{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:122180e1-be2e-532f-9bcc-1a60ab8ea6f9",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/io.netty/netty-dev-tools@4.1.75.Final-tuxcare.1",
      "type": "library",
      "group": "io.netty",
      "name": "netty-dev-tools",
      "version": "4.1.75.Final-tuxcare.1",
      "purl": "pkg:maven/io.netty/netty-dev-tools@4.1.75.Final-tuxcare.1"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:34ed7678-93a8-5306-95b4-675ba8fb127f",
      "id": "CVE-2022-24823",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-24823 is fixed in version 4.1.75.Final-tuxcare.1 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.75.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:26f98461-aae0-55ff-80b8-f25d4c9fa97d",
      "id": "CVE-2022-41881",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-41881 is fixed in version 4.1.75.Final-tuxcare.1 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.75.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bda19a57-f615-5076-a6d3-b09098e467ea",
      "id": "CVE-2022-41915",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-41915 affects version 4.1.75.Final-tuxcare.1 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.75.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e746bfaf-ae2b-5a19-9572-c49f8301a404",
      "id": "CVE-2023-34462",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-34462 is fixed in version 4.1.75.Final-tuxcare.1 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.75.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e029398c-8fc0-55fe-a970-b93d8d6bdc87",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-44487 is fixed in version 4.1.75.Final-tuxcare.1 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.75.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3b6a4dee-558d-540f-9f81-f7cf69db4fe7",
      "id": "CVE-2023-4586",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2023-4586 is a false positive for io.netty:netty-dev-tools 4.1.75.Final-tuxcare.1."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.75.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fee52db5-4ca0-55c9-b1bf-cf7f20f2ecd2",
      "id": "CVE-2024-29025",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-29025 affects version 4.1.75.Final-tuxcare.1 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.75.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:59fc4dad-e45f-5595-be2f-eb27e9f57ed4",
      "id": "CVE-2024-47535",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-47535 is fixed in version 4.1.75.Final-tuxcare.1 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.75.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:891a6a05-b8f3-5ff9-99c6-5d8063727f58",
      "id": "CVE-2025-24970",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-24970 is fixed in version 4.1.75.Final-tuxcare.1 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.75.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ca1c19a4-8f35-5538-b7c4-db7e8c3e7964",
      "id": "CVE-2025-25193",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-25193 affects version 4.1.75.Final-tuxcare.1 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.75.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f8695c47-3ebb-580b-bfc5-4bc71cb4a3df",
      "id": "CVE-2025-55163",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-55163 affects version 4.1.75.Final-tuxcare.1 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.75.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:693ffe50-5d64-54de-a39d-7ab6c17be60e",
      "id": "CVE-2025-58056",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-58056 is fixed in version 4.1.75.Final-tuxcare.1 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.75.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5625ec57-0c17-5b45-8e80-51fe8897c88d",
      "id": "CVE-2025-58057",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58057 affects version 4.1.75.Final-tuxcare.1 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.75.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b639accd-4f6e-50fc-98da-9d7d4394ec93",
      "id": "CVE-2025-59419",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-59419 is fixed in version 4.1.75.Final-tuxcare.1 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.75.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4c00d988-6e4e-57aa-a562-f61670e888f8",
      "id": "CVE-2025-67735",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-67735 affects version 4.1.75.Final-tuxcare.1 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.75.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:137cec88-9630-5b7f-b32e-029304bdc157",
      "id": "CVE-2026-33870",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33870 affects version 4.1.75.Final-tuxcare.1 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.75.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c9a2d2b5-10f9-51bb-a064-ea1b5e487e20",
      "id": "CVE-2026-33871",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33871 affects version 4.1.75.Final-tuxcare.1 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.75.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:be6729fa-8eb6-59c9-a417-c17e03145f40",
      "id": "CVE-2026-41417",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41417 affects version 4.1.75.Final-tuxcare.1 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.75.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:881ea0d6-7d6c-58a9-99f8-3239f097e880",
      "id": "CVE-2026-42577",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42577 affects version 4.1.75.Final-tuxcare.1 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.75.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f941e31b-5def-50de-830e-91e521951b86",
      "id": "CVE-2026-42578",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42578 affects version 4.1.75.Final-tuxcare.1 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.75.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:84b5df76-e9fd-52e0-bce8-b5f139651251",
      "id": "CVE-2026-42579",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42579 affects version 4.1.75.Final-tuxcare.1 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.75.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1f707247-b0d1-5db7-b2c8-ceed828c8215",
      "id": "CVE-2026-42580",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42580 affects version 4.1.75.Final-tuxcare.1 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.75.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:053453a3-45f4-5064-85c6-cca91a02b042",
      "id": "CVE-2026-42581",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42581 affects version 4.1.75.Final-tuxcare.1 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.75.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6d7e2e66-30f5-5794-a9ef-eaecbc22dcbf",
      "id": "CVE-2026-42583",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42583 affects version 4.1.75.Final-tuxcare.1 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.75.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:79c9447b-bed0-5a9e-a2c0-5fc6fe6b5dc5",
      "id": "CVE-2026-42584",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42584 affects version 4.1.75.Final-tuxcare.1 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.75.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:706de572-757f-5a64-a1b2-bcb8fb6755fa",
      "id": "CVE-2026-42585",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42585 affects version 4.1.75.Final-tuxcare.1 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.75.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:880f2137-08ac-52df-b005-341fecb8f978",
      "id": "CVE-2026-42586",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42586 affects version 4.1.75.Final-tuxcare.1 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.75.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ac43396c-6b09-5b2e-9f48-49b537bd141a",
      "id": "CVE-2026-42587",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42587 affects version 4.1.75.Final-tuxcare.1 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.75.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:02c52091-be77-5561-8a17-da2788cdecec",
      "id": "CVE-2026-44248",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44248 affects version 4.1.75.Final-tuxcare.1 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.75.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:038918bf-6d54-51b4-8f06-cc0df264b455",
      "id": "CVE-2026-44249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44249 affects version 4.1.75.Final-tuxcare.1 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.75.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0ef9feac-071b-532f-9c37-d11f27aeaf75",
      "id": "CVE-2026-44250",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44250 affects version 4.1.75.Final-tuxcare.1 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.75.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4c1eeb7e-d467-5849-8b3e-caaa69c86499",
      "id": "CVE-2026-44890",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44890 affects version 4.1.75.Final-tuxcare.1 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.75.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:baeaa48f-8f7d-5c8a-b92f-88bfe6879212",
      "id": "CVE-2026-44891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44891 affects version 4.1.75.Final-tuxcare.1 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.75.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6230ac3c-e64d-55c7-b124-6d4f52a0464c",
      "id": "CVE-2026-44893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44893 affects version 4.1.75.Final-tuxcare.1 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.75.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:38acd339-9924-5691-9d2b-0e809115f437",
      "id": "CVE-2026-45416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45416 affects version 4.1.75.Final-tuxcare.1 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.75.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7c3139e0-401c-5240-9193-5ca0280854ff",
      "id": "CVE-2026-45536",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45536 affects version 4.1.75.Final-tuxcare.1 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.75.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b9b8d0a2-a33a-5756-91c3-3ef4fb9daff8",
      "id": "CVE-2026-45673",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45673 affects version 4.1.75.Final-tuxcare.1 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.75.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c281d08e-f09c-59d7-be89-d32b1f9df117",
      "id": "CVE-2026-45674",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45674 affects version 4.1.75.Final-tuxcare.1 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.75.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f9b4ed8a-4874-5660-9148-2c123f2e0093",
      "id": "CVE-2026-46340",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-46340 affects version 4.1.75.Final-tuxcare.1 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.75.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e22ad4ee-ef2e-589b-9e79-0e6e1f94a053",
      "id": "CVE-2026-47244",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47244 affects version 4.1.75.Final-tuxcare.1 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.75.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a12c91a3-f1a8-50aa-ae1e-dfe7cb1e1efb",
      "id": "CVE-2026-47691",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47691 affects version 4.1.75.Final-tuxcare.1 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.75.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c482da46-63d7-5c1d-b082-0bbf50d11518",
      "id": "CVE-2026-48006",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48006 affects version 4.1.75.Final-tuxcare.1 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.75.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:885512c1-ff6c-58bb-b25a-b618d4a89903",
      "id": "CVE-2026-48043",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-48043 does not affect version 4.1.75.Final-tuxcare.1 of io.netty:netty-dev-tools. already_fixed \u2014 The target repository (Netty 4.1.75.Final-tuxcare.1) already contains equivalent protection against CVE-2026-48043. While the upstream patch targets a newer architecture with a ChannelInboundHandlerAdapter tail handler (introduced in CVE-2025-58057 refactoring), the target's older architecture implements the same defensive pattern: a try-finally block ensuring ByteBuf.release() is called uncond..."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.75.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d8fa4f13-a4e6-5d4f-8910-de28ecfbe5f7",
      "id": "CVE-2026-48059",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48059 affects version 4.1.75.Final-tuxcare.1 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.75.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3a0813b9-10f2-54b3-9a9e-2285d5cb247f",
      "id": "CVE-2026-50010",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50010 affects version 4.1.75.Final-tuxcare.1 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.75.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c53398bf-470d-5d78-ac2d-2802a55052d0",
      "id": "CVE-2026-50011",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50011 affects version 4.1.75.Final-tuxcare.1 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.75.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:13d89d78-56e1-5858-b07a-03f1865a1a79",
      "id": "CVE-2026-50020",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50020 affects version 4.1.75.Final-tuxcare.1 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.75.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:95951d0b-60e1-580b-9b79-02be62d41e9a",
      "id": "CVE-2026-50560",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50560 affects version 4.1.75.Final-tuxcare.1 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.75.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cbdd8ade-9482-5d32-bf5c-cdefbb960573",
      "id": "CVE-2026-55831",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55831 affects version 4.1.75.Final-tuxcare.1 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.75.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3b955d7e-a91c-5012-aeeb-1465d4b8e9aa",
      "id": "CVE-2026-55833",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55833 affects version 4.1.75.Final-tuxcare.1 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.75.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e3b8bc4e-a04b-5a8a-bc27-7de48266b03a",
      "id": "CVE-2026-55851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55851 affects version 4.1.75.Final-tuxcare.1 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.75.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cdc66eb8-517a-514f-b327-7e84e8fee343",
      "id": "CVE-2026-56745",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56745 affects version 4.1.75.Final-tuxcare.1 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.75.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4b76e9f0-8380-56a7-8a11-59e1b1cb7911",
      "id": "CVE-2026-56746",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56746 affects version 4.1.75.Final-tuxcare.1 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.75.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a9fc8a05-c6cd-53d2-9b30-056d785ea512",
      "id": "CVE-2026-56817",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56817 affects version 4.1.75.Final-tuxcare.1 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.75.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a51e4376-36a7-5157-8916-d483870ed56b",
      "id": "CVE-2026-59898",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59898 affects version 4.1.75.Final-tuxcare.1 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.75.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bc6d78f3-6f1e-5021-8b53-e41c3d2f4db2",
      "id": "CVE-2026-59899",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59899 affects version 4.1.75.Final-tuxcare.1 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.75.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4616bb3a-a385-5e52-af19-dba380e55b70",
      "id": "CVE-2026-59900",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59900 affects version 4.1.75.Final-tuxcare.1 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.75.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1f8ef823-b1fb-57f8-aeac-dfae035d2b13",
      "id": "CVE-2026-59901",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59901 affects version 4.1.75.Final-tuxcare.1 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.75.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a72bd91a-d0fe-54f5-9bb2-41d932a5be21",
      "id": "CVE-2026-59919",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59919 affects version 4.1.75.Final-tuxcare.1 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.75.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c71172bc-a859-5476-8f77-aa5a9d4766f8",
      "id": "CVE-2026-59920",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59920 affects version 4.1.75.Final-tuxcare.1 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.75.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d21a3d48-ba65-5a09-94b5-d3a1158d7ff4",
      "id": "CVE-2026-59921",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59921 affects version 4.1.75.Final-tuxcare.1 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.75.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:87384f17-5dc3-5ab3-8bf0-563077a09b01",
      "id": "GHSA-mfg7-5gfp-c4w3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.75.Final-tuxcare.1 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.75.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5c567921-b11f-5257-b9db-170b7cd1ddb7",
      "id": "GHSA-v74w-7mr3-4qg3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.75.Final-tuxcare.1 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.75.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0fa65650-14a0-567d-9106-1a20a6fd743e",
      "id": "GHSA-xpw8-rcwv-8f8p",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-xpw8-rcwv-8f8p is fixed in version 4.1.75.Final-tuxcare.1 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.75.Final-tuxcare.1"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.75.Final-tuxcare.1"
    }
  ]
}