{
  "repository": "https://github.com/varnish/varnish.git",
  "commit_source": "git_rev_parse",
  "commit_sha": "0a625649cd40af4b6c10be5e58a2e89a5e275baa",
  "submitted_target": {
    "target_kind": "git_tag",
    "version": "9.0.2",
    "ref": "varnish-9.0.2",
    "display": "varnish-9.0.2 (vulnerable)"
  },
  "variant_target": {
    "target_kind": "git_tag",
    "commit_sha": "0a625649cd40af4b6c10be5e58a2e89a5e275baa",
    "version": "9.0.3",
    "ref": "varnish-9.0.3",
    "display": "varnish-9.0.3 (fixed)"
  },
  "notes": "The variant stage also tested the vulnerable commit dc27a2dce662015cf79bbda5ff193b6bb74ba2d1 (varnish-9.0.2) as a baseline. The fixed target is the latest 9.0.x release available in the repository."
}