The vulnerability may be directly or indirectly exploitable.
The vulnerability is not specific to the component or service and was falsely identified or associated.
The vulnerability is being investigated.
The component or service is not affected by the vulnerability. Justification should be specified for all not_affected cases.
An undefined impact analysis state
buf:lint:ignore ENUM_ZERO_VALUE_SUFFIX -- null
is our fallback, doubling unspecified
The vulnerability has been remediated.
The vulnerability has been remediated, and evidence of the changes is provided in the affected components pedigree containing verifiable commit history and/or diff(s).
Generated
from enum cyclonedx.v1_6.ImpactAnalysisState