{"id":"CGA-c5f6-f2ff-f6g9","modified":"2026-01-28T03:27:04.350945Z","published":"2024-06-19T13:04:10.394478Z","withdrawn":"2026-01-28T03:27:04.350945Z","related":["CGA-c5f6-f2ff-f6g9","CVE-2020-8908","GHSA-5mg8-w23w-74h3"],"affected":[{"package":{"name":"spdx-tools-java","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/spdx-tools-java"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.8-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-c5f6-f2ff-f6g9.json"}},{"package":{"name":"spdx-tools-java","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/spdx-tools-java"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.8-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-c5f6-f2ff-f6g9.json"}}],"schema_version":"1.7.3"}