Merge pull request #11917 from kikofernandez/openvex

add zlib CVE-2026-86091 as non-vulnerable

Author: kikofernandez

openvex.table

@@ -2186,6 +2186,10 @@
         "not_affected": "vulnerable_code_not_present"
       }
     },
+    {
+      "pkg:github/madler/zlib@1a8db63788c34a50e39e273d39b7e1033208aea2": "CVE-2026-85091",
+      "status": { "not_affected": "vulnerable_code_not_present" }
+    },
     {
       "pkg:github/PCRE2Project/pcre2@f454e231fe5006dd7ff8f4693fd2b8eb94333429": "CVE-2026-86145",
       "status": {
@@ -2825,6 +2829,10 @@
         "not_affected": "vulnerable_code_not_present"
       }
     },
+    {
+      "pkg:github/madler/zlib@1a8db63788c34a50e39e273d39b7e1033208aea2": "CVE-2026-85091",
+      "status": { "not_affected": "vulnerable_code_not_present" }
+    },
     {
       "pkg:github/PCRE2Project/pcre2@f454e231fe5006dd7ff8f4693fd2b8eb94333429": "CVE-2026-86145",
       "status": {

otp-28.openvex.json

@@ -3,8 +3,8 @@
   "@id": "https://erlang.org/download/vex/otp-28.openvex.json",
   "author": "vexctl",
   "timestamp": "2026-10-16T13:47:15.985472+02:00",
-  "last_updated": "2026-10-16T12:17:15.007754421Z",
-  "version": 280,
+  "last_updated": "2026-10-21T10:41:19.043993458+02:00",
+  "version": 281,
   "statements": [
     {
       "vulnerability": {
@@ -19570,6 +19570,19 @@
         }
       ],
       "status": "fixed"
+    },
+    {
+      "vulnerability": {
+        "name": "CVE-2026-85091"
+      },
+      "timestamp": "2026-10-21T10:41:19.043995327+02:00",
+      "products": [
+        {
+          "@id": "pkg:github/madler/zlib@1a8db63788c34a50e39e273d39b7e1033208aea2"
+        }
+      ],
+      "status": "not_affected",
+      "justification": "vulnerable_code_not_present"
     }
   ]
 }

otp-29.openvex.json

@@ -3,8 +3,8 @@
   "@id": "https://erlang.org/download/vex/otp-29.openvex.json",
   "author": "vexctl",
   "timestamp": "2026-10-16T13:51:15.218346+02:00",
-  "last_updated": "2026-10-16T12:17:11.370330909Z",
-  "version": 114,
+  "last_updated": "2026-10-21T10:41:12.901136233+02:00",
+  "version": 115,
   "statements": [
     {
       "vulnerability": {
@@ -2938,6 +2938,19 @@
         }
       ],
       "status": "fixed"
+    },
+    {
+      "vulnerability": {
+        "name": "CVE-2026-85091"
+      },
+      "timestamp": "2026-10-21T10:41:12.901136941+02:00",
+      "products": [
+        {
+          "@id": "pkg:github/madler/zlib@1a8db63788c34a50e39e273d39b7e1033208aea2"
+        }
+      ],
+      "status": "not_affected",
+      "justification": "vulnerable_code_not_present"
     }
   ]
 }