This is an automated email from the ASF dual-hosted git repository.
epugh pushed a change to branch main
in repository https://gitbox.apache.org/repos/asf/solr-site.git
from 6bb766605 Merge pull request #204 from epugh/add_openvex_support
add c75f41bc1 Update VEX file with false positives
add 2b2c4ab9c Merge remote-tracking branch 'upstream/main' into Update-vex
add f84b24f5c Use the CycloneDX version, not OpenVex version
add c37e54cb7 Merge remote-tracking branch 'upstream/main' into Update-vex
add 9f1690dc5 Merge remote-tracking branch 'upstream/main' into Update-vex
add defafdc5a Convert older json content into our vex statement markdown.
Expanded versions to be accurate.
add 9e6d39f10 Filter out shaded code that doesn't actually ship. It
conflicts between our licenses listing and what syft finds and is a false
positive.
add d6ff765b3 Update dependencies napping for new jars.
new 91c0231e8 Merge pull request #173 from apache/Update-vex
The 1 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails. The revisions
listed as "add" were already present in the repository and have only
been added to this reference.
Summary of changes:
content/solr/vex/2026-07-18-cve-2025-48734.md | 18 +++++++++++
content/solr/vex/2026-07-18-cve-2026-33870.md | 22 ++++++++++++++
content/solr/vex/2026-07-18-ghsa-72hv-8253-57qq.md | 18 +++++++++++
plugins/vex/regenerate_dependency_mappings.py | 26 ++++++++++++++--
plugins/vex/solr-dependency-versions.json | 35 ++++++++++++++++++----
5 files changed, 110 insertions(+), 9 deletions(-)
create mode 100644 content/solr/vex/2026-07-18-cve-2025-48734.md
create mode 100644 content/solr/vex/2026-07-18-cve-2026-33870.md
create mode 100644 content/solr/vex/2026-07-18-ghsa-72hv-8253-57qq.md
