resolved
The vulnerability has been remediated.

resolved_with_pedigree
The vulnerability has been remediated and evidence of the changes are provided in the affected components pedigree containing verifiable commit history and/or diff(s).

exploitable
The vulnerability may be directly or indirectly exploitable.

in_triage
The vulnerability is being investigated.

false_positive
The vulnerability is not specific to the component or service and was falsely identified or associated.

not_affected
The component or service is not affected by the vulnerability. Justification should be specified for all not_affected cases.
