{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:39c170c7-81bd-5622-a1b6-85c74b66f964",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/io.netty/netty-codec@4.1.75.Final-tuxcare.1",
      "type": "library",
      "group": "io.netty",
      "name": "netty-codec",
      "version": "4.1.75.Final-tuxcare.1",
      "purl": "pkg:maven/io.netty/netty-codec@4.1.75.Final-tuxcare.1"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:13377bdd-3cd3-508b-9fcb-cc766946200f",
      "id": "CVE-2022-24823",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-24823 is fixed in version 4.1.75.Final-tuxcare.1 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.75.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b77d4fb8-5ab3-51bf-811a-cc95348a5aaf",
      "id": "CVE-2022-41881",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-41881 is fixed in version 4.1.75.Final-tuxcare.1 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.75.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b3c58163-e76a-5424-8414-694e2fdeee74",
      "id": "CVE-2022-41915",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-41915 affects version 4.1.75.Final-tuxcare.1 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.75.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e2d76740-7a77-543a-98eb-e281798d6f6c",
      "id": "CVE-2023-34462",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-34462 is fixed in version 4.1.75.Final-tuxcare.1 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.75.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:234776e3-6437-5b93-9afa-2fc9ecc45cdd",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-44487 is fixed in version 4.1.75.Final-tuxcare.1 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.75.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:26b7bb0f-a703-5e13-a815-adec68805d77",
      "id": "CVE-2023-4586",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2023-4586 is a false positive for io.netty:netty-codec 4.1.75.Final-tuxcare.1."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.75.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3544f069-8f40-560d-80f7-0d36de343354",
      "id": "CVE-2024-29025",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-29025 affects version 4.1.75.Final-tuxcare.1 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.75.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:aebf17cb-a6a0-51bf-b74b-63610b6e0cad",
      "id": "CVE-2024-47535",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-47535 is fixed in version 4.1.75.Final-tuxcare.1 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.75.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:40c1c0be-9aa9-5053-97b2-7b3bfc87a44d",
      "id": "CVE-2025-24970",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-24970 is fixed in version 4.1.75.Final-tuxcare.1 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.75.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:75ddedb1-1bc3-5c7c-b641-afa75af00d3f",
      "id": "CVE-2025-25193",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-25193 affects version 4.1.75.Final-tuxcare.1 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.75.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:448603e0-c36f-5099-9acd-5f332039b761",
      "id": "CVE-2025-55163",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-55163 affects version 4.1.75.Final-tuxcare.1 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.75.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8bcc058d-d3f5-5b3d-9286-c85afb917e06",
      "id": "CVE-2025-58056",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-58056 is fixed in version 4.1.75.Final-tuxcare.1 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.75.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:37a3bbbe-e1cd-5cb7-a702-44f5024c5d89",
      "id": "CVE-2025-58057",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58057 affects version 4.1.75.Final-tuxcare.1 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.75.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:77874222-9e3f-550a-bb3b-d78c517d2159",
      "id": "CVE-2025-59419",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-59419 is fixed in version 4.1.75.Final-tuxcare.1 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.75.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:84bb9262-47e2-5163-9669-fa160e47e048",
      "id": "CVE-2025-67735",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-67735 affects version 4.1.75.Final-tuxcare.1 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.75.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ee34ff78-cfc9-5710-8faf-361c6833d4f3",
      "id": "CVE-2026-33870",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33870 affects version 4.1.75.Final-tuxcare.1 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.75.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a72f306e-ba54-56b3-b7cd-b1ce68c79071",
      "id": "CVE-2026-33871",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33871 affects version 4.1.75.Final-tuxcare.1 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.75.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:05411f0f-cd6c-5a2d-bbab-39567f538973",
      "id": "CVE-2026-41417",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41417 affects version 4.1.75.Final-tuxcare.1 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.75.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8292d9c0-2bca-5b0c-87db-f7508046ab30",
      "id": "CVE-2026-42577",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42577 affects version 4.1.75.Final-tuxcare.1 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.75.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:014cabb7-0db1-5076-9ff5-104ec9de212a",
      "id": "CVE-2026-42578",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42578 affects version 4.1.75.Final-tuxcare.1 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.75.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d1e463d7-0ed9-5198-a957-7146dc4897db",
      "id": "CVE-2026-42579",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42579 affects version 4.1.75.Final-tuxcare.1 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.75.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ca0bf1e1-fea3-5073-8b95-e964dfef4c54",
      "id": "CVE-2026-42580",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42580 affects version 4.1.75.Final-tuxcare.1 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.75.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a1c6e126-c79c-5e80-8e6f-f5e7e8f9fac2",
      "id": "CVE-2026-42581",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42581 affects version 4.1.75.Final-tuxcare.1 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.75.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fb855942-bca5-5556-956d-0e11d0444fbc",
      "id": "CVE-2026-42583",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42583 affects version 4.1.75.Final-tuxcare.1 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.75.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bd2b0149-c6db-58db-8201-8b49828d943e",
      "id": "CVE-2026-42584",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42584 affects version 4.1.75.Final-tuxcare.1 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.75.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4dfa2c33-c208-5144-bca7-a21c9f4443d1",
      "id": "CVE-2026-42585",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42585 affects version 4.1.75.Final-tuxcare.1 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.75.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c6b44b0d-ee94-5122-8642-9b3a980b12f3",
      "id": "CVE-2026-42586",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42586 affects version 4.1.75.Final-tuxcare.1 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.75.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9629f7cb-f111-5431-93e4-58409950b0f4",
      "id": "CVE-2026-42587",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42587 affects version 4.1.75.Final-tuxcare.1 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.75.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5c1e3f9e-1691-5f86-ac77-809c0dc5e3b3",
      "id": "CVE-2026-44248",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44248 affects version 4.1.75.Final-tuxcare.1 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.75.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7c642858-28c3-5386-b158-8364bc4c112b",
      "id": "CVE-2026-44249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44249 affects version 4.1.75.Final-tuxcare.1 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.75.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:05b9d065-6cc5-56d3-876e-551f091402f3",
      "id": "CVE-2026-44250",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44250 affects version 4.1.75.Final-tuxcare.1 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.75.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d9f9fb57-9d11-59dd-bf3f-3f71a0194586",
      "id": "CVE-2026-44890",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44890 affects version 4.1.75.Final-tuxcare.1 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.75.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6eeddda7-a99b-5dd5-ae33-9df1e46aebb7",
      "id": "CVE-2026-44891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44891 affects version 4.1.75.Final-tuxcare.1 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.75.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d6e62b3c-09ca-54ff-94e1-b82f97e025e4",
      "id": "CVE-2026-44893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44893 affects version 4.1.75.Final-tuxcare.1 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.75.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:256f355e-521b-5d82-b1ba-1ff299572c7a",
      "id": "CVE-2026-45416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45416 affects version 4.1.75.Final-tuxcare.1 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.75.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9ef99610-831c-53d4-a349-98a078b1c57d",
      "id": "CVE-2026-45536",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45536 affects version 4.1.75.Final-tuxcare.1 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.75.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:89e0f6af-5dfb-544e-83b5-5210759efc0b",
      "id": "CVE-2026-45673",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45673 affects version 4.1.75.Final-tuxcare.1 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.75.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9865bae1-7648-5e13-80aa-e0676b054b97",
      "id": "CVE-2026-45674",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45674 affects version 4.1.75.Final-tuxcare.1 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.75.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c51731a8-83df-52bd-92f1-8a8232720a65",
      "id": "CVE-2026-46340",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-46340 affects version 4.1.75.Final-tuxcare.1 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.75.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0e763ae3-7203-515c-a464-d262447ddb7d",
      "id": "CVE-2026-47244",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47244 affects version 4.1.75.Final-tuxcare.1 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.75.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a35b3a93-0eba-5762-8280-cf00d843d30d",
      "id": "CVE-2026-47691",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47691 affects version 4.1.75.Final-tuxcare.1 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.75.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fdeef5c6-e8ab-5016-866f-7e3cf33e6fee",
      "id": "CVE-2026-48006",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48006 affects version 4.1.75.Final-tuxcare.1 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.75.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6f483993-8f28-5d37-a1cb-782614044eba",
      "id": "CVE-2026-48043",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-48043 does not affect version 4.1.75.Final-tuxcare.1 of io.netty:netty-codec. already_fixed \u2014 The target repository (Netty 4.1.75.Final-tuxcare.1) already contains equivalent protection against CVE-2026-48043. While the upstream patch targets a newer architecture with a ChannelInboundHandlerAdapter tail handler (introduced in CVE-2025-58057 refactoring), the target's older architecture implements the same defensive pattern: a try-finally block ensuring ByteBuf.release() is called uncond..."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.75.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9e2d68db-9f0c-5448-bcd7-658f7bfc6351",
      "id": "CVE-2026-48059",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48059 affects version 4.1.75.Final-tuxcare.1 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.75.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cf828979-6706-54e4-926a-5a3aa70b4983",
      "id": "CVE-2026-50010",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50010 affects version 4.1.75.Final-tuxcare.1 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.75.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c9e4c5d4-0139-539c-a683-ec7f2377cf10",
      "id": "CVE-2026-50011",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50011 affects version 4.1.75.Final-tuxcare.1 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.75.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2a99dcd1-6b58-5928-81bd-edbe286bfe6a",
      "id": "CVE-2026-50020",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50020 affects version 4.1.75.Final-tuxcare.1 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.75.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d34d9092-df77-570e-8482-cb19612711cc",
      "id": "CVE-2026-50560",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50560 affects version 4.1.75.Final-tuxcare.1 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.75.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5fb4dafa-348d-5699-b337-88eebc7a43b0",
      "id": "CVE-2026-55831",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55831 affects version 4.1.75.Final-tuxcare.1 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.75.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:98e8e012-05ad-5dfa-8fc2-89f64decd183",
      "id": "CVE-2026-55833",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55833 affects version 4.1.75.Final-tuxcare.1 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.75.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8f1e02ea-bc84-53f9-8958-cbf39fb18c18",
      "id": "CVE-2026-55851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55851 affects version 4.1.75.Final-tuxcare.1 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.75.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:200eeb89-f3d6-5007-b0a4-54308e027390",
      "id": "CVE-2026-56745",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56745 affects version 4.1.75.Final-tuxcare.1 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.75.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:213fa531-cdfb-5282-b4c9-1e4dd6aaf7a9",
      "id": "CVE-2026-56746",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56746 affects version 4.1.75.Final-tuxcare.1 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.75.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ce39e219-95ed-533c-8e98-f4390efd29f4",
      "id": "CVE-2026-56817",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56817 affects version 4.1.75.Final-tuxcare.1 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.75.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e0c80c71-f467-5286-80c2-21c779564bd7",
      "id": "CVE-2026-59898",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59898 affects version 4.1.75.Final-tuxcare.1 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.75.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1e9a793e-2381-5cde-a2d5-853fb53a2304",
      "id": "CVE-2026-59899",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59899 affects version 4.1.75.Final-tuxcare.1 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.75.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:080224ef-b3c3-59eb-935f-db78084827fd",
      "id": "CVE-2026-59900",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59900 affects version 4.1.75.Final-tuxcare.1 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.75.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:60fbf2d0-b32f-50f8-a2d2-fc941118d5bd",
      "id": "CVE-2026-59901",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59901 affects version 4.1.75.Final-tuxcare.1 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.75.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:143f06a1-030f-5126-a2ae-0c1f3e3b6a8d",
      "id": "CVE-2026-59919",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59919 affects version 4.1.75.Final-tuxcare.1 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.75.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:68c8cfc1-aa46-5390-b5ef-5a2e20829d80",
      "id": "CVE-2026-59920",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59920 affects version 4.1.75.Final-tuxcare.1 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.75.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f59f1c7c-ee96-511f-a408-b025de0e17f5",
      "id": "CVE-2026-59921",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59921 affects version 4.1.75.Final-tuxcare.1 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.75.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1a28cb4a-93fb-5f40-b0a2-6afc742792f2",
      "id": "GHSA-mfg7-5gfp-c4w3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.75.Final-tuxcare.1 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.75.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e1a02c82-db72-552d-b042-420f92ecf9c9",
      "id": "GHSA-v74w-7mr3-4qg3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.75.Final-tuxcare.1 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.75.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3b99c42e-eca5-5b51-ab63-4abb83d3bdb7",
      "id": "GHSA-xpw8-rcwv-8f8p",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-xpw8-rcwv-8f8p is fixed in version 4.1.75.Final-tuxcare.1 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.75.Final-tuxcare.1"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.netty/netty-codec@4.1.75.Final-tuxcare.1"
    }
  ]
}