{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:d1107a1f-9db0-57c5-afff-be71e6d42d48",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/io.netty/netty-all@4.1.75.Final-tuxcare.2",
      "type": "library",
      "group": "io.netty",
      "name": "netty-all",
      "version": "4.1.75.Final-tuxcare.2",
      "purl": "pkg:maven/io.netty/netty-all@4.1.75.Final-tuxcare.2"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:cb121567-2c47-5039-ae21-a20b09f09e4b",
      "id": "CVE-2022-24823",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-24823 is fixed in version 4.1.75.Final-tuxcare.2 of io.netty:netty-all."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-all@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:03f335f7-7565-5cd2-9c35-ba5eb522aea3",
      "id": "CVE-2022-41881",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-41881 is fixed in version 4.1.75.Final-tuxcare.2 of io.netty:netty-all."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-all@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d40199a3-2ddc-5687-90b8-2589efb4b535",
      "id": "CVE-2022-41915",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-41915 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-all."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-all@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:eda303e3-3ee6-59b1-be51-4e8ae646b9d9",
      "id": "CVE-2023-34462",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-34462 is fixed in version 4.1.75.Final-tuxcare.2 of io.netty:netty-all."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-all@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f4048f91-9c9d-535c-b6e0-0f385bce54bd",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-44487 is fixed in version 4.1.75.Final-tuxcare.2 of io.netty:netty-all."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-all@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3f8616eb-0758-5292-82b9-52e1c157571b",
      "id": "CVE-2023-4586",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2023-4586 is a false positive for io.netty:netty-all 4.1.75.Final-tuxcare.2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-all@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1cb59a39-f196-586a-99c5-c95362e630a3",
      "id": "CVE-2024-29025",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-29025 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-all."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-all@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ebfdcb31-9daf-5c8c-bebe-d5fc61cc6cca",
      "id": "CVE-2024-47535",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-47535 is fixed in version 4.1.75.Final-tuxcare.2 of io.netty:netty-all."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-all@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:83d53888-6e94-5dd2-9a2f-b9d3f1bed46f",
      "id": "CVE-2025-24970",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-24970 is fixed in version 4.1.75.Final-tuxcare.2 of io.netty:netty-all."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-all@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ebb9e390-63a3-575b-abbf-b1032d13a4b1",
      "id": "CVE-2025-25193",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-25193 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-all."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-all@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:943b5f78-7f54-5734-8adc-a160ddd1409b",
      "id": "CVE-2025-55163",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-55163 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-all."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-all@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:45a94214-00bc-5975-958a-aaa1e4089f3e",
      "id": "CVE-2025-58056",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-58056 is fixed in version 4.1.75.Final-tuxcare.2 of io.netty:netty-all."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-all@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:11ffe611-445a-52e4-9ed5-f230c0ffc009",
      "id": "CVE-2025-58057",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58057 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-all."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-all@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3378bd99-7a8c-517d-89f4-74488ce88ecb",
      "id": "CVE-2025-59419",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-59419 is fixed in version 4.1.75.Final-tuxcare.2 of io.netty:netty-all."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-all@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:21c61e27-24a5-567c-8ea3-869a3ba33afc",
      "id": "CVE-2025-67735",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-67735 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-all."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-all@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:552c1164-29b3-5833-9711-40f420ba22c9",
      "id": "CVE-2026-33870",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33870 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-all."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-all@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f080937c-2ad8-58db-8998-e72d0eeb00da",
      "id": "CVE-2026-33871",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33871 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-all."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-all@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2edbb25f-8851-56dd-bf20-217d21620359",
      "id": "CVE-2026-41417",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41417 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-all."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-all@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:475c7e8d-d06b-5bc9-8117-4b75daa6291b",
      "id": "CVE-2026-42577",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42577 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-all."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-all@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:957565e7-f72b-5544-a32e-3408a392c1fd",
      "id": "CVE-2026-42578",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42578 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-all."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-all@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a0b813ae-4bd8-5540-919c-4d0e6e2faa9e",
      "id": "CVE-2026-42579",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42579 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-all."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-all@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c57033d3-449b-5d91-96d3-f0b63c09abf3",
      "id": "CVE-2026-42580",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42580 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-all."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-all@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:27cc6d1b-c985-5973-8a1e-c960109beecf",
      "id": "CVE-2026-42581",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42581 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-all."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-all@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2d999f72-e768-5c61-8037-fb3154921fea",
      "id": "CVE-2026-42583",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42583 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-all."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-all@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:326c6213-82d1-5de5-a195-c6dce465155a",
      "id": "CVE-2026-42584",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42584 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-all."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-all@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:617cb652-04c2-5cfe-87db-16ad2f3a26f0",
      "id": "CVE-2026-42585",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42585 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-all."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-all@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:adb28032-b1c7-5b98-9517-cb81e783601d",
      "id": "CVE-2026-42586",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42586 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-all."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-all@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:39d1088a-fc29-5328-95bf-b99b6c7e8aa6",
      "id": "CVE-2026-42587",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42587 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-all."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-all@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cab59e27-b482-5c70-9406-abea03e8d632",
      "id": "CVE-2026-44248",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44248 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-all."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-all@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1c57e568-fcc0-5ebc-888b-6b6325a34e03",
      "id": "CVE-2026-44249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44249 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-all."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-all@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:86ae1de8-8f83-537e-a95e-101c6595b2bc",
      "id": "CVE-2026-44250",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44250 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-all."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-all@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2e1df84c-b20a-5d4e-a887-36c89cf17409",
      "id": "CVE-2026-44890",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44890 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-all."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-all@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7a7c8460-4ceb-5b68-890b-0bc05b1288c0",
      "id": "CVE-2026-44891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44891 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-all."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-all@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f147cb99-f895-517d-9e2d-eea2ab44cc55",
      "id": "CVE-2026-44893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44893 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-all."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-all@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b3c1a564-6e98-5f38-b0ee-c2b32f98dab6",
      "id": "CVE-2026-45416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45416 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-all."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-all@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e3bce27e-3c7e-515c-b702-626f3a7d7e47",
      "id": "CVE-2026-45536",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45536 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-all."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-all@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ddeb6e62-8f76-55bc-b9a9-fc7ceaefd351",
      "id": "CVE-2026-45673",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45673 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-all."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-all@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d2050f03-a144-5555-b30f-ba5013c4ea05",
      "id": "CVE-2026-45674",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45674 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-all."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-all@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8d718e68-4d2b-523d-8225-5d50ee434ca5",
      "id": "CVE-2026-46340",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-46340 is fixed in version 4.1.75.Final-tuxcare.2 of io.netty:netty-all."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-all@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f2f768c5-4bfa-50ef-bee4-29137ac0ed1a",
      "id": "CVE-2026-47244",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47244 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-all."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-all@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:746ec2a3-22b6-5573-b601-9e575378cb48",
      "id": "CVE-2026-47691",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47691 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-all."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-all@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:82cee2f3-b15f-5ea0-87d5-3ae3b7d16d83",
      "id": "CVE-2026-48006",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48006 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-all."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-all@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0666a812-a2e6-5355-baed-b524d39d42ea",
      "id": "CVE-2026-48043",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-48043 does not affect version 4.1.75.Final-tuxcare.2 of io.netty:netty-all. already_fixed \u2014 The target repository (Netty 4.1.75.Final-tuxcare.1) already contains equivalent protection against CVE-2026-48043. While the upstream patch targets a newer architecture with a ChannelInboundHandlerAdapter tail handler (introduced in CVE-2025-58057 refactoring), the target's older architecture implements the same defensive pattern: a try-finally block ensuring ByteBuf.release() is called uncond..."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-all@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3e0286c2-4d92-505d-9e1d-7742e5e28cdd",
      "id": "CVE-2026-48059",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48059 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-all."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-all@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a5a75bcb-f992-5d1f-98c7-a95fbba63a4d",
      "id": "CVE-2026-50010",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50010 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-all."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-all@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b9979074-9667-5442-8e91-782c3605577e",
      "id": "CVE-2026-50011",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50011 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-all."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-all@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:78d65ecb-c6e6-59f0-a065-e2ee3abcae25",
      "id": "CVE-2026-50020",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50020 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-all."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-all@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9f67df92-bf25-5485-adb6-7ab5a82a5ace",
      "id": "CVE-2026-50560",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50560 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-all."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-all@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c0866086-caca-56da-889a-b2fa48f4775b",
      "id": "CVE-2026-55831",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55831 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-all."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-all@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6f60bc44-9646-53bc-bfd8-0fa233372433",
      "id": "CVE-2026-55833",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55833 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-all."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-all@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:770d0abc-7894-5720-b4c1-10b2aab0f3e9",
      "id": "CVE-2026-55851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55851 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-all."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-all@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:aa5ddd4f-6956-5d93-987f-0dd9fd484c6d",
      "id": "CVE-2026-56745",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56745 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-all."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-all@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9b43ea3b-0b83-5a2e-9283-c829e7d0239f",
      "id": "CVE-2026-56746",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56746 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-all."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-all@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2e5d4183-410d-5d02-b34f-dbb99e829803",
      "id": "CVE-2026-56817",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56817 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-all."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-all@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:eb07e7d3-a805-5829-9ffd-9587e30fe132",
      "id": "CVE-2026-59898",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59898 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-all."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-all@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5241883f-55c5-5a9b-93f2-ee990fb83e16",
      "id": "CVE-2026-59899",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59899 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-all."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-all@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c1ad330f-af6e-5a06-a7ba-294c3d83ce03",
      "id": "CVE-2026-59900",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59900 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-all."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-all@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dca1690e-87d3-5e18-a942-b2f21a3b7e52",
      "id": "CVE-2026-59901",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59901 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-all."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-all@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:634cd4ef-cc14-5c5c-b015-31bf59e97873",
      "id": "CVE-2026-59919",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59919 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-all."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-all@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:951560fe-fb26-5706-8b08-6d4491bfbdd4",
      "id": "CVE-2026-59920",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59920 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-all."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-all@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9e592795-e27d-512e-951d-04fa17888478",
      "id": "CVE-2026-59921",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59921 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-all."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-all@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9dde2e70-12fc-5702-9267-4776bf961632",
      "id": "GHSA-mfg7-5gfp-c4w3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-all."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-all@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e66fde1e-5f0f-53e6-af9e-2a8d7f68fff1",
      "id": "GHSA-v74w-7mr3-4qg3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-all."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-all@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1f8e3b5e-02e4-50f4-87c4-e4cf7bc52fbb",
      "id": "GHSA-xpw8-rcwv-8f8p",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-xpw8-rcwv-8f8p is fixed in version 4.1.75.Final-tuxcare.2 of io.netty:netty-all."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-all@4.1.75.Final-tuxcare.2"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.netty/netty-all@4.1.75.Final-tuxcare.2"
    }
  ]
}