{
  "@id": "urn:uuid:078b951d-e224-4ffe-a123-2392d0f283af",
  "role": "Document Creator",
  "author": "https://tuxcare.com",
  "version": 11,
  "@context": "https://openvex.dev/ns/v0.2.0",
  "timestamp": "2026-11-13T22:42:00.042020+00:00",
  "statements": [
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/ip-address@10.1.1",
          "identifiers": {
            "purl": "pkg:npm/ip-address@10.1.1"
          }
        }
      ],
      "timestamp": "2026-11-03T17:03:25.795966+00:00",
      "status_notes": "Vulnerability CVE-2026-101910 affects version 10.1.1 of ip-address.",
      "vulnerability": {
        "name": "CVE-2026-101910"
      },
      "action_statement": "Vulnerability CVE-2026-101910 affects version 10.1.1 of ip-address."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/ip-address@10.1.1",
          "identifiers": {
            "purl": "pkg:npm/ip-address@10.1.1"
          }
        }
      ],
      "timestamp": "2026-10-19T23:12:00.081722+00:00",
      "status_notes": "Vulnerability CVE-2026-101911 affects version 10.1.1 of ip-address, and is fixed in 10.1.1-tuxcare.1.",
      "vulnerability": {
        "name": "CVE-2026-101911"
      },
      "action_statement": "Vulnerability CVE-2026-101911 affects version 10.1.1 of ip-address, and is fixed in 10.1.1-tuxcare.1."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/ip-address@10.1.1",
          "identifiers": {
            "purl": "pkg:npm/ip-address@10.1.1"
          }
        }
      ],
      "timestamp": "2026-10-19T23:12:00.081722+00:00",
      "status_notes": "Vulnerability CVE-2026-101912 affects version 10.1.1 of ip-address, and is fixed in 10.1.1-tuxcare.1.",
      "vulnerability": {
        "name": "CVE-2026-101912"
      },
      "action_statement": "Vulnerability CVE-2026-101912 affects version 10.1.1 of ip-address, and is fixed in 10.1.1-tuxcare.1."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/ip-address@10.1.1",
          "identifiers": {
            "purl": "pkg:npm/ip-address@10.1.1"
          }
        }
      ],
      "timestamp": "2026-10-19T23:12:00.081722+00:00",
      "status_notes": "Vulnerability CVE-2026-101913 affects version 10.1.1 of ip-address, and is fixed in 10.1.1-tuxcare.1.",
      "vulnerability": {
        "name": "CVE-2026-101913"
      },
      "action_statement": "Vulnerability CVE-2026-101913 affects version 10.1.1 of ip-address, and is fixed in 10.1.1-tuxcare.1."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/ip-address@10.1.1",
          "identifiers": {
            "purl": "pkg:npm/ip-address@10.1.1"
          }
        }
      ],
      "timestamp": "2026-10-20T12:46:51.138394+00:00",
      "status_notes": "Vulnerability CVE-2026-111997 affects version 10.1.1 of ip-address, and is fixed in 10.1.1-tuxcare.2.",
      "vulnerability": {
        "name": "CVE-2026-111997"
      },
      "action_statement": "Vulnerability CVE-2026-111997 affects version 10.1.1 of ip-address, and is fixed in 10.1.1-tuxcare.2."
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:npm/ip-address@10.1.1",
          "identifiers": {
            "purl": "pkg:npm/ip-address@10.1.1"
          }
        }
      ],
      "timestamp": "2026-11-13T22:42:00.042020+00:00",
      "status_notes": "Vulnerability CVE-2026-42338 does not affect version 10.1.1 of ip-address. not_affected \u2014 Target is ip-address 10.1.1-tuxcare.3, built on upstream 10.1.1, the patched release. The HTML-escaping fix for CVE-2026-42338 was already in the upstream release TuxCare onboarded. All four issues (group, link, parse4in6 error, spanAll) are escaped in HEAD. This is an upstream fix, so the verdict is not_affected.",
      "justification": "vulnerable_code_not_present",
      "vulnerability": {
        "name": "CVE-2026-42338"
      },
      "impact_statement": "not_affected \u2014 Target is ip-address 10.1.1-tuxcare.3, built on upstream 10.1.1, the patched release. The HTML-escaping fix for CVE-2026-42338 was already in the upstream release TuxCare onboarded. All four issues (group, link, parse4in6 error, spanAll) are escaped in HEAD. This is an upstream fix, so the verdict is not_affected."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/ip-address@10.1.1",
          "identifiers": {
            "purl": "pkg:npm/ip-address@10.1.1"
          }
        }
      ],
      "timestamp": "2026-10-19T23:12:00.081722+00:00",
      "status_notes": "Vulnerability CVE-2026-54272 affects version 10.1.1 of ip-address, and is fixed in 10.1.1-tuxcare.1.",
      "vulnerability": {
        "name": "CVE-2026-54272"
      },
      "action_statement": "Vulnerability CVE-2026-54272 affects version 10.1.1 of ip-address, and is fixed in 10.1.1-tuxcare.1."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/ip-address@10.1.1",
          "identifiers": {
            "purl": "pkg:npm/ip-address@10.1.1"
          }
        }
      ],
      "timestamp": "2026-10-19T23:12:00.081722+00:00",
      "status_notes": "Vulnerability CVE-2026-69192 affects version 10.1.1 of ip-address, and is fixed in 10.1.1-tuxcare.1.",
      "vulnerability": {
        "name": "CVE-2026-69192"
      },
      "action_statement": "Vulnerability CVE-2026-69192 affects version 10.1.1 of ip-address, and is fixed in 10.1.1-tuxcare.1."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/ip-address@10.1.1",
          "identifiers": {
            "purl": "pkg:npm/ip-address@10.1.1"
          }
        }
      ],
      "timestamp": "2026-10-27T10:40:12.462794+00:00",
      "status_notes": "Vulnerability CVE-2026-69198 affects version 10.1.1 of ip-address, and is fixed in 10.1.1-tuxcare.3.",
      "vulnerability": {
        "name": "CVE-2026-69198"
      },
      "action_statement": "Vulnerability CVE-2026-69198 affects version 10.1.1 of ip-address, and is fixed in 10.1.1-tuxcare.3."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/ip-address@10.1.1",
          "identifiers": {
            "purl": "pkg:npm/ip-address@10.1.1"
          }
        }
      ],
      "timestamp": "2026-10-19T23:12:00.081722+00:00",
      "status_notes": "Vulnerability GHSA-22jq-vg5j-6vgg affects version 10.1.1 of ip-address, and is fixed in 10.1.1-tuxcare.1.",
      "vulnerability": {
        "name": "GHSA-22jq-vg5j-6vgg"
      },
      "action_statement": "Vulnerability GHSA-22jq-vg5j-6vgg affects version 10.1.1 of ip-address, and is fixed in 10.1.1-tuxcare.1."
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:npm/ip-address@10.1.1",
          "identifiers": {
            "purl": "pkg:npm/ip-address@10.1.1"
          }
        }
      ],
      "timestamp": "2026-10-22T17:10:00.682732+00:00",
      "status_notes": "Vulnerability GHSA-p3hm-x653-5rc6 is a false positive for ip-address 10.1.1.",
      "vulnerability": {
        "name": "GHSA-p3hm-x653-5rc6"
      },
      "impact_statement": "The vulnerability has been withdrawn."
    }
  ]
}