf-9957",
        "aliases": [
          "CVE-2025-61732"
        ]
      },
      "products": [
        {
          "@id": "pkg:oci/distribution-registry",
          "hashes": {
            "sha-256": "sha256:f863dee83f11545364146f67843a64c66b54951b8d5aaa78b5005ba575317a58"
          },
          "subcomponents": [
            {
              "@id": "pkg:apk/minimos/distribution-registry-2.8@2.8.3-r0"
            }
          ]
        }
      ],
      "status": "not_affected",
      "justification": "vulnerable_code_not_in_execute_path"
    },
    {
      "vulnerability": {
        "name": "MINI-m3pw-72pw-vfwq",
        "aliases": [
          "CVE-2025-58188"
        ]
      },
      "products": [
        {
          "@id": "pkg:oci/distribution-registry",
          "hashes": {
            "sha-256": "sha256:f863dee83f11545364146f67843a64c66b54951b8d5aaa78b5005ba575317a58"
          },
          "subcomponents": [
            {
              "@id": "pkg:apk/minimos/distribution-registry-2.8@2.8.3-r0"
            }
          ]
        }
      ],
      "status": "affected",
      "action_statement": "For more context and potential remediation information, review the References tab: https://images.minimus.io/advisories/CVE-2025-58188/references"
    },
    {
      "vulnerability": {
        "name": "MINI-m7r9-r9jc-9m7m",
        "aliases": [
          "CVE-2025-47906"
        ]
      },
      "products": [
        {
          "@id": "pkg:oci/distribution-registry",
          "hashes": {
            "sha-256": "sha256:f863dee83f11545364146f67843a64c66b54951b8d5aaa78b5005ba575317a58"
          },
          "subcomponents": [
            {
              "@id": "pkg:apk/minimos/distribution-registry-2.8@2.8.3-r0"
            }
          ]
        }
      ],
      "status": "under_investigation"
    },
    {
      "vulnerability": {
        "name": "MINI-mhhx-7cf4-r4mg",
        "aliases": [
          "CVE-2025-61725"
        ]
      },
      "products": [
        {
          "@id": "pkg:oci/distribution-registry",
          "hashes": {
            "sha-256": "sha256:f863dee83f11545364146f67843a64c66b54951b8d5aaa78b5005ba575317a58"
          },
          "subcomponents": [
            {
              "@id": "pkg:apk/minimos/distribution-registry-2.8@2.8.3-r0"
            }
          ]
        }
      ],
      "status": "not_affected",
      "justification": "vulnerable_code_not_present"
    },
    {
      "vulnerability": {
        "name": "MINI-p7cm-xcq7-qrrv",
        "aliases": [
          "CVE-2026-32280"
        ]
      },
      "products": [
        {
          "@id": "pkg:oci/distribution-registry",
          "hashes": {
            "sha-256": "sha256:f863dee83f11545364146f67843a64c66b54951b8d5aaa78b5005ba575317a58"
          },
          "subcomponents": [
            {
              "@id": "pkg:apk/minimos/distribution-registry-2.8@2.8.3-r0"
            }
          ]
        }
      ],
      "status": "affected",
      "action_statement": "For more context and potential remediation information, review the References tab: https://images.minimus.io/advisories/CVE-2026-32280/references"
    },
    {
      "vulnerability": {
        "name": "MINI-phc3-7qpg-76g2",
        "aliases": [
          "CVE-2025-15281"
        ]
      },
      "products": [
        {
          "@id": "pkg:oci/distribution-registry",
          "hashes": {
            "sha-256": "sha256:f863dee83f11545364146f67843a64c66b54951b8d5aaa78b5005ba575317a58"
          },
          "subcomponents": [
            {
              "@id": "pkg:apk/minimos/glibc@2.43-r4"
            },
            {
              "@id": "pkg:apk/minimos/glibc-locale-posix@2.43-r4"
            },
            {
              "@id": "pkg:apk/minimos/ld-linux@2.43-r4"
            }
          ]
        }
      ],
      "status": "fixed"
    },
    {
      "vulnerability": {
        "name": "MINI-pr9c-2v5q-34m2",
        "aliases": [
          "CVE-2025-5745"
        ]
      },
      "products": [
        {
          "@id": "pkg:oci/distribution-registry",
          "hashes": {
            "sha-256": "sha256:f863dee83f11545364146f67843a64c66b54951b8d5aaa78b5005ba575317a58"
          },
          "subcomponents": [
            {
              "@id": "pkg:apk/minimos/glibc@2.43-r4"
            },
            {
              "@id": "pkg:apk/minimos/glibc-locale-posix@2.43-r4"
            },
            {
              "@id": "pkg:apk/minimos/ld-linux@2.43-r4"
            }
          ]
        }
      ],
      "status": "not_affected",
      "justification": "component_not_present",
      "impact_statement": "The CVE is specific to PowerPC environments and it does not affect Minimus packages."
    },
    {
      "vulnerability": {
        "name": "MINI-pww3-75fp-gr5w",
        "aliases": [
          "CVE-2026-42499"
        ]
      },
      "products": [
        {
          "@id": "pkg:oci/distribution-registry",
          "hashes": {
            "sha-256": "sha256:f863dee83f11545364146f67843a64c66b54951b8d5aaa78b5005ba575317a58"
          },
          "subcomponents": [
            {
              "@id": "pkg:apk/minimos/distribution-registry-2.8@2.8.3-r0"
            }
          ]
        }
      ],
      "status": "affected",
      "action_statement": "For more context and potential remediation information, review the References tab: https://images.minimus.io/advisories/CVE-2026-42499/references"
    },
    {
      "vulnerability": {
        "name": "MINI-qmcj-pf9q-jvhp",
        "aliases": [
          "CVE-2025-47907"
        ]
      },
      "products": [
        {
          "@id": "pkg:oci/distribution-registry",
          "hashes": {
            "sha-256": "sha256:f863dee83f11545364146f67843a64c66b54951b8d5aaa78b5005ba575317a58"
          },
          "subcomponents": [
            {
              "@id": "pkg:apk/minimos/distribution-registry-2.8@2.8.3-r0"
            }
          ]
        }
      ],
      "status": "not_affected",
      "justification": "vulnerable_code_not_in_execute_path"
    },
    {
      "vulnerability": {
        "name": "MINI-r5x8-hhfx-4867",
        "aliases": [
          "CVE-2019-1010024"
        ]
      },
      "products": [
        {
          "@id": "pkg:oci/distribution-registry",
          "hashes": {
            "sha-256": "sha256:f863dee83f11545364146f67843a64c66b54951b8d5aaa78b5005ba575317a58"
          },
          "subcomponents": [
            {
              "@id": "pkg:apk/minimos/glibc@2.43-r4"
            },
            {
              "@id": "pkg:apk/minimos/glibc-locale-posix@2.43-r4"
            },
            {
              "@id": "pkg:apk/minimos/ld-linux@2.43-r4"
            }
          ]
        }
      ],
      "status": "not_affected",
      "justification": "vulnerable_code_not_present",
      "impact_statement": "The CVE is disputed and the upstream project has determined it does not pose a risk."
    },
    {
      "vulnerability": {
        "name": "MINI-r6w4-vxpj-mv4f",
        "aliases": [
          "CVE-2025-47912"
        ]
      },
      "products": [
        {
          "@id": "pkg:oci/distribution-registry",
          "hashes": {
            "sha-256": "sha256:f863dee83f11545364146f67843a64c66b54951b8d5aaa78b5005ba575317a58"
          },
          "subcomponents": [
            {
              "@id": "pkg:apk/minimos/distribution-registry-2.8@2.8.3-r0"
            }
          ]
        }
      ],
      "status": "under_investigation"
    },
    {
      "vulnerability": {
        "name": "MINI-rf3m-6wmf-ghg7",
        "aliases": [
          "CVE-2026-39826"
        ]
      },
      "products": [
        {
          "@id": "pkg:oci/distribution-registry",
          "hashes": {
            "sha-256": "sha256:f863dee83f11545364146f67843a64c66b54951b8d5aaa78b5005ba575317a58"
          },
          "subcomponents": [
            {
              "@id": "pkg:apk/minimos/distribution-registry-2.8@2.8.3-r0"
            }
          ]
        }
      ],
      "status": "under_investigation"
    },
    {
      "vulnerability": {
        "name": "MINI-rgw6-m9rq-wr8j",
        "aliases": [
          "CVE-2026-0915"
        ]
      },
      "products": [
        {
          "@id": "pkg:oci/distribution-registry",
          "hashes": {
            "sha-256": "sha256:f863dee83f11545364146f67843a64c66b54951b8d5aaa78b5005ba575317a58"
          },
          "subcomponents": [
            {
              "@id": "pkg:apk/minimos/glibc@2.43-r4"
            },
            {
              "@id": "pkg:apk/minimos/glibc-locale-posix@2.43-r4"
            },
            {
              "@id": "pkg:apk/minimos/ld-linux@2.43-r4"
            }
          ]
        }
      ],
      "status": "fixed"
    },
    {
      "vulnerability": {
        "name": "MINI-rpf9-4p9f-qx57",
        "aliases": [
          "CVE-2025-8058"
        ]
      },
      "products": [
        {
          "@id": "pkg:oci/distribution-registry",
          "hashes": {
            "sha-256": "sha256:f863dee83f11545364146f67843a64c66b54951b8d5aaa78b5005ba575317a58"
          },
          "subcomponents": [
            {
              "@id": "pkg:apk/minimos/glibc@2.43-r4"
            },
            {
              "@id": "pkg:apk/minimos/glibc-locale-posix@2.43-r4"
            },
            {
              "@id": "pkg:apk/minimos/ld-linux@2.43-r4"
            }
          ]
        }
      ],
      "status": "fixed"
    },
    {
      "vulnerability": {
        "name": "MINI-vv5m-g3w8-6wxx",
        "aliases": [
          "CVE-2026-42504"
        ]
      },
      "products": [
        {
          "@id": "pkg:oci/distribution-registry",
          "hashes": {
            "sha-256": "sha256:f863dee83f11545364146f67843a64c66b54951b8d5aaa78b5005ba575317a58"
          },
          "subcomponents": [
            {
              "@id": "pkg:apk/minimos/distribution-registry-2.8@2.8.3-r0"
            }
          ]
        }
      ],
      "status": "affected",
      "action_statement": "For more context and potential remediation information, review the References tab: https://images.minimus.io/advisories/CVE-2026-42504/references"
    },
    {
      "vulnerability": {
        "name": "MINI-vv9p-q45w-3qm8",
        "aliases": [
          "CVE-2026-4046"
        ]
      },
      "products": [
        {
          "@id": "pkg:oci/distribution-registry",
          "hashes": {
            "sha-256": "sha256:f863dee83f11545364146f67843a64c66b54951b8d5aaa78b5005ba575317a58"
          },
          "subcomponents": [
            {
              "@id": "pkg:apk/minimos/glibc@2.43-r4"
            },
            {
              "@id": "pkg:apk/minimos/glibc-locale-posix@2.43-r4"
            },
            {
              "@id": "pkg:apk/minimos/ld-linux@2.43-r4"
            }
          ]
        }
      ],
      "status": "fixed"
    },
    {
      "vulnerability": {
        "name": "MINI-w6w4-99p7-fq64",
        "aliases": [
          "CVE-2026-25679"
        ]
      },
      "products": [
        {
          "@id": "pkg:oci/distribution-registry",
          "hashes": {
            "sha-256": "sha256:f863dee83f11545364146f67843a64c66b54951b8d5aaa78b5005ba575317a58"
          },
          "subcomponents": [
            {
              "@id": "pkg:apk/minimos/distribution-registry-2.8@2.8.3-r0"
            }
          ]
        }
      ],
      "status": "affected",
      "action_statement": "For more context and potential remediation information, review the References tab: https://images.minimus.io/advisories/CVE-2026-25679/references"
    },
    {
      "vulnerability": {
        "name": "MINI-whch-3x5m-4mpx",
        "aliases": [
          "CVE-2026-27140"
        ]
      },
      "products": [
        {
          "@id": "pkg:oci/distribution-registry",
          "hashes": {
            "sha-256": "sha256:f863dee83f11545364146f67843a64c66b54951b8d5aaa78b5005ba575317a58"
          },
          "subcomponents": [
            {
              "@id": "pkg:apk/minimos/distribution-registry-2.8@2.8.3-r0"
            }
          ]
        }
      ],
      "status": "not_affected",
      "justification": "vulnerable_code_not_present"
    },
    {
      "vulnerability": {
        "name": "MINI-wx78-hx3g-mvw3",
        "aliases": [
          "CVE-2026-39820"
        ]
      },
      "products": [
        {
          "@id": "pkg:oci/distribution-registry",
          "hashes": {
            "sha-256": "sha256:f863dee83f11545364146f67843a64c66b54951b8d5aaa78b5005ba575317a58"
          },
          "subcomponents": [
            {
              "@id": "pkg:apk/minimos/distribution-registry-2.8@2.8.3-r0"
            }
          ]
        }
      ],
      "status": "not_affected",
      "justification": "vulnerable_code_not_present"
    },
    {
      "vulnerability": {
        "name": "MINI-x83r-c6hq-p8fq",
        "aliases": [
          "CVE-2026-27142"
        ]
      },
      "products": [
        {
          "@id": "pkg:oci/distribution-registry",
          "hashes": {
            "sha-256": "sha256:f863dee83f11545364146f67843a64c66b54951b8d5aaa78b5005ba575317a58"
          },
          "subcomponents": [
            {
              "@id": "pkg:apk/minimos/distribution-registry-2.8@2.8.3-r0"
            }
          ]
        }
      ],
      "status": "under_investigation"
    },
    {
      "vulnerability": {
        "name": "MINI-x9xw-4hx7-ghc9",
        "aliases": [
          "CVE-2025-22870"
        ]
      },
      "products": [
        {
          "@id": "pkg:oci/distribution-registry",
          "hashes": {
            "sha-256": "sha256:f863dee83f11545364146f67843a64c66b54951b8d5aaa78b5005ba575317a58"
          },
          "subcomponents": [
            {
              "@id": "pkg:apk/minimos/distribution-registry-2.8@2.8.3-r0"
            }
          ]
        }
      ],
      "status": "under_investigation"
    },
    {
      "vulnerability": {
        "name": "MINI-xfm4-g3cq-w58q",
        "aliases": [
          "CVE-2026-27145"
        ]
      },
      "products": [
        {
          "@id": "pkg:oci/distribution-registry",
          "hashes": {
            "sha-256": "sha256:f863dee83f11545364146f67843a64c66b54951b8d5aaa78b5005ba575317a58"
          },
          "subcomponents": [
            {
              "@id": "pkg:apk/minimos/distribution-registry-2.8@2.8.3-r0"
            }
          ]
        }
      ],
      "status": "under_investigation"
    }
  ]
}