{"@context":"https://spdx.org/rdf/3.0.1/spdx-context.jsonld","@graph":[{"type":"CreationInfo","@id":"_:CreationInfo0","created":"2011-04-05T23:00:00Z","createdBy":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/agent/OpenEmbedded"],"createdUsing":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/tool/oe-spdx-creator_1_0"],"specVersion":"3.0.1"},{"type":"CreationInfo","@id":"_:CreationInfo1","created":"2011-04-05T23:00:00Z","createdBy":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/agent/OpenEmbedded"],"createdUsing":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/tool/oe-spdx-creator_1_0"],"specVersion":"3.0.1"},{"type":"Organization","spdxId":"http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/agent/OpenEmbedded","creationInfo":"_:CreationInfo0","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias"}],"name":"OpenEmbedded"},{"type":"Tool","spdxId":"http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/tool/oe-spdx-creator_1_0","creationInfo":"_:CreationInfo0","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias"}],"name":"oe-spdx-creator 1.0"},{"type":"SpdxDocument","spdxId":"http://spdx.org/spdxdocs/libsoup-a2c99de5-c804-53f7-a9fd-c0b6804ddabd/6c274fc7341d20f979b883460261d5adc2e18cb8688b7fe0f8cb0963c10daae1/document/static-libsoup","profileConformance":["build","core","security","simpleLicensing","software"],"rootElement":["http://spdx.org/spdxdocs/libsoup-a2c99de5-c804-53f7-a9fd-c0b6804ddabd/6c274fc7341d20f979b883460261d5adc2e18cb8688b7fe0f8cb0963c10daae1/recipe/libsoup"],"creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/doc/libsoup/static-libsoup/libsoup/UNIHASH/document/static-libsoup","https://rdf.openembedded.org/spdx/3.0/link-name":"7b10c9c4379870f6f4f9d7720c0348945a4444aba433ac527280eaa844ca15df"}],"name":"static-libsoup"},{"type":"software_File","spdxId":"http://spdx.org/spdxdocs/libsoup-a2c99de5-c804-53f7-a9fd-c0b6804ddabd/6c274fc7341d20f979b883460261d5adc2e18cb8688b7fe0f8cb0963c10daae1/patch/0/CVE-2025-32049-1_patch","software_primaryPurpose":"patch","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/7b10c9c4379870f6f4f9d7720c0348945a4444aba433ac527280eaa844ca15df/libsoup/UNIHASH/patch/0/CVE-2025-32049-1_patch"}],"name":"CVE-2025-32049-1.patch","verifiedUsing":[{"type":"Hash","algorithm":"sha256","hashValue":"55a253fe8fcbed017213ce3836787cee87df59f324872abecd51c436418325b1"}]},{"type":"software_File","spdxId":"http://spdx.org/spdxdocs/libsoup-a2c99de5-c804-53f7-a9fd-c0b6804ddabd/6c274fc7341d20f979b883460261d5adc2e18cb8688b7fe0f8cb0963c10daae1/patch/0/CVE-2026-1539_patch","software_primaryPurpose":"patch","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/7b10c9c4379870f6f4f9d7720c0348945a4444aba433ac527280eaa844ca15df/libsoup/UNIHASH/patch/0/CVE-2026-1539_patch"}],"name":"CVE-2026-1539.patch","verifiedUsing":[{"type":"Hash","algorithm":"sha256","hashValue":"527a1502b1afb43f9338a810c9aa3222b2538dfb6a78f6b5b3ac0a19b221cccb"}]},{"type":"software_File","spdxId":"http://spdx.org/spdxdocs/libsoup-a2c99de5-c804-53f7-a9fd-c0b6804ddabd/6c274fc7341d20f979b883460261d5adc2e18cb8688b7fe0f8cb0963c10daae1/patch/0/CVE-2026-2708_patch","software_primaryPurpose":"patch","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/7b10c9c4379870f6f4f9d7720c0348945a4444aba433ac527280eaa844ca15df/libsoup/UNIHASH/patch/0/CVE-2026-2708_patch"}],"name":"CVE-2026-2708.patch","verifiedUsing":[{"type":"Hash","algorithm":"sha256","hashValue":"bb784bae1caaecfdaa8a27f3e256f6d6be9f73ca74c78857677462d62b538f6f"}]},{"type":"software_File","spdxId":"http://spdx.org/spdxdocs/libsoup-a2c99de5-c804-53f7-a9fd-c0b6804ddabd/6c274fc7341d20f979b883460261d5adc2e18cb8688b7fe0f8cb0963c10daae1/patch/0/CVE-2026-5119_patch","software_primaryPurpose":"patch","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/7b10c9c4379870f6f4f9d7720c0348945a4444aba433ac527280eaa844ca15df/libsoup/UNIHASH/patch/0/CVE-2026-5119_patch"}],"name":"CVE-2026-5119.patch","verifiedUsing":[{"type":"Hash","algorithm":"sha256","hashValue":"bb47f5e4ef3afabe3f9b834936fc24f66f455a9f3796cf36a364376f1b68ab3c"}]},{"type":"software_File","spdxId":"http://spdx.org/spdxdocs/libsoup-a2c99de5-c804-53f7-a9fd-c0b6804ddabd/6c274fc7341d20f979b883460261d5adc2e18cb8688b7fe0f8cb0963c10daae1/patch/1/CVE-2025-32049-2_patch","software_primaryPurpose":"patch","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/7b10c9c4379870f6f4f9d7720c0348945a4444aba433ac527280eaa844ca15df/libsoup/UNIHASH/patch/1/CVE-2025-32049-2_patch"}],"name":"CVE-2025-32049-2.patch","verifiedUsing":[{"type":"Hash","algorithm":"sha256","hashValue":"e6012efdd85c3ae454161a9b1a2df7691a72dcf2d40e090cd576d39af72c186c"}]},{"type":"software_File","spdxId":"http://spdx.org/spdxdocs/libsoup-a2c99de5-c804-53f7-a9fd-c0b6804ddabd/6c274fc7341d20f979b883460261d5adc2e18cb8688b7fe0f8cb0963c10daae1/patch/2/CVE-2025-32049-3_patch","software_primaryPurpose":"patch","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/7b10c9c4379870f6f4f9d7720c0348945a4444aba433ac527280eaa844ca15df/libsoup/UNIHASH/patch/2/CVE-2025-32049-3_patch"}],"name":"CVE-2025-32049-3.patch","verifiedUsing":[{"type":"Hash","algorithm":"sha256","hashValue":"330fdd485e5c3e53b4a472249e21db7eeb44735697cb2d9e3b9520f7b0f97988"}]},{"type":"software_File","spdxId":"http://spdx.org/spdxdocs/libsoup-a2c99de5-c804-53f7-a9fd-c0b6804ddabd/6c274fc7341d20f979b883460261d5adc2e18cb8688b7fe0f8cb0963c10daae1/patch/3/CVE-2025-32049-4_patch","software_primaryPurpose":"patch","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/7b10c9c4379870f6f4f9d7720c0348945a4444aba433ac527280eaa844ca15df/libsoup/UNIHASH/patch/3/CVE-2025-32049-4_patch"}],"name":"CVE-2025-32049-4.patch","verifiedUsing":[{"type":"Hash","algorithm":"sha256","hashValue":"d6c1b818e34cb00018e7d1f2011ed0bca4064cf1d38f1ffc175eec537f625437"}]},{"type":"software_Package","spdxId":"http://spdx.org/spdxdocs/libsoup-a2c99de5-c804-53f7-a9fd-c0b6804ddabd/6c274fc7341d20f979b883460261d5adc2e18cb8688b7fe0f8cb0963c10daae1/recipe/libsoup","software_homePage":"https://wiki.gnome.org/Projects/libsoup","software_packageUrl":"pkg:yocto/core/libsoup@3.6.6","software_packageVersion":"3.6.6","software_sourceInfo":"{\"FILENAME\":\"libsoup_3.6.6.bb\",\"FILE_LAYERNAME\":\"core\"}","software_primaryPurpose":"specification","creationInfo":"_:CreationInfo1","description":"libsoup is an HTTP client/server library for GNOME. It uses GObjects and the glib main loop, to integrate well with GNOME applications.","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/7b10c9c4379870f6f4f9d7720c0348945a4444aba433ac527280eaa844ca15df/libsoup/UNIHASH/recipe/libsoup"}],"externalIdentifier":[{"type":"ExternalIdentifier","externalIdentifierType":"packageUrl","identifier":"pkg:yocto/core/libsoup@3.6.6"},{"type":"ExternalIdentifier","externalIdentifierType":"cpe23","identifier":"cpe:2.3:*:*:libsoup:3.6.6:*:*:*:*:*:*:*"}],"name":"libsoup","summary":"An HTTP library implementation in C"},{"type":"LifecycleScopedRelationship","spdxId":"http://spdx.org/spdxdocs/libsoup-a2c99de5-c804-53f7-a9fd-c0b6804ddabd/6c274fc7341d20f979b883460261d5adc2e18cb8688b7fe0f8cb0963c10daae1/relationship/2729542aa6e34e6f30c9bcd8212a9556","scope":"build","from":"http://spdx.org/spdxdocs/libsoup-a2c99de5-c804-53f7-a9fd-c0b6804ddabd/6c274fc7341d20f979b883460261d5adc2e18cb8688b7fe0f8cb0963c10daae1/recipe/libsoup","relationshipType":"dependsOn","to":["http://spdxdocs.org/openembedded-alias/by-doc-hash/26061b944b014495c1af6bf34f40a03bcca38394e493003f19eaf6e50becc574/python3-native/UNIHASH/recipe/python3-native","http://spdxdocs.org/openembedded-alias/by-doc-hash/26758da77d1d1dc9bafabd025d1d78929f01eddb205f7e20b1e79b18352db4d1/meson-native/UNIHASH/recipe/meson-native","http://spdxdocs.org/openembedded-alias/by-doc-hash/2d06dc5ba48893c07b2d514d44eaac926ae01d6e22a9beba10fe8f9509b755bd/ninja-native/UNIHASH/recipe/ninja-native","http://spdxdocs.org/openembedded-alias/by-doc-hash/30d149c4578107d6aac0cc5c02d08f0c2c123ac6405948ec073287cf06cb4560/gobject-introspection-native/UNIHASH/recipe/gobject-introspection-native","http://spdxdocs.org/openembedded-alias/by-doc-hash/3acf7ea638ca7d5039f3a626135ecdc130081f34c542a4ee75a79e9cba629f4c/qemu-native/UNIHASH/recipe/qemu-native","http://spdxdocs.org/openembedded-alias/by-doc-hash/3ebd71482b865703ba3bdcc17caf4f0eaa7910d4484b82d2cdd9141e9596411a/glib-2.0-native/UNIHASH/recipe/glib-2_0-native","http://spdxdocs.org/openembedded-alias/by-doc-hash/5157b407167562dcb6db9dc5696cd8c5c18250d6ac4323c3e3e9648ad3e2ce2a/libpsl/UNIHASH/recipe/libpsl","http://spdxdocs.org/openembedded-alias/by-doc-hash/7ee93593525b2a48ba5544df20fad32730f357232c4c1229f6aa27265c1a81b5/libxml2/UNIHASH/recipe/libxml2","http://spdxdocs.org/openembedded-alias/by-doc-hash/950491d6140ce139503d28d54d2643ecf5e80ec7ad1c22522f28be9b833c70e3/gobject-introspection/UNIHASH/recipe/gobject-introspection","http://spdxdocs.org/openembedded-alias/by-doc-hash/98a5d732d82f57e7d5253409b179cafb7903e70f173b0c414093354844f783b7/nghttp2/UNIHASH/recipe/nghttp2","http://spdxdocs.org/openembedded-alias/by-doc-hash/a1b7df3bb83b28b57ecabfa7ea24af08c8f009cdaf0eddaeda1550e20b8e7aad/gcc-cross-aarch64/UNIHASH/recipe/gcc-cross-aarch64","http://spdxdocs.org/openembedded-alias/by-doc-hash/c58c168c23f1f2e6fcc9b0baefff221e5e69465f454152fa33c05f569ef3d07a/glibc/UNIHASH/recipe/glibc","http://spdxdocs.org/openembedded-alias/by-doc-hash/cc23546d02c5ca12079b8a24a4d66cfc41e822e73ee0cc1ef8314e29af023115/glib-2.0/UNIHASH/recipe/glib-2_0","http://spdxdocs.org/openembedded-alias/by-doc-hash/cc8abfc2062170a4ad2993c0179fe1c535f83ea93f98832d84d2ed697b538319/vala/UNIHASH/recipe/vala","http://spdxdocs.org/openembedded-alias/by-doc-hash/deeb05099cf633989f01ae082a5373502a878b6bdf917e3bf199c31fe095bd3a/vala-native/UNIHASH/recipe/vala-native","http://spdxdocs.org/openembedded-alias/by-doc-hash/e566e9d50764647375730ed82582046eed4c1855ce7b3073b557fbef31ccac85/gcc-runtime/UNIHASH/recipe/gcc-runtime","http://spdxdocs.org/openembedded-alias/by-doc-hash/ebc2a99b882e52b9d42f3f9b02ecee6d79ded3f2b0819a7f1746f56bb2880c6c/pkgconf-native/UNIHASH/recipe/pkgconf-native","http://spdxdocs.org/openembedded-alias/by-doc-hash/fb6b95bbd49cbdbc0cb37410b5edafb9ce09729ba8bfc83f07c4a5c3162af2fc/sqlite3/UNIHASH/recipe/sqlite3","http://spdxdocs.org/openembedded-alias/by-doc-hash/fba1fb15eb4176eb218698016ac1b55d7bd459a61534283b5a253a2fdbea8f6d/gettext-native/UNIHASH/recipe/gettext-native"],"creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/7b10c9c4379870f6f4f9d7720c0348945a4444aba433ac527280eaa844ca15df/libsoup/UNIHASH/relationship/2729542aa6e34e6f30c9bcd8212a9556"}]},{"type":"Relationship","spdxId":"http://spdx.org/spdxdocs/libsoup-a2c99de5-c804-53f7-a9fd-c0b6804ddabd/6c274fc7341d20f979b883460261d5adc2e18cb8688b7fe0f8cb0963c10daae1/relationship/63b91a285b8aca3bd696779430299d57","from":"http://spdx.org/spdxdocs/libsoup-a2c99de5-c804-53f7-a9fd-c0b6804ddabd/6c274fc7341d20f979b883460261d5adc2e18cb8688b7fe0f8cb0963c10daae1/recipe/libsoup","relationshipType":"hasAssociatedVulnerability","to":["http://spdx.org/spdxdocs/libsoup-a2c99de5-c804-53f7-a9fd-c0b6804ddabd/6c274fc7341d20f979b883460261d5adc2e18cb8688b7fe0f8cb0963c10daae1/vulnerability/CVE-2025-32049","http://spdx.org/spdxdocs/libsoup-a2c99de5-c804-53f7-a9fd-c0b6804ddabd/6c274fc7341d20f979b883460261d5adc2e18cb8688b7fe0f8cb0963c10daae1/vulnerability/CVE-2026-1539","http://spdx.org/spdxdocs/libsoup-a2c99de5-c804-53f7-a9fd-c0b6804ddabd/6c274fc7341d20f979b883460261d5adc2e18cb8688b7fe0f8cb0963c10daae1/vulnerability/CVE-2026-2708","http://spdx.org/spdxdocs/libsoup-a2c99de5-c804-53f7-a9fd-c0b6804ddabd/6c274fc7341d20f979b883460261d5adc2e18cb8688b7fe0f8cb0963c10daae1/vulnerability/CVE-2026-5119"],"creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/7b10c9c4379870f6f4f9d7720c0348945a4444aba433ac527280eaa844ca15df/libsoup/UNIHASH/relationship/63b91a285b8aca3bd696779430299d57"}]},{"type":"LifecycleScopedRelationship","spdxId":"http://spdx.org/spdxdocs/libsoup-a2c99de5-c804-53f7-a9fd-c0b6804ddabd/6c274fc7341d20f979b883460261d5adc2e18cb8688b7fe0f8cb0963c10daae1/relationship/942306bf85b19e1c6e1fea0ec361c560","scope":"build","from":"http://spdx.org/spdxdocs/libsoup-a2c99de5-c804-53f7-a9fd-c0b6804ddabd/6c274fc7341d20f979b883460261d5adc2e18cb8688b7fe0f8cb0963c10daae1/vex-fixed/012dffafa317c94c72c2a628b325946b","relationshipType":"patchedBy","to":["http://spdx.org/spdxdocs/libsoup-a2c99de5-c804-53f7-a9fd-c0b6804ddabd/6c274fc7341d20f979b883460261d5adc2e18cb8688b7fe0f8cb0963c10daae1/patch/0/CVE-2025-32049-1_patch","http://spdx.org/spdxdocs/libsoup-a2c99de5-c804-53f7-a9fd-c0b6804ddabd/6c274fc7341d20f979b883460261d5adc2e18cb8688b7fe0f8cb0963c10daae1/patch/1/CVE-2025-32049-2_patch","http://spdx.org/spdxdocs/libsoup-a2c99de5-c804-53f7-a9fd-c0b6804ddabd/6c274fc7341d20f979b883460261d5adc2e18cb8688b7fe0f8cb0963c10daae1/patch/2/CVE-2025-32049-3_patch","http://spdx.org/spdxdocs/libsoup-a2c99de5-c804-53f7-a9fd-c0b6804ddabd/6c274fc7341d20f979b883460261d5adc2e18cb8688b7fe0f8cb0963c10daae1/patch/3/CVE-2025-32049-4_patch"],"creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/7b10c9c4379870f6f4f9d7720c0348945a4444aba433ac527280eaa844ca15df/libsoup/UNIHASH/relationship/942306bf85b19e1c6e1fea0ec361c560"}]},{"type":"LifecycleScopedRelationship","spdxId":"http://spdx.org/spdxdocs/libsoup-a2c99de5-c804-53f7-a9fd-c0b6804ddabd/6c274fc7341d20f979b883460261d5adc2e18cb8688b7fe0f8cb0963c10daae1/relationship/9a206d3fa021e88acdeb11f2bbf340a4","scope":"build","from":"http://spdx.org/spdxdocs/libsoup-a2c99de5-c804-53f7-a9fd-c0b6804ddabd/6c274fc7341d20f979b883460261d5adc2e18cb8688b7fe0f8cb0963c10daae1/vex-fixed/150f1beb1d1cb0232174afdc80d0d915","relationshipType":"patchedBy","to":["http://spdx.org/spdxdocs/libsoup-a2c99de5-c804-53f7-a9fd-c0b6804ddabd/6c274fc7341d20f979b883460261d5adc2e18cb8688b7fe0f8cb0963c10daae1/patch/0/CVE-2026-1539_patch"],"creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/7b10c9c4379870f6f4f9d7720c0348945a4444aba433ac527280eaa844ca15df/libsoup/UNIHASH/relationship/9a206d3fa021e88acdeb11f2bbf340a4"}]},{"type":"LifecycleScopedRelationship","spdxId":"http://spdx.org/spdxdocs/libsoup-a2c99de5-c804-53f7-a9fd-c0b6804ddabd/6c274fc7341d20f979b883460261d5adc2e18cb8688b7fe0f8cb0963c10daae1/relationship/d15ddf9e99eabfc5756c393fe159e0f1","scope":"build","from":"http://spdx.org/spdxdocs/libsoup-a2c99de5-c804-53f7-a9fd-c0b6804ddabd/6c274fc7341d20f979b883460261d5adc2e18cb8688b7fe0f8cb0963c10daae1/vex-fixed/81cb1d86cfc4128889af975c5d54a518","relationshipType":"patchedBy","to":["http://spdx.org/spdxdocs/libsoup-a2c99de5-c804-53f7-a9fd-c0b6804ddabd/6c274fc7341d20f979b883460261d5adc2e18cb8688b7fe0f8cb0963c10daae1/patch/0/CVE-2026-2708_patch"],"creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/7b10c9c4379870f6f4f9d7720c0348945a4444aba433ac527280eaa844ca15df/libsoup/UNIHASH/relationship/d15ddf9e99eabfc5756c393fe159e0f1"}]},{"type":"LifecycleScopedRelationship","spdxId":"http://spdx.org/spdxdocs/libsoup-a2c99de5-c804-53f7-a9fd-c0b6804ddabd/6c274fc7341d20f979b883460261d5adc2e18cb8688b7fe0f8cb0963c10daae1/relationship/eede47faf7a990adba4c6bbeec4f5e9b","scope":"build","from":"http://spdx.org/spdxdocs/libsoup-a2c99de5-c804-53f7-a9fd-c0b6804ddabd/6c274fc7341d20f979b883460261d5adc2e18cb8688b7fe0f8cb0963c10daae1/vex-fixed/2ddd2e63a10af76da043c24d558f6c3b","relationshipType":"patchedBy","to":["http://spdx.org/spdxdocs/libsoup-a2c99de5-c804-53f7-a9fd-c0b6804ddabd/6c274fc7341d20f979b883460261d5adc2e18cb8688b7fe0f8cb0963c10daae1/patch/0/CVE-2026-5119_patch"],"creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/7b10c9c4379870f6f4f9d7720c0348945a4444aba433ac527280eaa844ca15df/libsoup/UNIHASH/relationship/eede47faf7a990adba4c6bbeec4f5e9b"}]},{"type":"security_VexFixedVulnAssessmentRelationship","spdxId":"http://spdx.org/spdxdocs/libsoup-a2c99de5-c804-53f7-a9fd-c0b6804ddabd/6c274fc7341d20f979b883460261d5adc2e18cb8688b7fe0f8cb0963c10daae1/vex-fixed/012dffafa317c94c72c2a628b325946b","security_statusNotes":"fix-file-included","security_vexVersion":"1.0.0","from":"http://spdx.org/spdxdocs/libsoup-a2c99de5-c804-53f7-a9fd-c0b6804ddabd/6c274fc7341d20f979b883460261d5adc2e18cb8688b7fe0f8cb0963c10daae1/vulnerability/CVE-2025-32049","relationshipType":"fixedIn","to":["http://spdx.org/spdxdocs/libsoup-a2c99de5-c804-53f7-a9fd-c0b6804ddabd/6c274fc7341d20f979b883460261d5adc2e18cb8688b7fe0f8cb0963c10daae1/recipe/libsoup"],"creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/7b10c9c4379870f6f4f9d7720c0348945a4444aba433ac527280eaa844ca15df/libsoup/UNIHASH/vex-fixed/012dffafa317c94c72c2a628b325946b"}]},{"type":"security_VexFixedVulnAssessmentRelationship","spdxId":"http://spdx.org/spdxdocs/libsoup-a2c99de5-c804-53f7-a9fd-c0b6804ddabd/6c274fc7341d20f979b883460261d5adc2e18cb8688b7fe0f8cb0963c10daae1/vex-fixed/150f1beb1d1cb0232174afdc80d0d915","security_statusNotes":"fix-file-included","security_vexVersion":"1.0.0","from":"http://spdx.org/spdxdocs/libsoup-a2c99de5-c804-53f7-a9fd-c0b6804ddabd/6c274fc7341d20f979b883460261d5adc2e18cb8688b7fe0f8cb0963c10daae1/vulnerability/CVE-2026-1539","relationshipType":"fixedIn","to":["http://spdx.org/spdxdocs/libsoup-a2c99de5-c804-53f7-a9fd-c0b6804ddabd/6c274fc7341d20f979b883460261d5adc2e18cb8688b7fe0f8cb0963c10daae1/recipe/libsoup"],"creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/7b10c9c4379870f6f4f9d7720c0348945a4444aba433ac527280eaa844ca15df/libsoup/UNIHASH/vex-fixed/150f1beb1d1cb0232174afdc80d0d915"}]},{"type":"security_VexFixedVulnAssessmentRelationship","spdxId":"http://spdx.org/spdxdocs/libsoup-a2c99de5-c804-53f7-a9fd-c0b6804ddabd/6c274fc7341d20f979b883460261d5adc2e18cb8688b7fe0f8cb0963c10daae1/vex-fixed/2ddd2e63a10af76da043c24d558f6c3b","security_statusNotes":"fix-file-included","security_vexVersion":"1.0.0","from":"http://spdx.org/spdxdocs/libsoup-a2c99de5-c804-53f7-a9fd-c0b6804ddabd/6c274fc7341d20f979b883460261d5adc2e18cb8688b7fe0f8cb0963c10daae1/vulnerability/CVE-2026-5119","relationshipType":"fixedIn","to":["http://spdx.org/spdxdocs/libsoup-a2c99de5-c804-53f7-a9fd-c0b6804ddabd/6c274fc7341d20f979b883460261d5adc2e18cb8688b7fe0f8cb0963c10daae1/recipe/libsoup"],"creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/7b10c9c4379870f6f4f9d7720c0348945a4444aba433ac527280eaa844ca15df/libsoup/UNIHASH/vex-fixed/2ddd2e63a10af76da043c24d558f6c3b"}]},{"type":"security_VexFixedVulnAssessmentRelationship","spdxId":"http://spdx.org/spdxdocs/libsoup-a2c99de5-c804-53f7-a9fd-c0b6804ddabd/6c274fc7341d20f979b883460261d5adc2e18cb8688b7fe0f8cb0963c10daae1/vex-fixed/81cb1d86cfc4128889af975c5d54a518","security_statusNotes":"fix-file-included","security_vexVersion":"1.0.0","from":"http://spdx.org/spdxdocs/libsoup-a2c99de5-c804-53f7-a9fd-c0b6804ddabd/6c274fc7341d20f979b883460261d5adc2e18cb8688b7fe0f8cb0963c10daae1/vulnerability/CVE-2026-2708","relationshipType":"fixedIn","to":["http://spdx.org/spdxdocs/libsoup-a2c99de5-c804-53f7-a9fd-c0b6804ddabd/6c274fc7341d20f979b883460261d5adc2e18cb8688b7fe0f8cb0963c10daae1/recipe/libsoup"],"creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/7b10c9c4379870f6f4f9d7720c0348945a4444aba433ac527280eaa844ca15df/libsoup/UNIHASH/vex-fixed/81cb1d86cfc4128889af975c5d54a518"}]},{"type":"security_Vulnerability","spdxId":"http://spdx.org/spdxdocs/libsoup-a2c99de5-c804-53f7-a9fd-c0b6804ddabd/6c274fc7341d20f979b883460261d5adc2e18cb8688b7fe0f8cb0963c10daae1/vulnerability/CVE-2025-32049","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/7b10c9c4379870f6f4f9d7720c0348945a4444aba433ac527280eaa844ca15df/libsoup/UNIHASH/vulnerability/CVE-2025-32049"}],"externalIdentifier":[{"type":"ExternalIdentifier","externalIdentifierType":"cve","identifier":"CVE-2025-32049","identifierLocator":["https://cveawg.mitre.org/api/cve/CVE-2025-32049","https://www.cve.org/CVERecord?id=CVE-2025-32049"]}]},{"type":"security_Vulnerability","spdxId":"http://spdx.org/spdxdocs/libsoup-a2c99de5-c804-53f7-a9fd-c0b6804ddabd/6c274fc7341d20f979b883460261d5adc2e18cb8688b7fe0f8cb0963c10daae1/vulnerability/CVE-2026-1539","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/7b10c9c4379870f6f4f9d7720c0348945a4444aba433ac527280eaa844ca15df/libsoup/UNIHASH/vulnerability/CVE-2026-1539"}],"externalIdentifier":[{"type":"ExternalIdentifier","externalIdentifierType":"cve","identifier":"CVE-2026-1539","identifierLocator":["https://cveawg.mitre.org/api/cve/CVE-2026-1539","https://www.cve.org/CVERecord?id=CVE-2026-1539"]}]},{"type":"security_Vulnerability","spdxId":"http://spdx.org/spdxdocs/libsoup-a2c99de5-c804-53f7-a9fd-c0b6804ddabd/6c274fc7341d20f979b883460261d5adc2e18cb8688b7fe0f8cb0963c10daae1/vulnerability/CVE-2026-2708","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/7b10c9c4379870f6f4f9d7720c0348945a4444aba433ac527280eaa844ca15df/libsoup/UNIHASH/vulnerability/CVE-2026-2708"}],"externalIdentifier":[{"type":"ExternalIdentifier","externalIdentifierType":"cve","identifier":"CVE-2026-2708","identifierLocator":["https://cveawg.mitre.org/api/cve/CVE-2026-2708","https://www.cve.org/CVERecord?id=CVE-2026-2708"]}]},{"type":"security_Vulnerability","spdxId":"http://spdx.org/spdxdocs/libsoup-a2c99de5-c804-53f7-a9fd-c0b6804ddabd/6c274fc7341d20f979b883460261d5adc2e18cb8688b7fe0f8cb0963c10daae1/vulnerability/CVE-2026-5119","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/7b10c9c4379870f6f4f9d7720c0348945a4444aba433ac527280eaa844ca15df/libsoup/UNIHASH/vulnerability/CVE-2026-5119"}],"externalIdentifier":[{"type":"ExternalIdentifier","externalIdentifierType":"cve","identifier":"CVE-2026-5119","identifierLocator":["https://cveawg.mitre.org/api/cve/CVE-2026-5119","https://www.cve.org/CVERecord?id=CVE-2026-5119"]}]}]}