github.com/CycloneDX/sbom-utility@v0.16.0/examples/cyclonedx/VEX/Use-Cases/Case-1/README.md (about)

     1  # VEX Use Case 1
     2  
     3  
     4  | Single Product | Single Version | Single Vulnerability | Not Affected |
     5  | --- | --- | --- | --- |
     6  
     7  A VEX states that CVE-2020-25649 is not exploitable in Acme Product version 2.4.0, even though it’s 
     8  listed in the NVD as a vulnerability of X, and X is a component of Acme Product v2.4.0.