{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:9c5c06f9-6e09-5634-9572-03b537b93ab6",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/io.netty/netty-codec@4.1.112.Final-tuxcare.1",
      "type": "library",
      "group": "io.netty",
      "name": "netty-codec",
      "version": "4.1.112.Final-tuxcare.1",
      "purl": "pkg:maven/io.netty/netty-codec@4.1.112.Final-tuxcare.1"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:f4e8553b-9831-522e-958e-5a40b9389d93",
      "id": "CVE-2024-47535",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-47535 affects version 4.1.112.Final-tuxcare.1 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.112.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:36964f09-4028-5509-9d9c-d2b95c5f5dd8",
      "id": "CVE-2025-24970",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-24970 is fixed in version 4.1.112.Final-tuxcare.1 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.112.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cd35900a-2e1f-594d-81b9-98a105337a2e",
      "id": "CVE-2025-25193",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-25193 affects version 4.1.112.Final-tuxcare.1 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.112.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:57444735-7336-538d-8002-e81b26b7dba5",
      "id": "CVE-2025-55163",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55163 is fixed in version 4.1.112.Final-tuxcare.1 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.112.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2751d72f-0fd0-5177-a818-c86ed093048f",
      "id": "CVE-2025-58056",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58056 affects version 4.1.112.Final-tuxcare.1 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.112.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d5237df5-b3ed-56da-bb42-ebd98b89e95d",
      "id": "CVE-2025-58057",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-58057 is fixed in version 4.1.112.Final-tuxcare.1 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.112.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0bd68046-fd26-5af5-9748-e890bb807a90",
      "id": "CVE-2025-59419",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-59419 is fixed in version 4.1.112.Final-tuxcare.1 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.112.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2f8f9849-5ccf-5a97-bbd0-aecb0ef03eef",
      "id": "CVE-2025-67735",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-67735 affects version 4.1.112.Final-tuxcare.1 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.112.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f6577560-ce5e-57fe-9c1e-ed0eebedbbc0",
      "id": "CVE-2026-33870",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33870 affects version 4.1.112.Final-tuxcare.1 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.112.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:eb582e1d-bccd-50f2-bfbd-35d78d4f5218",
      "id": "CVE-2026-33871",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-33871 is fixed in version 4.1.112.Final-tuxcare.1 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.112.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b4392980-bda8-5c3d-a728-1aeca1057d9c",
      "id": "CVE-2026-41417",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41417 affects version 4.1.112.Final-tuxcare.1 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.112.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:262ec037-334e-5c04-9fed-fab0afe16b7c",
      "id": "CVE-2026-42577",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42577 affects version 4.1.112.Final-tuxcare.1 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.112.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bb1f0c2c-6ac7-5570-9fbc-1c39995cca9f",
      "id": "CVE-2026-42578",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42578 affects version 4.1.112.Final-tuxcare.1 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.112.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d86e7e01-22a1-5e21-9f53-499ba1fd952e",
      "id": "CVE-2026-42579",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42579 affects version 4.1.112.Final-tuxcare.1 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.112.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:33259351-968e-5b4a-bf41-58638f7e3339",
      "id": "CVE-2026-42580",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42580 affects version 4.1.112.Final-tuxcare.1 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.112.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c5ad7858-3869-591a-916e-b74104576f16",
      "id": "CVE-2026-42581",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42581 affects version 4.1.112.Final-tuxcare.1 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.112.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f06cc4c5-8536-5c5c-852b-76023d9f5aa0",
      "id": "CVE-2026-42583",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42583 affects version 4.1.112.Final-tuxcare.1 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.112.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3e8936b3-e51b-5917-aed7-9ec046e7236e",
      "id": "CVE-2026-42584",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42584 affects version 4.1.112.Final-tuxcare.1 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.112.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b90143c0-4da4-54d9-9836-01a0dd59cd9f",
      "id": "CVE-2026-42585",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42585 affects version 4.1.112.Final-tuxcare.1 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.112.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:71708680-0212-5df7-a70a-4a9771d77145",
      "id": "CVE-2026-42586",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42586 affects version 4.1.112.Final-tuxcare.1 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.112.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:df0eb9f2-15fa-5a2e-b3b5-f9f26406ef76",
      "id": "CVE-2026-42587",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42587 affects version 4.1.112.Final-tuxcare.1 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.112.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3ad4095e-e309-5dd9-8497-4d73ec99a1ad",
      "id": "CVE-2026-44248",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44248 affects version 4.1.112.Final-tuxcare.1 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.112.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:08ff0d70-429b-5cd9-86fa-8b567299637d",
      "id": "CVE-2026-44249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44249 affects version 4.1.112.Final-tuxcare.1 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.112.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dfb29c6d-4180-551c-9111-a89846fcc830",
      "id": "CVE-2026-44250",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44250 affects version 4.1.112.Final-tuxcare.1 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.112.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f8ec59d6-27fe-5a4e-81e2-8606a2ad95b9",
      "id": "CVE-2026-44890",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44890 affects version 4.1.112.Final-tuxcare.1 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.112.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:da6a6cd4-5f38-540f-bfe6-55c516a6a36d",
      "id": "CVE-2026-44891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44891 affects version 4.1.112.Final-tuxcare.1 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.112.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:59dfe7c1-e1e1-5b85-934c-9bc239103496",
      "id": "CVE-2026-44893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44893 affects version 4.1.112.Final-tuxcare.1 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.112.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9e16c134-28bf-5d4d-b719-b09d0ca608a2",
      "id": "CVE-2026-45416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45416 affects version 4.1.112.Final-tuxcare.1 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.112.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d18e5673-9ded-5357-a6f1-47eddcc78bb7",
      "id": "CVE-2026-45536",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45536 affects version 4.1.112.Final-tuxcare.1 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.112.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d57022a8-a7a6-5d85-9f5e-0b8bf18399a7",
      "id": "CVE-2026-45673",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45673 affects version 4.1.112.Final-tuxcare.1 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.112.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2d10843d-dd01-5977-9353-eda7517d5d46",
      "id": "CVE-2026-45674",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45674 affects version 4.1.112.Final-tuxcare.1 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.112.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0303c4b7-2880-588e-9ed8-eb7b765f6e18",
      "id": "CVE-2026-46340",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-46340 affects version 4.1.112.Final-tuxcare.1 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.112.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d419354d-e7e1-5a81-985e-60094736d6a5",
      "id": "CVE-2026-47244",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47244 affects version 4.1.112.Final-tuxcare.1 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.112.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8f10ff4b-8e02-567f-b8be-64b55b7049c4",
      "id": "CVE-2026-47691",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-47691 does not affect version 4.1.112.Final-tuxcare.1 of io.netty:netty-codec. Patches already applied: fb9fbe974b57430ee439636bf576c93a2759364f (already in target via b391226387d3 'Backport CVE-2026-45674 to 4.1.112.Final'); 6f19adf36863712f96b16d768d92f0c2f78cf315 (already in target via b391226387d3 'Backport CVE-2026-45674 to 4.1.112.Final')"
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.112.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cf91a2ba-3d74-5017-86d0-afd3dfde0ee4",
      "id": "CVE-2026-48006",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48006 affects version 4.1.112.Final-tuxcare.1 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.112.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ba73e18c-ecb0-59e6-84ec-9773ff1b1bee",
      "id": "CVE-2026-48043",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48043 affects version 4.1.112.Final-tuxcare.1 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.112.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:20d75bce-1194-5368-9285-2f964a20f59f",
      "id": "CVE-2026-48059",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48059 affects version 4.1.112.Final-tuxcare.1 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.112.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d7c23b63-25f4-5e1d-86fe-318f559c812e",
      "id": "CVE-2026-50010",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50010 affects version 4.1.112.Final-tuxcare.1 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.112.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:af49fb59-9b01-55ea-84da-cf79bae88e53",
      "id": "CVE-2026-50011",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50011 affects version 4.1.112.Final-tuxcare.1 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.112.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e8fe673f-ecbb-53d6-b0a6-5930b30a39a1",
      "id": "CVE-2026-50020",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50020 affects version 4.1.112.Final-tuxcare.1 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.112.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:94792832-feba-519d-97e5-12c770dc4c3a",
      "id": "CVE-2026-50560",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50560 affects version 4.1.112.Final-tuxcare.1 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.112.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d976d38b-24af-59d7-8fb7-b4df7e4b35dc",
      "id": "CVE-2026-55831",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55831 affects version 4.1.112.Final-tuxcare.1 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.112.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:87b8e587-ffd0-58ff-b3ca-50422deefdac",
      "id": "CVE-2026-55833",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55833 affects version 4.1.112.Final-tuxcare.1 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.112.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a7af89c8-025a-5d48-a421-0674566f2091",
      "id": "CVE-2026-55851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55851 affects version 4.1.112.Final-tuxcare.1 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.112.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f75bdd3f-207d-5a64-b3a4-a2e28e4d29f5",
      "id": "CVE-2026-56745",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56745 affects version 4.1.112.Final-tuxcare.1 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.112.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1a769edd-4009-5ef0-82ad-05f019278004",
      "id": "CVE-2026-56746",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56746 affects version 4.1.112.Final-tuxcare.1 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.112.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a8ea61ca-af56-554d-8afb-d9945d00d644",
      "id": "CVE-2026-56817",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56817 affects version 4.1.112.Final-tuxcare.1 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.112.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b91d7e51-45a4-5333-9070-ffcfacc24824",
      "id": "CVE-2026-56820",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56820 affects version 4.1.112.Final-tuxcare.1 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.112.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a341f600-7a19-50ae-9366-35dba7f5219b",
      "id": "CVE-2026-56821",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56821 affects version 4.1.112.Final-tuxcare.1 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.112.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:76ab0858-0323-53e0-9afc-afbf4bfcf26e",
      "id": "CVE-2026-56822",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56822 affects version 4.1.112.Final-tuxcare.1 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.112.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4b813642-75bf-553a-a1fc-d52e20cd5000",
      "id": "CVE-2026-59898",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59898 affects version 4.1.112.Final-tuxcare.1 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.112.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bc57ea8a-5331-5f92-b2d1-17fe03bfaa81",
      "id": "CVE-2026-59899",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59899 affects version 4.1.112.Final-tuxcare.1 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.112.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:93f1b930-b6bf-51b2-b2c7-0e53631cd2e9",
      "id": "CVE-2026-59900",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59900 affects version 4.1.112.Final-tuxcare.1 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.112.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ecefe508-650e-5c43-b9aa-be7f66281c67",
      "id": "CVE-2026-59901",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59901 affects version 4.1.112.Final-tuxcare.1 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.112.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f44f4a00-557b-5e0b-b63b-144b55d1d033",
      "id": "CVE-2026-59919",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59919 affects version 4.1.112.Final-tuxcare.1 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.112.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ea8426cf-676b-5f9d-bf64-46f38daa201c",
      "id": "CVE-2026-59920",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59920 affects version 4.1.112.Final-tuxcare.1 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.112.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:887d4e14-9130-5d53-95db-c27429b4580b",
      "id": "CVE-2026-59921",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59921 affects version 4.1.112.Final-tuxcare.1 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.112.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:48b423c9-5fae-57bc-9ca0-d666550015d4",
      "id": "GHSA-mfg7-5gfp-c4w3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.112.Final-tuxcare.1 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.112.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7d054699-a066-548a-b980-9b745b7079e3",
      "id": "GHSA-v74w-7mr3-4qg3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.112.Final-tuxcare.1 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.112.Final-tuxcare.1"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.netty/netty-codec@4.1.112.Final-tuxcare.1"
    }
  ]
}