From f982fef35f790283d37cac2fff81ec5ba3b00712 Mon Sep 17 00:00:00 2001
From: Lucas Manuel Rodriguez <lucas@fleetdm.com>
Date: Wed, 4 Jun 2025 01:29:21 -0300
Subject: [PATCH] Skip `CVE-2025-48734` for real (#29743)

I fixed [this](https://github.com/fleetdm/fleet/pull/29692) incorrectly
the first time (my trivy setup is broken on my workstation and I missed
the CI check failure on the original PR).
---
 security/vex/fleetctl/CVE-2025-48734.vex.json | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/security/vex/fleetctl/CVE-2025-48734.vex.json b/security/vex/fleetctl/CVE-2025-48734.vex.json
index 30c1338fba..2d62fdf31a 100644
--- a/security/vex/fleetctl/CVE-2025-48734.vex.json
+++ b/security/vex/fleetctl/CVE-2025-48734.vex.json
@@ -15,7 +15,7 @@
           "@id": "fleetctl"
         },
         {
-          "@id": "pkg:golang/github.com/goreleaser/nfpm/v2"
+          "@id": "pkg:maven/commons-beanutils/commons-beanutils"
         }
       ],
       "status": "not_affected",