{
  "@context": "https://openvex.dev/ns/v0.2.0",
  "@id": "https://darkedges.com/vex/pingaccess/consolidated",
  "author": "DarkEdges Security <nirving@darkedges.com>",
  "version": 1,
  "statements": [
    {
      "vulnerability": {
        "name": "CVE-2020-36518"
      },
      "products": [
        {
          "@id": "pkg:oci/pingidentity/pingaccess@sha256:01e8aaf19f70857ae6b585c72750bf38c7bcc32e007a044549272346981efbd5",
          "subcomponents": [
            {
              "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.11.1"
            }
          ]
        }
      ],
      "status": "not_affected",
      "status_notes": "DEMO assessment generated for a CVE-suppression-workflow POC. This is NOT a real exploitability analysis; do not rely on it for risk decisions.",
      "justification": "vulnerable_code_not_in_execute_path",
      "timestamp": "2026-07-04T12:28:11.336Z"
    },
    {
      "vulnerability": {
        "name": "CVE-2021-28168"
      },
      "products": [
        {
          "@id": "pkg:oci/pingidentity/pingaccess@sha256:01e8aaf19f70857ae6b585c72750bf38c7bcc32e007a044549272346981efbd5",
          "subcomponents": [
            {
              "@id": "pkg:maven/org.glassfish.jersey.core/jersey-common@2.31"
            }
          ]
        }
      ],
      "status": "not_affected",
      "status_notes": "Reviewed and confirmed via vex-ui edit tab test",
      "justification": "vulnerable_code_not_in_execute_path",
      "timestamp": "2026-07-04T12:28:11.342Z"
    },
    {
      "vulnerability": {
        "name": "CVE-2021-34428"
      },
      "products": [
        {
          "@id": "pkg:oci/pingidentity/pingaccess@sha256:01e8aaf19f70857ae6b585c72750bf38c7bcc32e007a044549272346981efbd5",
          "subcomponents": [
            {
              "@id": "pkg:maven/org.eclipse.jetty/jetty-server@9.4.39.v20210325"
            }
          ]
        }
      ],
      "status": "not_affected",
      "status_notes": "DEMO assessment generated for a CVE-suppression-workflow POC. This is NOT a real exploitability analysis; do not rely on it for risk decisions.",
      "justification": "vulnerable_code_not_in_execute_path",
      "timestamp": "2026-07-04T12:28:11.347Z"
    },
    {
      "vulnerability": {
        "name": "CVE-2021-46877"
      },
      "products": [
        {
          "@id": "pkg:oci/pingidentity/pingaccess@sha256:01e8aaf19f70857ae6b585c72750bf38c7bcc32e007a044549272346981efbd5",
          "subcomponents": [
            {
              "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.11.1"
            }
          ]
        }
      ],
      "status": "not_affected",
      "status_notes": "DEMO assessment generated for a CVE-suppression-workflow POC. This is NOT a real exploitability analysis; do not rely on it for risk decisions.",
      "justification": "vulnerable_code_not_in_execute_path",
      "timestamp": "2026-07-04T12:28:11.351Z"
    },
    {
      "vulnerability": {
        "name": "CVE-2022-2047"
      },
      "products": [
        {
          "@id": "pkg:oci/pingidentity/pingaccess@sha256:01e8aaf19f70857ae6b585c72750bf38c7bcc32e007a044549272346981efbd5",
          "subcomponents": [
            {
              "@id": "pkg:maven/org.eclipse.jetty/jetty-http@9.4.39.v20210325"
            }
          ]
        }
      ],
      "status": "not_affected",
      "status_notes": "DEMO assessment generated for a CVE-suppression-workflow POC. This is NOT a real exploitability analysis; do not rely on it for risk decisions.",
      "justification": "vulnerable_code_not_in_execute_path",
      "timestamp": "2026-07-04T12:28:11.355Z"
    },
    {
      "vulnerability": {
        "name": "CVE-2022-42003"
      },
      "products": [
        {
          "@id": "pkg:oci/pingidentity/pingaccess@sha256:01e8aaf19f70857ae6b585c72750bf38c7bcc32e007a044549272346981efbd5",
          "subcomponents": [
            {
              "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.11.1"
            }
          ]
        }
      ],
      "status": "not_affected",
      "status_notes": "DEMO assessment generated for a CVE-suppression-workflow POC. This is NOT a real exploitability analysis; do not rely on it for risk decisions.",
      "justification": "vulnerable_code_not_in_execute_path",
      "timestamp": "2026-07-04T12:28:11.359Z"
    },
    {
      "vulnerability": {
        "name": "CVE-2022-42004"
      },
      "products": [
        {
          "@id": "pkg:oci/pingidentity/pingaccess@sha256:01e8aaf19f70857ae6b585c72750bf38c7bcc32e007a044549272346981efbd5",
          "subcomponents": [
            {
              "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.11.1"
            }
          ]
        }
      ],
      "status": "not_affected",
      "status_notes": "DEMO assessment generated for a CVE-suppression-workflow POC. This is NOT a real exploitability analysis; do not rely on it for risk decisions.",
      "justification": "vulnerable_code_not_in_execute_path",
      "timestamp": "2026-07-04T12:28:11.363Z"
    },
    {
      "vulnerability": {
        "name": "CVE-2022-46337"
      },
      "products": [
        {
          "@id": "pkg:oci/pingidentity/pingaccess@sha256:01e8aaf19f70857ae6b585c72750bf38c7bcc32e007a044549272346981efbd5",
          "subcomponents": [
            {
              "@id": "pkg:maven/org.apache.derby/derby@10.14.2.0"
            }
          ]
        }
      ],
      "status": "not_affected",
      "status_notes": "DEMO assessment generated for a CVE-suppression-workflow POC. This is NOT a real exploitability analysis; do not rely on it for risk decisions.",
      "justification": "vulnerable_code_not_in_execute_path",
      "timestamp": "2026-07-04T12:28:11.369Z"
    },
    {
      "vulnerability": {
        "name": "CVE-2023-26048"
      },
      "products": [
        {
          "@id": "pkg:oci/pingidentity/pingaccess@sha256:01e8aaf19f70857ae6b585c72750bf38c7bcc32e007a044549272346981efbd5",
          "subcomponents": [
            {
              "@id": "pkg:maven/org.eclipse.jetty/jetty-server@9.4.39.v20210325"
            }
          ]
        }
      ],
      "status": "not_affected",
      "status_notes": "DEMO assessment generated for a CVE-suppression-workflow POC. This is NOT a real exploitability analysis; do not rely on it for risk decisions.",
      "justification": "vulnerable_code_not_in_execute_path",
      "timestamp": "2026-07-04T12:28:11.374Z"
    },
    {
      "vulnerability": {
        "name": "CVE-2023-26049"
      },
      "products": [
        {
          "@id": "pkg:oci/pingidentity/pingaccess@sha256:01e8aaf19f70857ae6b585c72750bf38c7bcc32e007a044549272346981efbd5",
          "subcomponents": [
            {
              "@id": "pkg:maven/org.eclipse.jetty/jetty-server@9.4.39.v20210325"
            }
          ]
        }
      ],
      "status": "not_affected",
      "status_notes": "DEMO assessment generated for a CVE-suppression-workflow POC. This is NOT a real exploitability analysis; do not rely on it for risk decisions.",
      "justification": "vulnerable_code_not_in_execute_path",
      "timestamp": "2026-07-04T12:28:11.379Z"
    },
    {
      "vulnerability": {
        "name": "CVE-2023-33201"
      },
      "products": [
        {
          "@id": "pkg:oci/pingidentity/pingaccess@sha256:01e8aaf19f70857ae6b585c72750bf38c7bcc32e007a044549272346981efbd5",
          "subcomponents": [
            {
              "@id": "pkg:maven/org.bouncycastle/bcprov-jdk15on@1.70"
            }
          ]
        }
      ],
      "status": "not_affected",
      "status_notes": "DEMO assessment generated for a CVE-suppression-workflow POC. This is NOT a real exploitability analysis; do not rely on it for risk decisions.",
      "justification": "vulnerable_code_not_in_execute_path",
      "timestamp": "2026-07-04T12:28:11.385Z"
    },
    {
      "vulnerability": {
        "name": "CVE-2023-40167"
      },
      "products": [
        {
          "@id": "pkg:oci/pingidentity/pingaccess@sha256:01e8aaf19f70857ae6b585c72750bf38c7bcc32e007a044549272346981efbd5",
          "subcomponents": [
            {
              "@id": "pkg:maven/org.eclipse.jetty/jetty-http@9.4.39.v20210325"
            }
          ]
        }
      ],
      "status": "not_affected",
      "status_notes": "DEMO assessment generated for a CVE-suppression-workflow POC. This is NOT a real exploitability analysis; do not rely on it for risk decisions.",
      "justification": "vulnerable_code_not_in_execute_path",
      "timestamp": "2026-07-04T12:28:11.389Z"
    },
    {
      "vulnerability": {
        "name": "CVE-2024-13009"
      },
      "products": [
        {
          "@id": "pkg:oci/pingidentity/pingaccess@sha256:01e8aaf19f70857ae6b585c72750bf38c7bcc32e007a044549272346981efbd5",
          "subcomponents": [
            {
              "@id": "pkg:maven/org.eclipse.jetty/jetty-server@9.4.39.v20210325"
            }
          ]
        }
      ],
      "status": "not_affected",
      "status_notes": "DEMO assessment generated for a CVE-suppression-workflow POC. This is NOT a real exploitability analysis; do not rely on it for risk decisions.",
      "justification": "vulnerable_code_not_in_execute_path",
      "timestamp": "2026-07-04T12:28:11.393Z"
    },
    {
      "vulnerability": {
        "name": "CVE-2024-29857"
      },
      "products": [
        {
          "@id": "pkg:oci/pingidentity/pingaccess@sha256:01e8aaf19f70857ae6b585c72750bf38c7bcc32e007a044549272346981efbd5",
          "subcomponents": [
            {
              "@id": "pkg:maven/org.bouncycastle/bcprov-jdk15on@1.70"
            }
          ]
        }
      ],
      "status": "not_affected",
      "status_notes": "DEMO assessment generated for a CVE-suppression-workflow POC. This is NOT a real exploitability analysis; do not rely on it for risk decisions.",
      "justification": "vulnerable_code_not_in_execute_path",
      "timestamp": "2026-07-04T12:28:11.398Z"
    },
    {
      "vulnerability": {
        "name": "CVE-2024-30171"
      },
      "products": [
        {
          "@id": "pkg:oci/pingidentity/pingaccess@sha256:01e8aaf19f70857ae6b585c72750bf38c7bcc32e007a044549272346981efbd5",
          "subcomponents": [
            {
              "@id": "pkg:maven/org.bouncycastle/bcprov-jdk15on@1.70"
            }
          ]
        }
      ],
      "status": "not_affected",
      "status_notes": "DEMO assessment generated for a CVE-suppression-workflow POC. This is NOT a real exploitability analysis; do not rely on it for risk decisions.",
      "justification": "vulnerable_code_not_in_execute_path",
      "timestamp": "2026-07-04T12:28:11.402Z"
    },
    {
      "vulnerability": {
        "name": "CVE-2024-34447"
      },
      "products": [
        {
          "@id": "pkg:oci/pingidentity/pingaccess@sha256:01e8aaf19f70857ae6b585c72750bf38c7bcc32e007a044549272346981efbd5",
          "subcomponents": [
            {
              "@id": "pkg:maven/org.bouncycastle/bcprov-jdk15on@1.70"
            }
          ]
        }
      ],
      "status": "not_affected",
      "status_notes": "DEMO assessment generated for a CVE-suppression-workflow POC. This is NOT a real exploitability analysis; do not rely on it for risk decisions.",
      "justification": "vulnerable_code_not_in_execute_path",
      "timestamp": "2026-07-04T12:28:11.406Z"
    },
    {
      "vulnerability": {
        "name": "CVE-2024-38808"
      },
      "products": [
        {
          "@id": "pkg:oci/pingidentity/pingaccess@sha256:01e8aaf19f70857ae6b585c72750bf38c7bcc32e007a044549272346981efbd5",
          "subcomponents": [
            {
              "@id": "pkg:maven/org.springframework/spring-expression@5.3.33"
            }
          ]
        }
      ],
      "status": "not_affected",
      "status_notes": "DEMO assessment generated for a CVE-suppression-workflow POC. This is NOT a real exploitability analysis; do not rely on it for risk decisions.",
      "justification": "vulnerable_code_not_in_execute_path",
      "timestamp": "2026-07-04T12:28:11.410Z"
    },
    {
      "vulnerability": {
        "name": "CVE-2024-38820"
      },
      "products": [
        {
          "@id": "pkg:oci/pingidentity/pingaccess@sha256:01e8aaf19f70857ae6b585c72750bf38c7bcc32e007a044549272346981efbd5",
          "subcomponents": [
            {
              "@id": "pkg:maven/org.springframework/spring-context@5.3.33"
            }
          ]
        }
      ],
      "status": "not_affected",
      "status_notes": "DEMO assessment generated for a CVE-suppression-workflow POC. This is NOT a real exploitability analysis; do not rely on it for risk decisions.",
      "justification": "vulnerable_code_not_in_execute_path",
      "timestamp": "2026-07-04T12:28:11.414Z"
    },
    {
      "vulnerability": {
        "name": "CVE-2024-47554"
      },
      "products": [
        {
          "@id": "pkg:oci/pingidentity/pingaccess@sha256:01e8aaf19f70857ae6b585c72750bf38c7bcc32e007a044549272346981efbd5",
          "subcomponents": [
            {
              "@id": "pkg:maven/commons-io/commons-io@2.8.0"
            }
          ]
        }
      ],
      "status": "not_affected",
      "status_notes": "DEMO assessment generated for a CVE-suppression-workflow POC. This is NOT a real exploitability analysis; do not rely on it for risk decisions.",
      "justification": "vulnerable_code_not_in_execute_path",
      "timestamp": "2026-07-04T12:28:11.418Z"
    },
    {
      "vulnerability": {
        "name": "CVE-2024-6763"
      },
      "products": [
        {
          "@id": "pkg:oci/pingidentity/pingaccess@sha256:01e8aaf19f70857ae6b585c72750bf38c7bcc32e007a044549272346981efbd5",
          "subcomponents": [
            {
              "@id": "pkg:maven/org.eclipse.jetty/jetty-http@9.4.39.v20210325"
            }
          ]
        }
      ],
      "status": "not_affected",
      "status_notes": "DEMO assessment generated for a CVE-suppression-workflow POC. This is NOT a real exploitability analysis; do not rely on it for risk decisions.",
      "justification": "vulnerable_code_not_in_execute_path",
      "timestamp": "2026-07-04T12:28:11.423Z"
    },
    {
      "vulnerability": {
        "name": "CVE-2024-8184"
      },
      "products": [
        {
          "@id": "pkg:oci/pingidentity/pingaccess@sha256:01e8aaf19f70857ae6b585c72750bf38c7bcc32e007a044549272346981efbd5",
          "subcomponents": [
            {
              "@id": "pkg:maven/org.eclipse.jetty/jetty-server@9.4.39.v20210325"
            }
          ]
        }
      ],
      "status": "not_affected",
      "status_notes": "DEMO assessment generated for a CVE-suppression-workflow POC. This is NOT a real exploitability analysis; do not rely on it for risk decisions.",
      "justification": "vulnerable_code_not_in_execute_path",
      "timestamp": "2026-07-04T12:28:11.427Z"
    },
    {
      "vulnerability": {
        "name": "CVE-2025-11143"
      },
      "products": [
        {
          "@id": "pkg:oci/pingidentity/pingaccess@sha256:01e8aaf19f70857ae6b585c72750bf38c7bcc32e007a044549272346981efbd5",
          "subcomponents": [
            {
              "@id": "pkg:maven/org.eclipse.jetty/jetty-http@9.4.39.v20210325"
            }
          ]
        }
      ],
      "status": "not_affected",
      "status_notes": "DEMO assessment generated for a CVE-suppression-workflow POC. This is NOT a real exploitability analysis; do not rely on it for risk decisions.",
      "justification": "vulnerable_code_not_in_execute_path",
      "timestamp": "2026-07-04T12:28:11.433Z"
    },
    {
      "vulnerability": {
        "name": "CVE-2025-22233"
      },
      "products": [
        {
          "@id": "pkg:oci/pingidentity/pingaccess@sha256:01e8aaf19f70857ae6b585c72750bf38c7bcc32e007a044549272346981efbd5",
          "subcomponents": [
            {
              "@id": "pkg:maven/org.springframework/spring-context@5.3.33"
            }
          ]
        }
      ],
      "status": "not_affected",
      "status_notes": "DEMO assessment generated for a CVE-suppression-workflow POC. This is NOT a real exploitability analysis; do not rely on it for risk decisions.",
      "justification": "vulnerable_code_not_in_execute_path",
      "timestamp": "2026-07-04T12:28:11.439Z"
    },
    {
      "vulnerability": {
        "name": "CVE-2025-41249"
      },
      "products": [
        {
          "@id": "pkg:oci/pingidentity/pingaccess@sha256:01e8aaf19f70857ae6b585c72750bf38c7bcc32e007a044549272346981efbd5",
          "subcomponents": [
            {
              "@id": "pkg:maven/org.springframework/spring-core@5.3.33"
            }
          ]
        }
      ],
      "status": "not_affected",
      "status_notes": "DEMO assessment generated for a CVE-suppression-workflow POC. This is NOT a real exploitability analysis; do not rely on it for risk decisions.",
      "justification": "vulnerable_code_not_in_execute_path",
      "timestamp": "2026-07-04T12:28:11.444Z"
    },
    {
      "vulnerability": {
        "name": "CVE-2025-46392"
      },
      "products": [
        {
          "@id": "pkg:oci/pingidentity/pingaccess@sha256:01e8aaf19f70857ae6b585c72750bf38c7bcc32e007a044549272346981efbd5",
          "subcomponents": [
            {
              "@id": "pkg:maven/commons-configuration/commons-configuration@1.10"
            }
          ]
        }
      ],
      "status": "not_affected",
      "status_notes": "DEMO assessment generated for a CVE-suppression-workflow POC. This is NOT a real exploitability analysis; do not rely on it for risk decisions.",
      "justification": "vulnerable_code_not_in_execute_path",
      "timestamp": "2026-07-04T12:28:11.449Z"
    },
    {
      "vulnerability": {
        "name": "CVE-2025-48924"
      },
      "products": [
        {
          "@id": "pkg:oci/pingidentity/pingaccess@sha256:01e8aaf19f70857ae6b585c72750bf38c7bcc32e007a044549272346981efbd5",
          "subcomponents": [
            {
              "@id": "pkg:maven/commons-lang/commons-lang@2.4"
            },
            {
              "@id": "pkg:maven/commons-lang/commons-lang@2.6"
            },
            {
              "@id": "pkg:maven/org.apache.commons/commons-lang3@3.14.0"
            }
          ]
        }
      ],
      "status": "not_affected",
      "status_notes": "DEMO assessment generated for a CVE-suppression-workflow POC. This is NOT a real exploitability analysis; do not rely on it for risk decisions.",
      "justification": "vulnerable_code_not_in_execute_path",
      "timestamp": "2026-07-04T12:28:11.454Z"
    },
    {
      "vulnerability": {
        "name": "CVE-2025-48976"
      },
      "products": [
        {
          "@id": "pkg:oci/pingidentity/pingaccess@sha256:01e8aaf19f70857ae6b585c72750bf38c7bcc32e007a044549272346981efbd5",
          "subcomponents": [
            {
              "@id": "pkg:maven/commons-fileupload/commons-fileupload@1.5"
            }
          ]
        }
      ],
      "status": "not_affected",
      "status_notes": "DEMO assessment generated for a CVE-suppression-workflow POC. This is NOT a real exploitability analysis; do not rely on it for risk decisions.",
      "justification": "vulnerable_code_not_in_execute_path",
      "timestamp": "2026-07-04T12:28:11.459Z"
    },
    {
      "vulnerability": {
        "name": "CVE-2025-49128"
      },
      "products": [
        {
          "@id": "pkg:oci/pingidentity/pingaccess@sha256:01e8aaf19f70857ae6b585c72750bf38c7bcc32e007a044549272346981efbd5",
          "subcomponents": [
            {
              "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.11.1"
            }
          ]
        }
      ],
      "status": "not_affected",
      "status_notes": "DEMO assessment generated for a CVE-suppression-workflow POC. This is NOT a real exploitability analysis; do not rely on it for risk decisions.",
      "justification": "vulnerable_code_not_in_execute_path",
      "timestamp": "2026-07-04T12:28:11.464Z"
    },
    {
      "vulnerability": {
        "name": "CVE-2025-52999"
      },
      "products": [
        {
          "@id": "pkg:oci/pingidentity/pingaccess@sha256:01e8aaf19f70857ae6b585c72750bf38c7bcc32e007a044549272346981efbd5",
          "subcomponents": [
            {
              "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.11.1"
            },
            {
              "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.13.1"
            }
          ]
        }
      ],
      "status": "not_affected",
      "status_notes": "DEMO assessment generated for a CVE-suppression-workflow POC. This is NOT a real exploitability analysis; do not rely on it for risk decisions.",
      "justification": "vulnerable_code_not_in_execute_path",
      "timestamp": "2026-07-04T12:28:11.469Z"
    },
    {
      "vulnerability": {
        "name": "CVE-2025-8885"
      },
      "products": [
        {
          "@id": "pkg:oci/pingidentity/pingaccess@sha256:01e8aaf19f70857ae6b585c72750bf38c7bcc32e007a044549272346981efbd5",
          "subcomponents": [
            {
              "@id": "pkg:maven/org.bouncycastle/bc-fips@2.0.0"
            }
          ]
        }
      ],
      "status": "not_affected",
      "status_notes": "DEMO assessment generated for a CVE-suppression-workflow POC. This is NOT a real exploitability analysis; do not rely on it for risk decisions.",
      "justification": "vulnerable_code_not_in_execute_path",
      "timestamp": "2026-07-04T12:28:11.474Z"
    },
    {
      "vulnerability": {
        "name": "CVE-2025-8916"
      },
      "products": [
        {
          "@id": "pkg:oci/pingidentity/pingaccess@sha256:01e8aaf19f70857ae6b585c72750bf38c7bcc32e007a044549272346981efbd5",
          "subcomponents": [
            {
              "@id": "pkg:maven/org.bouncycastle/bcpkix-fips@2.0.7"
            },
            {
              "@id": "pkg:maven/org.bouncycastle/bcpkix-jdk15on@1.70"
            }
          ]
        }
      ],
      "status": "not_affected",
      "status_notes": "DEMO assessment generated for a CVE-suppression-workflow POC. This is NOT a real exploitability analysis; do not rely on it for risk decisions.",
      "justification": "vulnerable_code_not_in_execute_path",
      "timestamp": "2026-07-04T12:28:11.479Z"
    },
    {
      "vulnerability": {
        "name": "CVE-2026-2332"
      },
      "products": [
        {
          "@id": "pkg:oci/pingidentity/pingaccess@sha256:01e8aaf19f70857ae6b585c72750bf38c7bcc32e007a044549272346981efbd5",
          "subcomponents": [
            {
              "@id": "pkg:maven/org.eclipse.jetty/jetty-http@9.4.39.v20210325"
            }
          ]
        }
      ],
      "status": "not_affected",
      "status_notes": "DEMO assessment generated for a CVE-suppression-workflow POC. This is NOT a real exploitability analysis; do not rely on it for risk decisions.",
      "justification": "vulnerable_code_not_in_execute_path",
      "timestamp": "2026-07-04T12:28:11.483Z"
    },
    {
      "vulnerability": {
        "name": "CVE-2026-27145"
      },
      "products": [
        {
          "@id": "pkg:oci/pingidentity/pingaccess@sha256:01e8aaf19f70857ae6b585c72750bf38c7bcc32e007a044549272346981efbd5",
          "subcomponents": [
            {
              "@id": "pkg:golang/stdlib@v1.25.10"
            }
          ]
        }
      ],
      "status": "not_affected",
      "status_notes": "DEMO assessment generated for a CVE-suppression-workflow POC. This is NOT a real exploitability analysis; do not rely on it for risk decisions.",
      "justification": "vulnerable_code_not_in_execute_path",
      "timestamp": "2026-07-04T12:28:11.488Z"
    },
    {
      "vulnerability": {
        "name": "CVE-2026-34477"
      },
      "products": [
        {
          "@id": "pkg:oci/pingidentity/pingaccess@sha256:01e8aaf19f70857ae6b585c72750bf38c7bcc32e007a044549272346981efbd5",
          "subcomponents": [
            {
              "@id": "pkg:maven/org.apache.logging.log4j/log4j-core@2.25.3"
            }
          ]
        }
      ],
      "status": "not_affected",
      "status_notes": "DEMO assessment generated for a CVE-suppression-workflow POC. This is NOT a real exploitability analysis; do not rely on it for risk decisions.",
      "justification": "vulnerable_code_not_in_execute_path",
      "timestamp": "2026-07-04T12:28:11.502Z"
    },
    {
      "vulnerability": {
        "name": "CVE-2026-34478"
      },
      "products": [
        {
          "@id": "pkg:oci/pingidentity/pingaccess@sha256:01e8aaf19f70857ae6b585c72750bf38c7bcc32e007a044549272346981efbd5",
          "subcomponents": [
            {
              "@id": "pkg:maven/org.apache.logging.log4j/log4j-core@2.25.3"
            }
          ]
        }
      ],
      "status": "not_affected",
      "status_notes": "DEMO assessment generated for a CVE-suppression-workflow POC. This is NOT a real exploitability analysis; do not rely on it for risk decisions.",
      "justification": "vulnerable_code_not_in_execute_path",
      "timestamp": "2026-07-04T12:28:11.508Z"
    },
    {
      "vulnerability": {
        "name": "CVE-2026-34480"
      },
      "products": [
        {
          "@id": "pkg:oci/pingidentity/pingaccess@sha256:01e8aaf19f70857ae6b585c72750bf38c7bcc32e007a044549272346981efbd5",
          "subcomponents": [
            {
              "@id": "pkg:maven/org.apache.logging.log4j/log4j-core@2.25.3"
            }
          ]
        }
      ],
      "status": "not_affected",
      "status_notes": "DEMO assessment generated for a CVE-suppression-workflow POC. This is NOT a real exploitability analysis; do not rely on it for risk decisions.",
      "justification": "vulnerable_code_not_in_execute_path",
      "timestamp": "2026-07-04T12:28:11.512Z"
    },
    {
      "vulnerability": {
        "name": "CVE-2026-34481"
      },
      "products": [
        {
          "@id": "pkg:oci/pingidentity/pingaccess@sha256:01e8aaf19f70857ae6b585c72750bf38c7bcc32e007a044549272346981efbd5",
          "subcomponents": [
            {
              "@id": "pkg:maven/org.apache.logging.log4j/log4j-layout-template-json@2.25.3"
            }
          ]
        }
      ],
      "status": "not_affected",
      "status_notes": "DEMO assessment generated for a CVE-suppression-workflow POC. This is NOT a real exploitability analysis; do not rely on it for risk decisions.",
      "justification": "vulnerable_code_not_in_execute_path",
      "timestamp": "2026-07-04T12:28:11.516Z"
    },
    {
      "vulnerability": {
        "name": "CVE-2026-41417"
      },
      "products": [
        {
          "@id": "pkg:oci/pingidentity/pingaccess@sha256:01e8aaf19f70857ae6b585c72750bf38c7bcc32e007a044549272346981efbd5",
          "subcomponents": [
            {
              "@id": "pkg:maven/io.netty/netty-codec-http@4.1.132.Final"
            }
          ]
        }
      ],
      "status": "not_affected",
      "status_notes": "DEMO assessment generated for a CVE-suppression-workflow POC. This is NOT a real exploitability analysis; do not rely on it for risk decisions.",
      "justification": "vulnerable_code_not_in_execute_path",
      "timestamp": "2026-07-04T12:28:11.520Z"
    },
    {
      "vulnerability": {
        "name": "CVE-2026-42504"
      },
      "products": [
        {
          "@id": "pkg:oci/pingidentity/pingaccess@sha256:01e8aaf19f70857ae6b585c72750bf38c7bcc32e007a044549272346981efbd5",
          "subcomponents": [
            {
              "@id": "pkg:golang/stdlib@v1.25.10"
            }
          ]
        }
      ],
      "status": "not_affected",
      "status_notes": "DEMO assessment generated for a CVE-suppression-workflow POC. This is NOT a real exploitability analysis; do not rely on it for risk decisions.",
      "justification": "vulnerable_code_not_in_execute_path",
      "timestamp": "2026-07-04T12:28:11.524Z"
    },
    {
      "vulnerability": {
        "name": "CVE-2026-42507"
      },
      "products": [
        {
          "@id": "pkg:oci/pingidentity/pingaccess@sha256:01e8aaf19f70857ae6b585c72750bf38c7bcc32e007a044549272346981efbd5",
          "subcomponents": [
            {
              "@id": "pkg:golang/stdlib@v1.25.10"
            }
          ]
        }
      ],
      "status": "not_affected",
      "status_notes": "DEMO assessment generated for a CVE-suppression-workflow POC. This is NOT a real exploitability analysis; do not rely on it for risk decisions.",
      "justification": "vulnerable_code_not_in_execute_path",
      "timestamp": "2026-07-04T12:28:11.528Z"
    },
    {
      "vulnerability": {
        "name": "CVE-2026-42578"
      },
      "products": [
        {
          "@id": "pkg:oci/pingidentity/pingaccess@sha256:01e8aaf19f70857ae6b585c72750bf38c7bcc32e007a044549272346981efbd5",
          "subcomponents": [
            {
              "@id": "pkg:maven/io.netty/netty-handler-proxy@4.1.132.Final"
            }
          ]
        }
      ],
      "status": "not_affected",
      "status_notes": "DEMO assessment generated for a CVE-suppression-workflow POC. This is NOT a real exploitability analysis; do not rely on it for risk decisions.",
      "justification": "vulnerable_code_not_in_execute_path",
      "timestamp": "2026-07-04T12:28:11.534Z"
    },
    {
      "vulnerability": {
        "name": "CVE-2026-42580"
      },
      "products": [
        {
          "@id": "pkg:oci/pingidentity/pingaccess@sha256:01e8aaf19f70857ae6b585c72750bf38c7bcc32e007a044549272346981efbd5",
          "subcomponents": [
            {
              "@id": "pkg:maven/io.netty/netty-codec-http@4.1.132.Final"
            }
          ]
        }
      ],
      "status": "not_affected",
      "status_notes": "DEMO assessment generated for a CVE-suppression-workflow POC. This is NOT a real exploitability analysis; do not rely on it for risk decisions.",
      "justification": "vulnerable_code_not_in_execute_path",
      "timestamp": "2026-07-04T12:28:11.540Z"
    },
    {
      "vulnerability": {
        "name": "CVE-2026-42581"
      },
      "products": [
        {
          "@id": "pkg:oci/pingidentity/pingaccess@sha256:01e8aaf19f70857ae6b585c72750bf38c7bcc32e007a044549272346981efbd5",
          "subcomponents": [
            {
              "@id": "pkg:maven/io.netty/netty-codec-http@4.1.132.Final"
            }
          ]
        }
      ],
      "status": "not_affected",
      "status_notes": "DEMO assessment generated for a CVE-suppression-workflow POC. This is NOT a real exploitability analysis; do not rely on it for risk decisions.",
      "justification": "vulnerable_code_not_in_execute_path",
      "timestamp": "2026-07-04T12:28:11.549Z"
    },
    {
      "vulnerability": {
        "name": "CVE-2026-42583"
      },
      "products": [
        {
          "@id": "pkg:oci/pingidentity/pingaccess@sha256:01e8aaf19f70857ae6b585c72750bf38c7bcc32e007a044549272346981efbd5",
          "subcomponents": [
            {
              "@id": "pkg:maven/io.netty/netty-codec@4.1.132.Final"
            }
          ]
        }
      ],
      "status": "not_affected",
      "status_notes": "DEMO assessment generated for a CVE-suppression-workflow POC. This is NOT a real exploitability analysis; do not rely on it for risk decisions.",
      "justification": "vulnerable_code_not_in_execute_path",
      "timestamp": "2026-07-04T12:28:11.554Z"
    },
    {
      "vulnerability": {
        "name": "CVE-2026-42584"
      },
      "products": [
        {
          "@id": "pkg:oci/pingidentity/pingaccess@sha256:01e8aaf19f70857ae6b585c72750bf38c7bcc32e007a044549272346981efbd5",
          "subcomponents": [
            {
              "@id": "pkg:maven/io.netty/netty-codec-http@4.1.132.Final"
            }
          ]
        }
      ],
      "status": "not_affected",
      "status_notes": "DEMO assessment generated for a CVE-suppression-workflow POC. This is NOT a real exploitability analysis; do not rely on it for risk decisions.",
      "justification": "vulnerable_code_not_in_execute_path",
      "timestamp": "2026-07-04T12:28:11.560Z"
    },
    {
      "vulnerability": {
        "name": "CVE-2026-42585"
      },
      "products": [
        {
          "@id": "pkg:oci/pingidentity/pingaccess@sha256:01e8aaf19f70857ae6b585c72750bf38c7bcc32e007a044549272346981efbd5",
          "subcomponents": [
            {
              "@id": "pkg:maven/io.netty/netty-codec-http@4.1.132.Final"
            }
          ]
        }
      ],
      "status": "not_affected",
      "status_notes": "DEMO assessment generated for a CVE-suppression-workflow POC. This is NOT a real exploitability analysis; do not rely on it for risk decisions.",
      "justification": "vulnerable_code_not_in_execute_path",
      "timestamp": "2026-07-04T12:28:11.565Z"
    },
    {
      "vulnerability": {
        "name": "CVE-2026-42587"
      },
      "products": [
        {
          "@id": "pkg:oci/pingidentity/pingaccess@sha256:01e8aaf19f70857ae6b585c72750bf38c7bcc32e007a044549272346981efbd5",
          "subcomponents": [
            {
              "@id": "pkg:maven/io.netty/netty-codec-http@4.1.132.Final"
            }
          ]
        }
      ],
      "status": "not_affected",
      "status_notes": "DEMO assessment generated for a CVE-suppression-workflow POC. This is NOT a real exploitability analysis; do not rely on it for risk decisions.",
      "justification": "vulnerable_code_not_in_execute_path",
      "timestamp": "2026-07-04T12:28:11.571Z"
    },
    {
      "vulnerability": {
        "name": "CVE-2026-44249"
      },
      "products": [
        {
          "@id": "pkg:oci/pingidentity/pingaccess@sha256:01e8aaf19f70857ae6b585c72750bf38c7bcc32e007a044549272346981efbd5",
          "subcomponents": [
            {
              "@id": "pkg:maven/io.netty/netty-handler@4.1.132.Final"
            }
          ]
        }
      ],
      "status": "not_affected",
      "status_notes": "DEMO assessment generated for a CVE-suppression-workflow POC. This is NOT a real exploitability analysis; do not rely on it for risk decisions.",
      "justification": "vulnerable_code_not_in_execute_path",
      "timestamp": "2026-07-04T12:28:11.578Z"
    },
    {
      "vulnerability": {
        "name": "CVE-2026-45416"
      },
      "products": [
        {
          "@id": "pkg:oci/pingidentity/pingaccess@sha256:01e8aaf19f70857ae6b585c72750bf38c7bcc32e007a044549272346981efbd5",
          "subcomponents": [
            {
              "@id": "pkg:maven/io.netty/netty-handler@4.1.132.Final"
            }
          ]
        }
      ],
      "status": "not_affected",
      "status_notes": "DEMO assessment generated for a CVE-suppression-workflow POC. This is NOT a real exploitability analysis; do not rely on it for risk decisions.",
      "justification": "vulnerable_code_not_in_execute_path",
      "timestamp": "2026-07-04T12:28:11.584Z"
    },
    {
      "vulnerability": {
        "name": "CVE-2026-5588"
      },
      "products": [
        {
          "@id": "pkg:oci/pingidentity/pingaccess@sha256:01e8aaf19f70857ae6b585c72750bf38c7bcc32e007a044549272346981efbd5",
          "subcomponents": [
            {
              "@id": "pkg:maven/org.bouncycastle/bcpkix-jdk15on@1.70"
            }
          ]
        }
      ],
      "status": "not_affected",
      "status_notes": "DEMO assessment generated for a CVE-suppression-workflow POC. This is NOT a real exploitability analysis; do not rely on it for risk decisions.",
      "justification": "vulnerable_code_not_in_execute_path",
      "timestamp": "2026-07-04T12:28:11.589Z"
    },
    {
      "vulnerability": {
        "name": "GHSA-72hv-8253-57qq"
      },
      "products": [
        {
          "@id": "pkg:oci/pingidentity/pingaccess@sha256:01e8aaf19f70857ae6b585c72750bf38c7bcc32e007a044549272346981efbd5",
          "subcomponents": [
            {
              "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.11.1"
            },
            {
              "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.13.1"
            },
            {
              "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.17.0"
            }
          ]
        }
      ],
      "status": "not_affected",
      "status_notes": "DEMO assessment generated for a CVE-suppression-workflow POC. This is NOT a real exploitability analysis; do not rely on it for risk decisions.",
      "justification": "vulnerable_code_not_in_execute_path",
      "timestamp": "2026-07-04T12:28:11.595Z"
    }
  ],
  "timestamp": "2026-07-05T02:22:47.809Z"
}