From c6463513478f67ef0f1e1531ccccfab22db40e8d Mon Sep 17 00:00:00 2001 From: timothycarambat Date: Mon, 22 Jul 2024 14:07:01 -0700 Subject: [PATCH] vex exception --- docker/vex/CVE-2019-10790.vex.json | 51 ++++++++++++++++++++++++++++++ 1 file changed, 51 insertions(+) create mode 100644 docker/vex/CVE-2019-10790.vex.json diff --git a/docker/vex/CVE-2019-10790.vex.json b/docker/vex/CVE-2019-10790.vex.json new file mode 100644 index 00000000..d6044ac6 --- /dev/null +++ b/docker/vex/CVE-2019-10790.vex.json @@ -0,0 +1,51 @@ +{ + "@context": "https://openvex.dev/ns/v0.2.0", + "@id": "https://openvex.dev/docs/public/vex-6750d79bb005487e11d10f81d0b3ac92c47e6e259292c6b2d02558f9f4bca52d", + "author": "tim@mintplexlabs.com", + "timestamp": "2024-07-22T13:49:12.883675-07:00", + "version": 1, + "statements": [ + { + "vulnerability": { + "name": "CVE-2019-10790" + }, + "timestamp": "2024-07-22T13:49:12.883678-07:00", + "products": [ + { + "@id": "pkg:docker/mintplexlabs/anythingllm@render", + "subcomponents": [ + { + "@id": "pkg:npm/taffydb@2.6.2" + } + ] + }, + { + "@id": "pkg:docker/mintplexlabs/anythingllm@railway", + "subcomponents": [ + { + "@id": "pkg:npm/taffydb@2.6.2" + } + ] + }, + { + "@id": "pkg:docker/mintplexlabs/anythingllm@latest", + "subcomponents": [ + { + "@id": "pkg:npm/taffydb@2.6.2" + } + ] + }, + { + "@id": "pkg:docker/mintplexlabs/anythingllm@master", + "subcomponents": [ + { + "@id": "pkg:npm/taffydb@2.6.2" + } + ] + } + ], + "status": "not_affected", + "justification": "vulnerable_code_cannot_be_controlled_by_adversary" + } + ] +} \ No newline at end of file