add VEX file with vulnerabilities information to SBOM

intel · Oct 16, 2024 · b2b5c41 · b2b5c41
1 parent 2b15bc5
commit b2b5c41
Showing 1 changed file with 70 additions and 0 deletions.
diff --git a/sbom/cve-bin-tool-py3.9.spdx.vex.json b/sbom/cve-bin-tool-py3.9.spdx.vex.json
@@ -0,0 +1,70 @@
+{
+  "@context": "https://openvex.dev/ns/v0.2.0",
+  "@id": "https://openvex.dev/docs/public/vex-d7971dad596bf8f0395a9da7c1c0a039ad75e431414c45d09dbcc3c2d4f9c989",
+  "author": "Unknown Author",
+  "timestamp": "2024-10-04T15:31:21.082828+02:00",
+  "last_updated": "2024-10-04T15:31:21.194452+02:00",
+  "version": 5,
+  "statements": [
+    {
+      "vulnerability": {
+        "name": "CVE-2024-35195"
+      },
+      "timestamp": "2024-10-04T15:31:21.082828+02:00",
+      "products": [
+        {
+          "@id": "pkg:pypi/[email protected]"
+        }
+      ],
+      "status": "under_investigation"
+    },
+    {
+      "vulnerability": {
+        "name": "CVE-2024-37891"
+      },
+      "timestamp": "2024-10-04T15:31:21.112094+02:00",
+      "products": [
+        {
+          "@id": "pkg:pypi/[email protected]"
+        }
+      ],
+      "status": "under_investigation"
+    },
+    {
+      "vulnerability": {
+        "name": "CVE-2024-39689"
+      },
+      "timestamp": "2024-10-04T15:31:21.13969+02:00",
+      "products": [
+        {
+          "@id": "pkg:pypi/[email protected]"
+        }
+      ],
+      "status": "under_investigation"
+    },
+    {
+      "vulnerability": {
+        "name": "CVE-2024-42367"
+      },
+      "timestamp": "2024-10-04T15:31:21.166505+02:00",
+      "products": [
+        {
+          "@id": "pkg:pypi/[email protected]"
+        }
+      ],
+      "status": "under_investigation"
+    },
+    {
+      "vulnerability": {
+        "name": "CVE-2024-5569"
+      },
+      "timestamp": "2024-10-04T15:31:21.194452+02:00",
+      "products": [
+        {
+          "@id": "pkg:pypi/[email protected]"
+        }
+      ],
+      "status": "under_investigation"
+    }
+  ]
+}