{ "statementId": "vex::tenant-default::CVE-2024-12345::001", "vulnId": "CVE-2024-12345", "productId": "asset::registry.local/ops/auth", "status": "not_affected", "justification": "Component not present in runtime image.", "issuer": "vendor:example", "affectedPurls": ["pkg:npm/example@1.2.3"], "references": [ { "label": "Analysis report", "url": "https://example.invalid/vex/report/001" } ], "updatedAt": "2025-12-10T00:00:00Z", "etag": "\"vex-001-v1\"" }