{"@context":"https://spdx.org/rdf/3.0.1/spdx-context.jsonld","@graph":[{"type":"CreationInfo","@id":"_:CreationInfo0","created":"2011-04-05T23:00:00Z","createdBy":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/agent/OpenEmbedded"],"createdUsing":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/tool/oe-spdx-creator_1_0"],"specVersion":"3.0.1"},{"type":"CreationInfo","@id":"_:CreationInfo1","created":"2011-04-05T23:00:00Z","createdBy":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/agent/OpenEmbedded"],"createdUsing":["http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/tool/oe-spdx-creator_1_0"],"specVersion":"3.0.1"},{"type":"Organization","spdxId":"http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/agent/OpenEmbedded","creationInfo":"_:CreationInfo0","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias"}],"name":"OpenEmbedded"},{"type":"Tool","spdxId":"http://spdx.org/spdxdocs/bitbake-addba517-4804-5ae3-87c2-0c3a1a5812ba/bitbake/tool/oe-spdx-creator_1_0","creationInfo":"_:CreationInfo0","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias"}],"name":"oe-spdx-creator 1.0"},{"type":"SpdxDocument","spdxId":"http://spdx.org/spdxdocs/perl-native-aa9f976f-9bc4-5078-af02-2cc19e2e0a97/56b6987669ab917ce5fe0ad9e899c40d9144f4d44213ed1e12f2be150f06cbd8/document/static-perl-native","profileConformance":["build","core","security","simpleLicensing","software"],"rootElement":["http://spdx.org/spdxdocs/perl-native-aa9f976f-9bc4-5078-af02-2cc19e2e0a97/56b6987669ab917ce5fe0ad9e899c40d9144f4d44213ed1e12f2be150f06cbd8/recipe/perl-native"],"creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/doc/perl-native/static-perl-native/perl-native/UNIHASH/document/static-perl-native","https://rdf.openembedded.org/spdx/3.0/link-name":"f599f1942770134219afd8640749f2f6e74ac9aeb35739693ef54faa45de7520"}],"name":"static-perl-native"},{"type":"software_Package","spdxId":"http://spdx.org/spdxdocs/perl-native-aa9f976f-9bc4-5078-af02-2cc19e2e0a97/56b6987669ab917ce5fe0ad9e899c40d9144f4d44213ed1e12f2be150f06cbd8/recipe/perl-native","software_homePage":"http://www.perl.org/","software_packageUrl":"pkg:yocto/core/perl@5.42.0","software_packageVersion":"5.42.0","software_sourceInfo":"{\"FILENAME\":\"perl_5.42.0.bb\",\"FILE_LAYERNAME\":\"core\"}","software_primaryPurpose":"specification","creationInfo":"_:CreationInfo1","description":"Perl is a highly capable, feature-rich programming language","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/recipe-extension","https://rdf.openembedded.org/spdx/3.0/is-native":true},{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/f599f1942770134219afd8640749f2f6e74ac9aeb35739693ef54faa45de7520/perl-native/UNIHASH/recipe/perl-native"}],"externalIdentifier":[{"type":"ExternalIdentifier","externalIdentifierType":"packageUrl","identifier":"pkg:yocto/core/perl@5.42.0"},{"type":"ExternalIdentifier","externalIdentifierType":"cpe23","identifier":"cpe:2.3:*:*:perl:5.42.0:*:*:*:*:*:*:*"}],"name":"perl-native","summary":"Perl scripting language"},{"type":"LifecycleScopedRelationship","spdxId":"http://spdx.org/spdxdocs/perl-native-aa9f976f-9bc4-5078-af02-2cc19e2e0a97/56b6987669ab917ce5fe0ad9e899c40d9144f4d44213ed1e12f2be150f06cbd8/relationship/0d2511e59eb92afac5049c9fef5c218e","scope":"build","from":"http://spdx.org/spdxdocs/perl-native-aa9f976f-9bc4-5078-af02-2cc19e2e0a97/56b6987669ab917ce5fe0ad9e899c40d9144f4d44213ed1e12f2be150f06cbd8/recipe/perl-native","relationshipType":"dependsOn","to":["http://spdxdocs.org/openembedded-alias/by-doc-hash/4c604017997380c5bd4237b198815e5cb3bec33ecdd20a86f7cc04da4761330b/bzip2-native/UNIHASH/recipe/bzip2-native","http://spdxdocs.org/openembedded-alias/by-doc-hash/6d14107aa7ef81b57f043ec42e8a09d38f585e35e1ee8fba9c886a7faf47110c/gdbm-native/UNIHASH/recipe/gdbm-native","http://spdxdocs.org/openembedded-alias/by-doc-hash/acc1d9f044127047628dd9cda0779969955f0140daca5b7fbd0b9dd11f516352/make-native/UNIHASH/recipe/make-native","http://spdxdocs.org/openembedded-alias/by-doc-hash/b4b340ec65f43476c010212e56d173820e64966224302c1642f75cb57c62eac1/zlib-native/UNIHASH/recipe/zlib-native","http://spdxdocs.org/openembedded-alias/by-doc-hash/e8e0e19f3bb55c7ea12b6b979bb3362d5bcece4f9c0bbf6624d259b8b34be359/perlcross-native/UNIHASH/recipe/perlcross-native"],"creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/f599f1942770134219afd8640749f2f6e74ac9aeb35739693ef54faa45de7520/perl-native/UNIHASH/relationship/0d2511e59eb92afac5049c9fef5c218e"}]},{"type":"Relationship","spdxId":"http://spdx.org/spdxdocs/perl-native-aa9f976f-9bc4-5078-af02-2cc19e2e0a97/56b6987669ab917ce5fe0ad9e899c40d9144f4d44213ed1e12f2be150f06cbd8/relationship/3e85f4d4988be91c992ac85910914a77","from":"http://spdx.org/spdxdocs/perl-native-aa9f976f-9bc4-5078-af02-2cc19e2e0a97/56b6987669ab917ce5fe0ad9e899c40d9144f4d44213ed1e12f2be150f06cbd8/recipe/perl-native","relationshipType":"hasAssociatedVulnerability","to":["http://spdx.org/spdxdocs/perl-native-aa9f976f-9bc4-5078-af02-2cc19e2e0a97/56b6987669ab917ce5fe0ad9e899c40d9144f4d44213ed1e12f2be150f06cbd8/vulnerability/CVE-2026-4176"],"creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/f599f1942770134219afd8640749f2f6e74ac9aeb35739693ef54faa45de7520/perl-native/UNIHASH/relationship/3e85f4d4988be91c992ac85910914a77"}]},{"type":"security_VexNotAffectedVulnAssessmentRelationship","spdxId":"http://spdx.org/spdxdocs/perl-native-aa9f976f-9bc4-5078-af02-2cc19e2e0a97/56b6987669ab917ce5fe0ad9e899c40d9144f4d44213ed1e12f2be150f06cbd8/vex-not-affected/04ad2735bc6edce41e17b95c3cd8c483","security_impactStatement":"we do not use the vendorered zlib","security_justificationType":"vulnerableCodeNotPresent","security_statusNotes":"not-applicable-config","security_vexVersion":"1.0.0","from":"http://spdx.org/spdxdocs/perl-native-aa9f976f-9bc4-5078-af02-2cc19e2e0a97/56b6987669ab917ce5fe0ad9e899c40d9144f4d44213ed1e12f2be150f06cbd8/vulnerability/CVE-2026-4176","relationshipType":"doesNotAffect","to":["http://spdx.org/spdxdocs/perl-native-aa9f976f-9bc4-5078-af02-2cc19e2e0a97/56b6987669ab917ce5fe0ad9e899c40d9144f4d44213ed1e12f2be150f06cbd8/recipe/perl-native"],"creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/f599f1942770134219afd8640749f2f6e74ac9aeb35739693ef54faa45de7520/perl-native/UNIHASH/vex-not-affected/04ad2735bc6edce41e17b95c3cd8c483"}]},{"type":"security_Vulnerability","spdxId":"http://spdx.org/spdxdocs/perl-native-aa9f976f-9bc4-5078-af02-2cc19e2e0a97/56b6987669ab917ce5fe0ad9e899c40d9144f4d44213ed1e12f2be150f06cbd8/vulnerability/CVE-2026-4176","creationInfo":"_:CreationInfo1","extension":[{"type":"https://rdf.openembedded.org/spdx/3.0/id-alias","https://rdf.openembedded.org/spdx/3.0/alias":"http://spdxdocs.org/openembedded-alias/by-doc-hash/f599f1942770134219afd8640749f2f6e74ac9aeb35739693ef54faa45de7520/perl-native/UNIHASH/vulnerability/CVE-2026-4176"}],"externalIdentifier":[{"type":"ExternalIdentifier","externalIdentifierType":"cve","identifier":"CVE-2026-4176","identifierLocator":["https://cveawg.mitre.org/api/cve/CVE-2026-4176","https://www.cve.org/CVERecord?id=CVE-2026-4176"]}]}]}