{"@context":"https://spdx.org/rdf/3.0.1/spdx-context.jsonld","@graph":[{"type":"CreationInfo","@id":"_:CreationInfo0","created":"2011-04-05T23:00:00Z","createdBy":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/agent/OpenEmbedded"],"createdUsing":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/tool/oe-spdx-creator_1_0"],"specVersion":"3.0.1"},{"type":"CreationInfo","@id":"_:CreationInfo1","created":"2025-07-30T21:31:58Z","createdBy":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/agent/OpenEmbedded"],"createdUsing":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/tool/oe-spdx-creator_1_0"],"specVersion":"3.0.1"},{"type":"Organization","spdxId":"http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/agent/OpenEmbedded","creationInfo":"_:CreationInfo0","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias"}],"name":"OpenEmbedded"},{"type":"Tool","spdxId":"http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/tool/oe-spdx-creator_1_0","creationInfo":"_:CreationInfo0","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias"}],"name":"oe-spdx-creator 1.0"},{"type":"build_Build","spdxId":"http://spdx.org/spdxdocs/python3-pip-c9d94f59-6e7b-5717-ab06-2f64e29f3508/b84062a98d0a65b616ccace3f6faebaf52f8c313aacc0c5f7dcaacfa441e5128/build/recipe","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/cc4587c3ac07cb2790833920aa090106a93b9ad52708072e6a923d741ffba883/python3-pip/UNIHASH/build/recipe"}],"name":"python3-pip:do_create_spdx:recipe","build_buildType":"http://openembedded.org/bitbake/do_create_spdx/recipe"},{"type":"SpdxDocument","spdxId":"http://spdx.org/spdxdocs/python3-pip-c9d94f59-6e7b-5717-ab06-2f64e29f3508/b84062a98d0a65b616ccace3f6faebaf52f8c313aacc0c5f7dcaacfa441e5128/document/recipe-python3-pip","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/doc/python3-pip/recipe-python3-pip/python3-pip/UNIHASH/document/recipe-python3-pip","https://rdf.openembedded.org/spdx/3.0/link-name":"cc4587c3ac07cb2790833920aa090106a93b9ad52708072e6a923d741ffba883"}],"name":"recipe-python3-pip","profileConformance":["build","core","security","simpleLicensing","software"],"rootElement":["http://spdx.org/spdxdocs/python3-pip-c9d94f59-6e7b-5717-ab06-2f64e29f3508/b84062a98d0a65b616ccace3f6faebaf52f8c313aacc0c5f7dcaacfa441e5128/build/recipe"]},{"type":"simplelicensing_LicenseExpression","spdxId":"http://spdx.org/spdxdocs/python3-pip-c9d94f59-6e7b-5717-ab06-2f64e29f3508/b84062a98d0a65b616ccace3f6faebaf52f8c313aacc0c5f7dcaacfa441e5128/license/3_27_0/MIT_AND_Apache-2_0_AND_MPL-2_0_AND_LGPL-2_1-only_AND_BSD-3-Clause_AND_PSF-2_0_AND_BSD-2-Clause","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/cc4587c3ac07cb2790833920aa090106a93b9ad52708072e6a923d741ffba883/python3-pip/UNIHASH/license/3_27_0/MIT_AND_Apache-2_0_AND_MPL-2_0_AND_LGPL-2_1-only_AND_BSD-3-Clause_AND_PSF-2_0_AND_BSD-2-Clause"}],"simplelicensing_licenseExpression":"MIT AND Apache-2.0 AND MPL-2.0 AND LGPL-2.1-only AND BSD-3-Clause AND PSF-2.0 AND BSD-2-Clause","simplelicensing_licenseListVersion":"3.27.0"},{"type":"LifecycleScopedRelationship","spdxId":"http://spdx.org/spdxdocs/python3-pip-c9d94f59-6e7b-5717-ab06-2f64e29f3508/b84062a98d0a65b616ccace3f6faebaf52f8c313aacc0c5f7dcaacfa441e5128/relationship/2c9947fa9e06f9d6f74f79bb57ffdb2f","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/cc4587c3ac07cb2790833920aa090106a93b9ad52708072e6a923d741ffba883/python3-pip/UNIHASH/relationship/2c9947fa9e06f9d6f74f79bb57ffdb2f"}],"from":"http://spdx.org/spdxdocs/python3-pip-c9d94f59-6e7b-5717-ab06-2f64e29f3508/b84062a98d0a65b616ccace3f6faebaf52f8c313aacc0c5f7dcaacfa441e5128/build/recipe","relationshipType":"dependsOn","to":["http://spdxdocs.org/openembedded-alias/by-doc-hash/135d465a523919ff8bf03e11ab4280c2d9625fd876d728639a461a41e43976de/gcc-runtime/UNIHASH/build/recipe","http://spdxdocs.org/openembedded-alias/by-doc-hash/19ddad2b3aef0267507680343c00e6d41c4936c7d03ed8803968a155d98c2173/python3-setuptools-native/UNIHASH/build/recipe","http://spdxdocs.org/openembedded-alias/by-doc-hash/3e29235a751973985b5f0984345424bf6e8ac4cfb26fcf5e1c7d8630cd537f9f/python3-wheel-native/UNIHASH/build/recipe","http://spdxdocs.org/openembedded-alias/by-doc-hash/550224a5c31dee8806f01d11d3205aa1c52d87041da5b284c812badc09cd6531/python3-build-native/UNIHASH/build/recipe","http://spdxdocs.org/openembedded-alias/by-doc-hash/601dbac7faf52a0b8ac4965ad1b2aec1ac35552dcdb10e0c0cd36e6dfedfebad/python3-installer-native/UNIHASH/build/recipe","http://spdxdocs.org/openembedded-alias/by-doc-hash/8bcc50109a89a2a5b45d13a5cd9a3fb7e276afd2bf762de4772a02f224c2f6bf/glibc/UNIHASH/build/recipe","http://spdxdocs.org/openembedded-alias/by-doc-hash/a99e029532bd32332b3abbc83f6448bff7b86a18c436c4d2304c17282c332d40/python3-native/UNIHASH/build/recipe","http://spdxdocs.org/openembedded-alias/by-doc-hash/bbdd8d771d43ab958fdc500fc604f5c5c73ee12ef0eb9118668516ac3a42ea7a/gcc-cross-aarch64/UNIHASH/build/recipe","http://spdxdocs.org/openembedded-alias/by-doc-hash/d73dd1a97c4617bb9be9c70477075b087e1f35b25dbf1e12142a0cd323a05241/python3/UNIHASH/build/recipe"],"scope":"build"},{"type":"LifecycleScopedRelationship","spdxId":"http://spdx.org/spdxdocs/python3-pip-c9d94f59-6e7b-5717-ab06-2f64e29f3508/b84062a98d0a65b616ccace3f6faebaf52f8c313aacc0c5f7dcaacfa441e5128/relationship/85882f5116abe16a6d45c73a2d4a3cbc","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/cc4587c3ac07cb2790833920aa090106a93b9ad52708072e6a923d741ffba883/python3-pip/UNIHASH/relationship/85882f5116abe16a6d45c73a2d4a3cbc"}],"from":"http://spdx.org/spdxdocs/python3-pip-c9d94f59-6e7b-5717-ab06-2f64e29f3508/b84062a98d0a65b616ccace3f6faebaf52f8c313aacc0c5f7dcaacfa441e5128/build/recipe","relationshipType":"hasInput","to":["http://spdx.org/spdxdocs/python3-pip-c9d94f59-6e7b-5717-ab06-2f64e29f3508/b84062a98d0a65b616ccace3f6faebaf52f8c313aacc0c5f7dcaacfa441e5128/source/1","http://spdx.org/spdxdocs/python3-pip-c9d94f59-6e7b-5717-ab06-2f64e29f3508/b84062a98d0a65b616ccace3f6faebaf52f8c313aacc0c5f7dcaacfa441e5128/source/2","http://spdx.org/spdxdocs/python3-pip-c9d94f59-6e7b-5717-ab06-2f64e29f3508/b84062a98d0a65b616ccace3f6faebaf52f8c313aacc0c5f7dcaacfa441e5128/source/3"],"scope":"build"},{"type":"Relationship","spdxId":"http://spdx.org/spdxdocs/python3-pip-c9d94f59-6e7b-5717-ab06-2f64e29f3508/b84062a98d0a65b616ccace3f6faebaf52f8c313aacc0c5f7dcaacfa441e5128/relationship/c06a882ba8220b06979c71a19771d93f","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/cc4587c3ac07cb2790833920aa090106a93b9ad52708072e6a923d741ffba883/python3-pip/UNIHASH/relationship/c06a882ba8220b06979c71a19771d93f"}],"from":"http://spdx.org/spdxdocs/python3-pip-c9d94f59-6e7b-5717-ab06-2f64e29f3508/b84062a98d0a65b616ccace3f6faebaf52f8c313aacc0c5f7dcaacfa441e5128/source/2","relationshipType":"hasDeclaredLicense","to":["http://spdxdocs.org/openembedded-alias/by-doc-hash/cc4587c3ac07cb2790833920aa090106a93b9ad52708072e6a923d741ffba883/python3-pip/UNIHASH/license/3_27_0/MIT_AND_Apache-2_0_AND_MPL-2_0_AND_LGPL-2_1-only_AND_BSD-3-Clause_AND_PSF-2_0_AND_BSD-2-Clause"]},{"type":"Relationship","spdxId":"http://spdx.org/spdxdocs/python3-pip-c9d94f59-6e7b-5717-ab06-2f64e29f3508/b84062a98d0a65b616ccace3f6faebaf52f8c313aacc0c5f7dcaacfa441e5128/relationship/e523e7b44ea9455f985693b11e881ab3","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/cc4587c3ac07cb2790833920aa090106a93b9ad52708072e6a923d741ffba883/python3-pip/UNIHASH/relationship/e523e7b44ea9455f985693b11e881ab3"}],"from":"http://spdx.org/spdxdocs/python3-pip-c9d94f59-6e7b-5717-ab06-2f64e29f3508/b84062a98d0a65b616ccace3f6faebaf52f8c313aacc0c5f7dcaacfa441e5128/source/1","relationshipType":"hasDeclaredLicense","to":["http://spdxdocs.org/openembedded-alias/by-doc-hash/cc4587c3ac07cb2790833920aa090106a93b9ad52708072e6a923d741ffba883/python3-pip/UNIHASH/license/3_27_0/MIT_AND_Apache-2_0_AND_MPL-2_0_AND_LGPL-2_1-only_AND_BSD-3-Clause_AND_PSF-2_0_AND_BSD-2-Clause"]},{"type":"Relationship","spdxId":"http://spdx.org/spdxdocs/python3-pip-c9d94f59-6e7b-5717-ab06-2f64e29f3508/b84062a98d0a65b616ccace3f6faebaf52f8c313aacc0c5f7dcaacfa441e5128/relationship/ff40696b3eb27dd9224d2847dd0bd501","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/cc4587c3ac07cb2790833920aa090106a93b9ad52708072e6a923d741ffba883/python3-pip/UNIHASH/relationship/ff40696b3eb27dd9224d2847dd0bd501"}],"from":"http://spdx.org/spdxdocs/python3-pip-c9d94f59-6e7b-5717-ab06-2f64e29f3508/b84062a98d0a65b616ccace3f6faebaf52f8c313aacc0c5f7dcaacfa441e5128/source/3","relationshipType":"hasDeclaredLicense","to":["http://spdxdocs.org/openembedded-alias/by-doc-hash/cc4587c3ac07cb2790833920aa090106a93b9ad52708072e6a923d741ffba883/python3-pip/UNIHASH/license/3_27_0/MIT_AND_Apache-2_0_AND_MPL-2_0_AND_LGPL-2_1-only_AND_BSD-3-Clause_AND_PSF-2_0_AND_BSD-2-Clause"]},{"type":"software_Package","spdxId":"http://spdx.org/spdxdocs/python3-pip-c9d94f59-6e7b-5717-ab06-2f64e29f3508/b84062a98d0a65b616ccace3f6faebaf52f8c313aacc0c5f7dcaacfa441e5128/source/1","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/cc4587c3ac07cb2790833920aa090106a93b9ad52708072e6a923d741ffba883/python3-pip/UNIHASH/source/1"}],"name":"pip-25.2.tar.gz","verifiedUsing":[{"type":"Hash","algorithm":"sha256","hashValue":"578283f006390f85bb6282dffb876454593d637f5d1be494b5202ce4877e71f2"}],"software_primaryPurpose":"source","software_downloadLocation":"https://files.pythonhosted.org/packages/source/p/pip/pip-25.2.tar.gz"},{"type":"software_File","spdxId":"http://spdx.org/spdxdocs/python3-pip-c9d94f59-6e7b-5717-ab06-2f64e29f3508/b84062a98d0a65b616ccace3f6faebaf52f8c313aacc0c5f7dcaacfa441e5128/source/2","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/cc4587c3ac07cb2790833920aa090106a93b9ad52708072e6a923d741ffba883/python3-pip/UNIHASH/source/2"}],"name":"no_shebang_mangling.patch","verifiedUsing":[{"type":"Hash","algorithm":"sha256","hashValue":"9c05eb8e94e01156d168ca4736d1c2ed3f26e57f660df69826d064ee0e3ce834"}],"software_primaryPurpose":"patch"},{"type":"software_File","spdxId":"http://spdx.org/spdxdocs/python3-pip-c9d94f59-6e7b-5717-ab06-2f64e29f3508/b84062a98d0a65b616ccace3f6faebaf52f8c313aacc0c5f7dcaacfa441e5128/source/3","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/cc4587c3ac07cb2790833920aa090106a93b9ad52708072e6a923d741ffba883/python3-pip/UNIHASH/source/3"}],"name":"CVE-2026-1703.patch","verifiedUsing":[{"type":"Hash","algorithm":"sha256","hashValue":"21013a60f356ae076a01d161868be9a051ca228526d6fd8763f3592c473fc57d"}],"software_primaryPurpose":"patch"},{"type":"security_Vulnerability","spdxId":"http://spdx.org/spdxdocs/python3-pip-c9d94f59-6e7b-5717-ab06-2f64e29f3508/b84062a98d0a65b616ccace3f6faebaf52f8c313aacc0c5f7dcaacfa441e5128/vulnerability/CVE-2026-1703","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/cc4587c3ac07cb2790833920aa090106a93b9ad52708072e6a923d741ffba883/python3-pip/UNIHASH/vulnerability/CVE-2026-1703"}],"externalIdentifier":[{"type":"ExternalIdentifier","externalIdentifierType":"cve","identifier":"CVE-2026-1703","identifierLocator":["https://cveawg.mitre.org/api/cve/CVE-2026-1703","https://www.cve.org/CVERecord?id=CVE-2026-1703"]}]}]}