{
  "@context": "https://openvex.dev/ns/v0.2.0",
  "@id": "https://openvex.dev/docs/public/vex-a9cd728daa68f1c26526b34ae4733945e7815eafe40f677260765126f7856dd5",
  "author": "minimus",
  "timestamp": "2026-06-25T04:36:20.336777502Z",
  "version": 1,
  "statements": [
    {
      "vulnerability": {
        "name": "MINI-4fvq-jj2m-mvr8",
        "aliases": [
          "CVE-2025-58190"
        ]
      },
      "products": [
        {
          "@id": "pkg:oci/mcp-github",
          "hashes": {
            "sha-256": "sha256:a1f47cb9f4547e959bd1c8581a97825835b8b87eb3fb0c4322973b8c75f940d3"
          },
          "subcomponents": [
            {
              "@id": "pkg:apk/minimos/mcp-github@1.4.0-r1"
            },
            {
              "@id": "pkg:apk/minimos/mcp-github-compat@1.4.0-r1"
            }
          ]
        }
      ],
      "status": "fixed"
    },
    {
      "vulnerability": {
        "name": "MINI-548f-4cf8-f623",
        "aliases": [
          "CVE-2026-42506"
        ]
      },
      "products": [
        {
          "@id": "pkg:oci/mcp-github",
          "hashes": {
            "sha-256": "sha256:a1f47cb9f4547e959bd1c8581a97825835b8b87eb3fb0c4322973b8c75f940d3"
          },
          "subcomponents": [
            {
              "@id": "pkg:apk/minimos/mcp-github@1.4.0-r1"
            },
            {
              "@id": "pkg:apk/minimos/mcp-github-compat@1.4.0-r1"
            }
          ]
        }
      ],
      "status": "fixed"
    },
    {
      "vulnerability": {
        "name": "MINI-5frv-54vj-367g",
        "aliases": [
          "CVE-2026-42502"
        ]
      },
      "products": [
        {
          "@id": "pkg:oci/mcp-github",
          "hashes": {
            "sha-256": "sha256:a1f47cb9f4547e959bd1c8581a97825835b8b87eb3fb0c4322973b8c75f940d3"
          },
          "subcomponents": [
            {
              "@id": "pkg:apk/minimos/mcp-github@1.4.0-r1"
            },
            {
              "@id": "pkg:apk/minimos/mcp-github-compat@1.4.0-r1"
            }
          ]
        }
      ],
      "status": "fixed"
    },
    {
      "vulnerability": {
        "name": "MINI-5ghm-73xv-xf2c",
        "aliases": [
          "CVE-2026-39824"
        ]
      },
      "products": [
        {
          "@id": "pkg:oci/mcp-github",
          "hashes": {
            "sha-256": "sha256:a1f47cb9f4547e959bd1c8581a97825835b8b87eb3fb0c4322973b8c75f940d3"
          },
          "subcomponents": [
            {
              "@id": "pkg:apk/minimos/mcp-github@1.4.0-r1"
            },
            {
              "@id": "pkg:apk/minimos/mcp-github-compat@1.4.0-r1"
            }
          ]
        }
      ],
      "status": "fixed"
    },
    {
      "vulnerability": {
        "name": "MINI-9fxf-cwwp-mf77",
        "aliases": [
          "CVE-2026-25681"
        ]
      },
      "products": [
        {
          "@id": "pkg:oci/mcp-github",
          "hashes": {
            "sha-256": "sha256:a1f47cb9f4547e959bd1c8581a97825835b8b87eb3fb0c4322973b8c75f940d3"
          },
          "subcomponents": [
            {
              "@id": "pkg:apk/minimos/mcp-github@1.4.0-r1"
            },
            {
              "@id": "pkg:apk/minimos/mcp-github-compat@1.4.0-r1"
            }
          ]
        }
      ],
      "status": "fixed"
    },
    {
      "vulnerability": {
        "name": "MINI-h4g2-xf4x-w6qw",
        "aliases": [
          "CVE-2025-47911"
        ]
      },
      "products": [
        {
          "@id": "pkg:oci/mcp-github",
          "hashes": {
            "sha-256": "sha256:a1f47cb9f4547e959bd1c8581a97825835b8b87eb3fb0c4322973b8c75f940d3"
          },
          "subcomponents": [
            {
              "@id": "pkg:apk/minimos/mcp-github@1.4.0-r1"
            },
            {
              "@id": "pkg:apk/minimos/mcp-github-compat@1.4.0-r1"
            }
          ]
        }
      ],
      "status": "fixed"
    },
    {
      "vulnerability": {
        "name": "MINI-hf4h-46v5-2p78",
        "aliases": [
          "CVE-2026-39821"
        ]
      },
      "products": [
        {
          "@id": "pkg:oci/mcp-github",
          "hashes": {
            "sha-256": "sha256:a1f47cb9f4547e959bd1c8581a97825835b8b87eb3fb0c4322973b8c75f940d3"
          },
          "subcomponents": [
            {
              "@id": "pkg:apk/minimos/mcp-github@1.4.0-r1"
            },
            {
              "@id": "pkg:apk/minimos/mcp-github-compat@1.4.0-r1"
            }
          ]
        }
      ],
      "status": "fixed"
    },
    {
      "vulnerability": {
        "name": "MINI-jv5m-mfph-r46x",
        "aliases": [
          "CVE-2026-33814"
        ]
      },
      "products": [
        {
          "@id": "pkg:oci/mcp-github",
          "hashes": {
            "sha-256": "sha256:a1f47cb9f4547e959bd1c8581a97825835b8b87eb3fb0c4322973b8c75f940d3"
          },
          "subcomponents": [
            {
              "@id": "pkg:apk/minimos/mcp-github@1.4.0-r1"
            },
            {
              "@id": "pkg:apk/minimos/mcp-github-compat@1.4.0-r1"
            }
          ]
        }
      ],
      "status": "fixed"
    },
    {
      "vulnerability": {
        "name": "MINI-rjxg-f3xc-x8m8",
        "aliases": [
          "CVE-2026-25680"
        ]
      },
      "products": [
        {
          "@id": "pkg:oci/mcp-github",
          "hashes": {
            "sha-256": "sha256:a1f47cb9f4547e959bd1c8581a97825835b8b87eb3fb0c4322973b8c75f940d3"
          },
          "subcomponents": [
            {
              "@id": "pkg:apk/minimos/mcp-github@1.4.0-r1"
            },
            {
              "@id": "pkg:apk/minimos/mcp-github-compat@1.4.0-r1"
            }
          ]
        }
      ],
      "status": "fixed"
    },
    {
      "vulnerability": {
        "name": "MINI-whj9-mcxj-qp8f",
        "aliases": [
          "CVE-2026-27136"
        ]
      },
      "products": [
        {
          "@id": "pkg:oci/mcp-github",
          "hashes": {
            "sha-256": "sha256:a1f47cb9f4547e959bd1c8581a97825835b8b87eb3fb0c4322973b8c75f940d3"
          },
          "subcomponents": [
            {
              "@id": "pkg:apk/minimos/mcp-github@1.4.0-r1"
            },
            {
              "@id": "pkg:apk/minimos/mcp-github-compat@1.4.0-r1"
            }
          ]
        }
      ],
      "status": "fixed"
    }
  ]
}