{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:e4ad4caf-19b5-59a5-9c59-7ce74d5c97c0",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/io.netty/netty-codec-http@4.1.73.Final-tuxcare.1",
      "type": "library",
      "group": "io.netty",
      "name": "netty-codec-http",
      "version": "4.1.73.Final-tuxcare.1",
      "purl": "pkg:maven/io.netty/netty-codec-http@4.1.73.Final-tuxcare.1"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:3da06d3b-4e0e-57a1-ba58-cb19a158f825",
      "id": "CVE-2022-24823",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-24823 is fixed in version 4.1.73.Final-tuxcare.1 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.73.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fb73da73-283e-5f18-b53c-ce4ca34a9069",
      "id": "CVE-2022-41881",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-41881 is fixed in version 4.1.73.Final-tuxcare.1 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.73.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:eb96a84b-6182-5398-8fff-6351f1a48745",
      "id": "CVE-2022-41915",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-41915 affects version 4.1.73.Final-tuxcare.1 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.73.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d8b5d3c3-c77a-5139-b049-9a75b2f3af71",
      "id": "CVE-2023-34462",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-34462 affects version 4.1.73.Final-tuxcare.1 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.73.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6f7c046f-d78d-5f8b-ab01-02dafc84a11b",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-44487 is fixed in version 4.1.73.Final-tuxcare.1 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.73.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:76ed5f25-4c4d-5c67-9c52-e59b91b71448",
      "id": "CVE-2023-4586",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2023-4586 is a false positive for io.netty:netty-codec-http 4.1.73.Final-tuxcare.1."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.73.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2679df86-10d4-50f3-bc70-c29f90419213",
      "id": "CVE-2024-29025",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-29025 affects version 4.1.73.Final-tuxcare.1 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.73.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d5e4323c-9c4b-59db-a415-ff051571e137",
      "id": "CVE-2024-47535",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-47535 is fixed in version 4.1.73.Final-tuxcare.1 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.73.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9f896b29-ea48-5832-bd59-2a7c820dabe4",
      "id": "CVE-2025-24970",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-24970 is fixed in version 4.1.73.Final-tuxcare.1 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.73.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:88a5805f-72c2-5def-9a27-b1b867f22bf6",
      "id": "CVE-2025-25193",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-25193 affects version 4.1.73.Final-tuxcare.1 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.73.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:174f478a-dceb-5e54-8952-5646e494465b",
      "id": "CVE-2025-55163",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-55163 affects version 4.1.73.Final-tuxcare.1 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.73.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:582d955d-950d-53ad-9eea-1153a9685583",
      "id": "CVE-2025-58056",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58056 affects version 4.1.73.Final-tuxcare.1 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.73.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2438dab1-882c-5d5c-adf8-b4f14c5e3509",
      "id": "CVE-2025-58057",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58057 affects version 4.1.73.Final-tuxcare.1 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.73.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7ea9281a-d190-51ba-ad9b-f9979ca6545a",
      "id": "CVE-2025-59419",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-59419 is fixed in version 4.1.73.Final-tuxcare.1 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.73.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6efbe697-0a35-5566-9481-e128b957319f",
      "id": "CVE-2025-67735",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-67735 affects version 4.1.73.Final-tuxcare.1 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.73.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b986e4a3-eeae-5666-9206-879e6f674184",
      "id": "CVE-2026-33870",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33870 affects version 4.1.73.Final-tuxcare.1 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.73.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1449f1ff-3bd8-5455-9364-71ee5fa108f8",
      "id": "CVE-2026-33871",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33871 affects version 4.1.73.Final-tuxcare.1 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.73.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:80681e64-e4d2-5bb9-bdde-9c4f4cd92242",
      "id": "CVE-2026-41417",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41417 affects version 4.1.73.Final-tuxcare.1 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.73.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:edfcb0f7-4cde-54ad-b0fb-284c8b2cccd8",
      "id": "CVE-2026-42577",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42577 affects version 4.1.73.Final-tuxcare.1 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.73.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:38eab2eb-f152-563f-a042-8d7449fcd0eb",
      "id": "CVE-2026-42578",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42578 affects version 4.1.73.Final-tuxcare.1 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.73.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7e2d04c3-7f58-542a-b5dd-6a4356ad5b91",
      "id": "CVE-2026-42579",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42579 affects version 4.1.73.Final-tuxcare.1 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.73.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ec36d7ce-3aaa-5efe-9325-a47de4b04330",
      "id": "CVE-2026-42580",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42580 affects version 4.1.73.Final-tuxcare.1 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.73.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5e3a8dd8-7d46-56d8-bf4d-a9aa0d55381c",
      "id": "CVE-2026-42581",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42581 affects version 4.1.73.Final-tuxcare.1 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.73.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:946cdf17-bc5a-56e8-808d-1c76c0afaf4c",
      "id": "CVE-2026-42583",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42583 affects version 4.1.73.Final-tuxcare.1 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.73.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5dce3dc4-a93a-52b9-bab6-6e0692e7fbcd",
      "id": "CVE-2026-42584",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42584 affects version 4.1.73.Final-tuxcare.1 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.73.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ad363729-a29f-5f3a-8c57-587d0bcff3d5",
      "id": "CVE-2026-42585",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42585 affects version 4.1.73.Final-tuxcare.1 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.73.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:65b9f538-80f2-5583-b82b-0393d6a80620",
      "id": "CVE-2026-42586",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42586 affects version 4.1.73.Final-tuxcare.1 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.73.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7ed3b724-b6a0-5f3f-b8ae-7a444545868f",
      "id": "CVE-2026-42587",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42587 affects version 4.1.73.Final-tuxcare.1 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.73.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6ab1a18e-d93d-5e1f-84f7-acb39683b4fb",
      "id": "CVE-2026-44248",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44248 affects version 4.1.73.Final-tuxcare.1 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.73.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:88b3baea-13c8-5fe9-8487-e676f3ef00b8",
      "id": "CVE-2026-44249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44249 affects version 4.1.73.Final-tuxcare.1 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.73.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d405c4dc-a4f1-5410-bafa-57456dc0f918",
      "id": "CVE-2026-44250",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44250 affects version 4.1.73.Final-tuxcare.1 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.73.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:69cd606f-d9d6-5b59-b193-c96bb2bfd479",
      "id": "CVE-2026-44890",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44890 affects version 4.1.73.Final-tuxcare.1 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.73.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4057e020-3964-5ebf-a9e0-c3e05a2cfc22",
      "id": "CVE-2026-44891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44891 affects version 4.1.73.Final-tuxcare.1 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.73.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3a62d5d2-db39-5b81-90ef-53d187b088b7",
      "id": "CVE-2026-44893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44893 affects version 4.1.73.Final-tuxcare.1 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.73.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bb4d9261-0499-5bc0-813d-e16e0c48d41b",
      "id": "CVE-2026-45416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45416 affects version 4.1.73.Final-tuxcare.1 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.73.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4c41a420-efa6-5e7f-a2ca-83c221f99239",
      "id": "CVE-2026-45536",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45536 affects version 4.1.73.Final-tuxcare.1 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.73.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9b41ce82-adc0-5993-8883-47620568ae85",
      "id": "CVE-2026-45673",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45673 affects version 4.1.73.Final-tuxcare.1 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.73.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:16aceed8-cc96-5420-8508-e3f598010532",
      "id": "CVE-2026-45674",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45674 affects version 4.1.73.Final-tuxcare.1 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.73.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d2c7b723-0698-5280-9a32-51b793cfb338",
      "id": "CVE-2026-46340",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-46340 affects version 4.1.73.Final-tuxcare.1 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.73.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:01d16dbc-92b1-5a08-990e-c0e6c8eb5237",
      "id": "CVE-2026-47244",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47244 affects version 4.1.73.Final-tuxcare.1 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.73.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e3b82dc0-2b91-5652-b690-860f98186458",
      "id": "CVE-2026-47691",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47691 affects version 4.1.73.Final-tuxcare.1 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.73.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bc8b3187-a0a6-5744-908e-ab97cc4aa0b9",
      "id": "CVE-2026-48006",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48006 affects version 4.1.73.Final-tuxcare.1 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.73.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a01644ca-9a4c-5e8d-a2f8-d64e4c968032",
      "id": "CVE-2026-48043",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-48043 does not affect version 4.1.73.Final-tuxcare.1 of io.netty:netty-codec-http. not_affected \u2014 Version 4.1.73 is not affected by CVE-2026-48043. The target uses a loop-based architecture with try-finally protection (introduced in 2016) that prevents the buffer leak described in the CVE. The vulnerable ChannelInboundHandlerAdapter pattern that the upstream patch fixes does not exist in this version."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.73.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9d8d9b26-c663-55d0-81cf-b69355e66a40",
      "id": "CVE-2026-48059",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48059 affects version 4.1.73.Final-tuxcare.1 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.73.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f5ea6447-d097-5093-972d-addaa1c70560",
      "id": "CVE-2026-50010",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50010 affects version 4.1.73.Final-tuxcare.1 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.73.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f1c0f7ca-a466-51a1-81bb-afa09adbfb50",
      "id": "CVE-2026-50011",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50011 affects version 4.1.73.Final-tuxcare.1 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.73.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:82f7c819-b2e4-51f3-8ff7-5abfd734ce4e",
      "id": "CVE-2026-50020",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50020 affects version 4.1.73.Final-tuxcare.1 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.73.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5dc1b23e-5711-5bfd-a657-8baf66ac9ee4",
      "id": "CVE-2026-50560",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50560 affects version 4.1.73.Final-tuxcare.1 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.73.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b26b9279-9838-5b6d-b82d-9bcb891a16c8",
      "id": "CVE-2026-55831",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55831 affects version 4.1.73.Final-tuxcare.1 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.73.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:70010d3a-be2e-5754-9536-251dce745a8e",
      "id": "CVE-2026-55833",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55833 affects version 4.1.73.Final-tuxcare.1 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.73.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:19f07974-91ad-5dd5-97c4-9b061394ea91",
      "id": "CVE-2026-55851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55851 affects version 4.1.73.Final-tuxcare.1 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.73.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b73f7b71-ea58-573e-a782-1b1571cd74b9",
      "id": "CVE-2026-56745",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56745 affects version 4.1.73.Final-tuxcare.1 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.73.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cff814d4-ef46-541e-8154-ce50364aaea0",
      "id": "CVE-2026-56746",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56746 affects version 4.1.73.Final-tuxcare.1 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.73.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e782a50f-3560-5325-9843-30ad783bb809",
      "id": "CVE-2026-56817",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56817 affects version 4.1.73.Final-tuxcare.1 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.73.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e1cb0c0a-e2db-5a45-bb84-85efce11fc73",
      "id": "CVE-2026-59898",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59898 affects version 4.1.73.Final-tuxcare.1 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.73.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ad1a36b3-3096-5b34-bfbd-5cf10d748878",
      "id": "CVE-2026-59899",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59899 affects version 4.1.73.Final-tuxcare.1 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.73.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b99e9921-9568-594f-9acf-7478d7ab95e7",
      "id": "CVE-2026-59900",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59900 affects version 4.1.73.Final-tuxcare.1 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.73.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7398be18-9e85-5965-8ab7-9da47b50ad23",
      "id": "CVE-2026-59901",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59901 affects version 4.1.73.Final-tuxcare.1 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.73.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c5ab4d75-4fb1-53eb-86aa-58b99bb6f28d",
      "id": "CVE-2026-59919",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59919 affects version 4.1.73.Final-tuxcare.1 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.73.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:26809720-5eac-5716-a227-187cc8b14ba8",
      "id": "CVE-2026-59920",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59920 affects version 4.1.73.Final-tuxcare.1 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.73.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:75a1ad50-680f-500d-b6f5-4235cef9790e",
      "id": "CVE-2026-59921",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59921 affects version 4.1.73.Final-tuxcare.1 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.73.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4662e03f-c4ce-52a3-acdf-0cf252de842b",
      "id": "GHSA-mfg7-5gfp-c4w3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.73.Final-tuxcare.1 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.73.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e58a289d-c4e3-5add-98d3-34142b4d94a3",
      "id": "GHSA-v74w-7mr3-4qg3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.73.Final-tuxcare.1 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.73.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f4a4ed97-cb05-59c2-8e33-3e6807a0420b",
      "id": "GHSA-xpw8-rcwv-8f8p",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-xpw8-rcwv-8f8p affects version 4.1.73.Final-tuxcare.1 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.73.Final-tuxcare.1"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.netty/netty-codec-http@4.1.73.Final-tuxcare.1"
    }
  ]
}