{
  "@context": "https://openvex.dev/ns/v0.2.0",
  "@id": "https://security.arpe.io/fastbcp/vex.openvex.json",
  "author": "Arpe.io",
  "role": "Software vendor",
  "timestamp": "2026-11-02T11:55:19Z",
  "version": 2,
  "statements": [
    {
      "vulnerability": {
        "name": "CVE-2026-44302",
        "aliases": [
          "GHSA-pggp-6c3x-2xmx"
        ]
      },
      "products": [
        {
          "@id": "pkg:generic/arpe.io/fastbcp",
          "subcomponents": [
            {
              "@id": "pkg:nuget/Snappier"
            }
          ]
        }
      ],
      "status": "under_investigation",
      "timestamp": "2026-10-27T13:23:23Z"
    },
    {
      "vulnerability": {
        "name": "CVE-2026-84008",
        "aliases": [
          "GHSA-846f-f764-76mx"
        ]
      },
      "products": [
        {
          "@id": "pkg:generic/arpe.io/fastbcp",
          "subcomponents": [
            {
              "@id": "pkg:nuget/System.Security.Cryptography.Pkcs"
            }
          ]
        }
      ],
      "status": "under_investigation",
      "timestamp": "2026-10-27T13:23:23Z"
    },
    {
      "vulnerability": {
        "name": "CVE-2026-70162",
        "aliases": [
          "GHSA-2fmv-rv2c-59x7"
        ]
      },
      "products": [
        {
          "@id": "pkg:generic/arpe.io/fastbcp",
          "subcomponents": [
            {
              "@id": "pkg:nuget/System.Security.Cryptography.Pkcs"
            }
          ]
        }
      ],
      "status": "under_investigation",
      "timestamp": "2026-10-27T13:23:23Z"
    },
    {
      "vulnerability": {
        "name": "CVE-2026-42191",
        "aliases": [
          "GHSA-4625-4j76-fww9"
        ]
      },
      "products": [
        {
          "@id": "pkg:generic/arpe.io/fastbcp",
          "subcomponents": [
            {
              "@id": "pkg:nuget/OpenTelemetry.Exporter.OpenTelemetryProtocol"
            }
          ]
        }
      ],
      "status": "under_investigation",
      "timestamp": "2026-10-27T13:23:23Z"
    },
    {
      "vulnerability": {
        "name": "CVE-2026-40894",
        "aliases": [
          "GHSA-g94r-2vxg-569j"
        ]
      },
      "products": [
        {
          "@id": "pkg:generic/arpe.io/fastbcp",
          "subcomponents": [
            {
              "@id": "pkg:nuget/OpenTelemetry.Api"
            }
          ]
        }
      ],
      "status": "under_investigation",
      "timestamp": "2026-10-27T13:23:23Z"
    },
    {
      "vulnerability": {
        "name": "CVE-2026-40891",
        "aliases": [
          "GHSA-mr8r-92fq-pj8p"
        ]
      },
      "products": [
        {
          "@id": "pkg:generic/arpe.io/fastbcp",
          "subcomponents": [
            {
              "@id": "pkg:nuget/OpenTelemetry.Exporter.OpenTelemetryProtocol"
            }
          ]
        }
      ],
      "status": "under_investigation",
      "timestamp": "2026-10-27T13:23:23Z"
    }
  ]
}