{
  "@context": "https://openvex.dev/ns/v0.2.0",
  "@id": "https://openvex.dev/docs/public/vex-21357fd2414521225a47e61222f9e9e1a8f1fe1e575a5672354a51462e620c78",
  "author": "minimus",
  "timestamp": "2026-06-25T03:24:57.900171636Z",
  "version": 1,
  "statements": [
    {
      "vulnerability": {
        "name": "MINI-2rm2-6636-x4vj",
        "aliases": [
          "CVE-2026-42508"
        ]
      },
      "products": [
        {
          "@id": "pkg:oci/oras",
          "hashes": {
            "sha-256": "sha256:92cee4a804fb5c112d9f5fa8e6ff6784eb5eac4131e1444effabad7021c7cde4"
          },
          "subcomponents": [
            {
              "@id": "pkg:apk/minimos/oras@1.3.2-r0"
            }
          ]
        }
      ],
      "status": "affected",
      "action_statement": "For more context and potential remediation information, review the References tab: https://images.minimus.io/advisories/CVE-2026-42508/references"
    },
    {
      "vulnerability": {
        "name": "MINI-668c-99gv-qh2m",
        "aliases": [
          "CVE-2026-46595"
        ]
      },
      "products": [
        {
          "@id": "pkg:oci/oras",
          "hashes": {
            "sha-256": "sha256:92cee4a804fb5c112d9f5fa8e6ff6784eb5eac4131e1444effabad7021c7cde4"
          },
          "subcomponents": [
            {
              "@id": "pkg:apk/minimos/oras@1.3.2-r0"
            }
          ]
        }
      ],
      "status": "not_affected",
      "justification": "vulnerable_code_not_in_execute_path"
    },
    {
      "vulnerability": {
        "name": "MINI-7898-hpwj-92r5",
        "aliases": [
          "CVE-2026-39830"
        ]
      },
      "products": [
        {
          "@id": "pkg:oci/oras",
          "hashes": {
            "sha-256": "sha256:92cee4a804fb5c112d9f5fa8e6ff6784eb5eac4131e1444effabad7021c7cde4"
          },
          "subcomponents": [
            {
              "@id": "pkg:apk/minimos/oras@1.3.2-r0"
            }
          ]
        }
      ],
      "status": "affected",
      "action_statement": "For more context and potential remediation information, review the References tab: https://images.minimus.io/advisories/CVE-2026-39830/references"
    },
    {
      "vulnerability": {
        "name": "MINI-895g-wx6r-h8qw",
        "aliases": [
          "CVE-2026-39835"
        ]
      },
      "products": [
        {
          "@id": "pkg:oci/oras",
          "hashes": {
            "sha-256": "sha256:92cee4a804fb5c112d9f5fa8e6ff6784eb5eac4131e1444effabad7021c7cde4"
          },
          "subcomponents": [
            {
              "@id": "pkg:apk/minimos/oras@1.3.2-r0"
            }
          ]
        }
      ],
      "status": "under_investigation"
    },
    {
      "vulnerability": {
        "name": "MINI-8m44-7h98-v2v2",
        "aliases": [
          "CVE-2026-46597"
        ]
      },
      "products": [
        {
          "@id": "pkg:oci/oras",
          "hashes": {
            "sha-256": "sha256:92cee4a804fb5c112d9f5fa8e6ff6784eb5eac4131e1444effabad7021c7cde4"
          },
          "subcomponents": [
            {
              "@id": "pkg:apk/minimos/oras@1.3.2-r0"
            }
          ]
        }
      ],
      "status": "not_affected",
      "justification": "vulnerable_code_not_present"
    },
    {
      "vulnerability": {
        "name": "MINI-9xv3-hw6p-g28h",
        "aliases": [
          "CVE-2026-39828"
        ]
      },
      "products": [
        {
          "@id": "pkg:oci/oras",
          "hashes": {
            "sha-256": "sha256:92cee4a804fb5c112d9f5fa8e6ff6784eb5eac4131e1444effabad7021c7cde4"
          },
          "subcomponents": [
            {
              "@id": "pkg:apk/minimos/oras@1.3.2-r0"
            }
          ]
        }
      ],
      "status": "under_investigation"
    },
    {
      "vulnerability": {
        "name": "MINI-fcvp-gcgf-vfxh",
        "aliases": [
          "CVE-2026-39831"
        ]
      },
      "products": [
        {
          "@id": "pkg:oci/oras",
          "hashes": {
            "sha-256": "sha256:92cee4a804fb5c112d9f5fa8e6ff6784eb5eac4131e1444effabad7021c7cde4"
          },
          "subcomponents": [
            {
              "@id": "pkg:apk/minimos/oras@1.3.2-r0"
            }
          ]
        }
      ],
      "status": "affected",
      "action_statement": "For more context and potential remediation information, review the References tab: https://images.minimus.io/advisories/CVE-2026-39831/references"
    },
    {
      "vulnerability": {
        "name": "MINI-jqjh-fpc4-w3xr",
        "aliases": [
          "CVE-2026-39833"
        ]
      },
      "products": [
        {
          "@id": "pkg:oci/oras",
          "hashes": {
            "sha-256": "sha256:92cee4a804fb5c112d9f5fa8e6ff6784eb5eac4131e1444effabad7021c7cde4"
          },
          "subcomponents": [
            {
              "@id": "pkg:apk/minimos/oras@1.3.2-r0"
            }
          ]
        }
      ],
      "status": "not_affected",
      "justification": "vulnerable_code_not_present"
    },
    {
      "vulnerability": {
        "name": "MINI-jv4j-fvg2-63cp",
        "aliases": [
          "CVE-2026-39824"
        ]
      },
      "products": [
        {
          "@id": "pkg:oci/oras",
          "hashes": {
            "sha-256": "sha256:92cee4a804fb5c112d9f5fa8e6ff6784eb5eac4131e1444effabad7021c7cde4"
          },
          "subcomponents": [
            {
              "@id": "pkg:apk/minimos/oras@1.3.2-r0"
            }
          ]
        }
      ],
      "status": "under_investigation"
    },
    {
      "vulnerability": {
        "name": "MINI-m586-jc47-f6qm",
        "aliases": [
          "CVE-2026-39832"
        ]
      },
      "products": [
        {
          "@id": "pkg:oci/oras",
          "hashes": {
            "sha-256": "sha256:92cee4a804fb5c112d9f5fa8e6ff6784eb5eac4131e1444effabad7021c7cde4"
          },
          "subcomponents": [
            {
              "@id": "pkg:apk/minimos/oras@1.3.2-r0"
            }
          ]
        }
      ],
      "status": "affected",
      "action_statement": "For more context and potential remediation information, review the References tab: https://images.minimus.io/advisories/CVE-2026-39832/references"
    },
    {
      "vulnerability": {
        "name": "MINI-rhv7-58gg-8j9p",
        "aliases": [
          "CVE-2026-39829"
        ]
      },
      "products": [
        {
          "@id": "pkg:oci/oras",
          "hashes": {
            "sha-256": "sha256:92cee4a804fb5c112d9f5fa8e6ff6784eb5eac4131e1444effabad7021c7cde4"
          },
          "subcomponents": [
            {
              "@id": "pkg:apk/minimos/oras@1.3.2-r0"
            }
          ]
        }
      ],
      "status": "affected",
      "action_statement": "For more context and potential remediation information, review the References tab: https://images.minimus.io/advisories/CVE-2026-39829/references"
    },
    {
      "vulnerability": {
        "name": "MINI-x263-hhh9-hhg2",
        "aliases": [
          "CVE-2026-39834"
        ]
      },
      "products": [
        {
          "@id": "pkg:oci/oras",
          "hashes": {
            "sha-256": "sha256:92cee4a804fb5c112d9f5fa8e6ff6784eb5eac4131e1444effabad7021c7cde4"
          },
          "subcomponents": [
            {
              "@id": "pkg:apk/minimos/oras@1.3.2-r0"
            }
          ]
        }
      ],
      "status": "not_affected",
      "justification": "vulnerable_code_not_present"
    },
    {
      "vulnerability": {
        "name": "MINI-x735-ffmp-f2xh",
        "aliases": [
          "CVE-2026-39827"
        ]
      },
      "products": [
        {
          "@id": "pkg:oci/oras",
          "hashes": {
            "sha-256": "sha256:92cee4a804fb5c112d9f5fa8e6ff6784eb5eac4131e1444effabad7021c7cde4"
          },
          "subcomponents": [
            {
              "@id": "pkg:apk/minimos/oras@1.3.2-r0"
            }
          ]
        }
      ],
      "status": "under_investigation"
    },
    {
      "vulnerability": {
        "name": "MINI-xm9q-gmc9-x7xf",
        "aliases": [
          "CVE-2026-46598"
        ]
      },
      "products": [
        {
          "@id": "pkg:oci/oras",
          "hashes": {
            "sha-256": "sha256:92cee4a804fb5c112d9f5fa8e6ff6784eb5eac4131e1444effabad7021c7cde4"
          },
          "subcomponents": [
            {
              "@id": "pkg:apk/minimos/oras@1.3.2-r0"
            }
          ]
        }
      ],
      "status": "under_investigation"
    }
  ]
}