{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:5596e6d4-e0b9-5464-9303-56cd066468f7",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/io.netty/netty-parent@4.1.92.Final-tuxcare.2",
      "type": "library",
      "group": "io.netty",
      "name": "netty-parent",
      "version": "4.1.92.Final-tuxcare.2",
      "purl": "pkg:maven/io.netty/netty-parent@4.1.92.Final-tuxcare.2"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:cfad0505-85a5-5b9f-bc32-2cf62b390bdd",
      "id": "CVE-2023-34462",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-34462 is fixed in version 4.1.92.Final-tuxcare.2 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:129e28ba-f4cb-5bbe-857f-1c76a0bd514f",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-44487 is fixed in version 4.1.92.Final-tuxcare.2 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bb03b90b-6892-514a-90f6-af3f59ae913c",
      "id": "CVE-2023-4586",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2023-4586 is a false positive for io.netty:netty-parent 4.1.92.Final-tuxcare.2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0cd98985-47b2-51f9-ac21-b36223908f2b",
      "id": "CVE-2024-29025",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-29025 is fixed in version 4.1.92.Final-tuxcare.2 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a0ee8444-d6bb-5838-98ec-6b42fdfd3c00",
      "id": "CVE-2024-47535",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-47535 is fixed in version 4.1.92.Final-tuxcare.2 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fcce3cc1-1078-59a3-87a7-a85594253fa2",
      "id": "CVE-2025-24970",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-24970 is fixed in version 4.1.92.Final-tuxcare.2 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:035317f5-3772-51ca-95ab-fad93c25e58b",
      "id": "CVE-2025-25193",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-25193 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2ce05256-e902-587a-8dd9-4790a5aa8656",
      "id": "CVE-2025-55163",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55163 is fixed in version 4.1.92.Final-tuxcare.2 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7398531e-073a-5bf2-8739-0904595673cd",
      "id": "CVE-2025-58056",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-58056 is fixed in version 4.1.92.Final-tuxcare.2 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:97f2c4d8-eb6f-5881-ac1f-57568c804e90",
      "id": "CVE-2025-58057",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58057 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:099c6411-ef23-554a-ba89-84bee26aa3c2",
      "id": "CVE-2025-59419",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-59419 is fixed in version 4.1.92.Final-tuxcare.2 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:88370006-ae4f-5a60-9740-6cc6d75ae8d1",
      "id": "CVE-2025-67735",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-67735 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0386d72a-8730-5519-9a2d-811e5c78f0e9",
      "id": "CVE-2026-33870",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-33870 is fixed in version 4.1.92.Final-tuxcare.2 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:763435d3-c838-549c-9644-ea0237237422",
      "id": "CVE-2026-33871",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33871 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e6d42cbb-4b9b-5c91-b91f-8c2a3880a86e",
      "id": "CVE-2026-41417",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41417 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ba2ca4a2-ee06-5280-a1dd-d9561e1cf4e1",
      "id": "CVE-2026-42577",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42577 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9c8d0b9d-b6be-5cdf-b229-ff3b9d742499",
      "id": "CVE-2026-42578",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42578 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fc6c00c0-b3fc-531c-97ee-1dd383ef2089",
      "id": "CVE-2026-42579",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42579 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1f3123b8-ce3e-5858-ae3a-d6764bcc3d3e",
      "id": "CVE-2026-42580",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42580 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:15b95622-ceda-5f83-9c5f-0b94b3a13311",
      "id": "CVE-2026-42581",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42581 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:52c0c6f3-f000-5bab-a732-88a1ca502f17",
      "id": "CVE-2026-42583",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42583 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:69312d5e-bfe4-5d32-91f0-da12c62dcecc",
      "id": "CVE-2026-42584",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42584 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:42e097af-2d0e-5bb6-b938-24e9023fcf71",
      "id": "CVE-2026-42585",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42585 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5369e550-865b-58e0-b3e4-9524b860f8f6",
      "id": "CVE-2026-42586",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42586 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0dbfe821-13a4-5410-8edc-7196713f4e72",
      "id": "CVE-2026-42587",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42587 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3d70fe9e-e45f-506f-9d05-981d7fbd03ac",
      "id": "CVE-2026-44248",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44248 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bc7ef94f-28b7-5855-83de-85bf20804111",
      "id": "CVE-2026-44249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44249 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:709401aa-33bb-5ec5-96ba-ebf599d32fb0",
      "id": "CVE-2026-44250",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44250 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:149542e1-e23c-51c0-b017-20d8ce61fb84",
      "id": "CVE-2026-44890",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44890 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:72cea666-bc13-53ea-83d2-e0bb37a581ea",
      "id": "CVE-2026-44891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44891 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:817e44c1-8a76-5d02-b0cc-84eb02401b9e",
      "id": "CVE-2026-44893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44893 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b3c1c61e-7391-5fdf-bd91-bbc6f98bc206",
      "id": "CVE-2026-45416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45416 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b3d5cf9f-748a-5674-8de6-47df4d6475cd",
      "id": "CVE-2026-45536",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45536 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:13c8031b-75d5-5efc-a9e7-4423f70cbe28",
      "id": "CVE-2026-45673",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45673 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e945c4c2-96b9-57bd-90d2-eb9e29f45e97",
      "id": "CVE-2026-45674",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45674 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:60a47c1a-dbbf-51dc-b717-5c64e0f14d3f",
      "id": "CVE-2026-46340",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-46340 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fe674af9-b793-5550-ba80-0c11fcc1f8b8",
      "id": "CVE-2026-47244",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47244 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9d89c459-870e-545b-9b3b-b0172b1ef1bf",
      "id": "CVE-2026-47691",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47691 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bfdc398b-3b73-5c85-b69e-54fa050eafca",
      "id": "CVE-2026-48006",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48006 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f7ade3ad-e306-5e41-b860-88ad98e4808d",
      "id": "CVE-2026-48043",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-48043 does not affect version 4.1.92.Final-tuxcare.2 of io.netty:netty-parent. not_affected \u2014 The target repository (Netty 4.1.92.Final-tuxcare.3) is not affected by CVE-2026-48043. The vulnerability exists in a newer architectural pattern (ChannelInboundHandlerAdapter-based decompression handling) that was introduced after version 4.1.92. The target uses an older architecture that processes HTTP/2 decompression directly in the onDataRead() method with existing try-finally protection."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6628d54c-af7d-512d-8219-41c65ff5cf36",
      "id": "CVE-2026-48059",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48059 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2603ecfb-5a8e-5301-b34f-1dd751f3ef5c",
      "id": "CVE-2026-50010",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50010 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:36afc7ec-7d87-5b55-a051-a3f05c466ec6",
      "id": "CVE-2026-50011",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50011 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4fa6094e-9741-5166-84f8-e2d95261186b",
      "id": "CVE-2026-50020",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50020 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:77cc099e-5af3-5d89-b923-fa6a035a6a47",
      "id": "CVE-2026-50560",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50560 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:caeda6a6-2d78-5f54-a726-a206c247388c",
      "id": "CVE-2026-55831",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55831 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:36d23a59-9ae0-53a1-a104-c8d993520698",
      "id": "CVE-2026-55833",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55833 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4e8be9a1-4679-5079-af64-605f1b0f93b1",
      "id": "CVE-2026-55851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55851 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1992ca1c-9908-5377-af58-659c8c9f4e57",
      "id": "CVE-2026-56745",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56745 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:94a10968-49f8-5c71-9c09-f975333d0848",
      "id": "CVE-2026-56746",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56746 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:28e1e60f-c873-5583-a713-0e106382f54e",
      "id": "CVE-2026-56817",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56817 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c33a643f-2ab4-5702-84a7-11ceccd31c77",
      "id": "CVE-2026-56820",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56820 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:58b78f0a-513b-50f9-bde8-7357f77baef5",
      "id": "CVE-2026-56821",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56821 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2c802d41-0f53-5b87-995a-e8237617ea0e",
      "id": "CVE-2026-56822",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56822 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e4ab7092-3c7f-51e6-8603-2333a2ad8e6b",
      "id": "CVE-2026-59898",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59898 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f700c8d9-ec80-5740-85da-ac3ad77ff08f",
      "id": "CVE-2026-59899",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59899 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:40f15f8f-24ac-5267-a23f-72db3f8eb50b",
      "id": "CVE-2026-59900",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59900 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b16f16f1-bf49-54da-b061-9e1a897e71fa",
      "id": "CVE-2026-59901",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59901 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f5dc0055-703a-516c-b4c9-e63f260e6b2e",
      "id": "CVE-2026-59919",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59919 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3ecdb8a1-df86-5c16-9ab4-43b496e65c49",
      "id": "CVE-2026-59920",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59920 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:eccef673-1d23-520f-a0ce-c46f3176a2bc",
      "id": "CVE-2026-59921",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59921 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ef0f2d3c-f257-5b77-af9a-9839976e99f8",
      "id": "GHSA-mfg7-5gfp-c4w3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:93abf02b-d9a7-5bb4-ad43-300c5648db14",
      "id": "GHSA-v74w-7mr3-4qg3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2803a4af-e6c7-551c-8e75-2c11c96889ae",
      "id": "GHSA-xpw8-rcwv-8f8p",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability GHSA-xpw8-rcwv-8f8p does not affect version 4.1.92.Final-tuxcare.2 of io.netty:netty-parent. The version is not vulnerable. [terminalized not_affected from patch_application_manual/not_vulnerable]"
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.92.Final-tuxcare.2"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.netty/netty-parent@4.1.92.Final-tuxcare.2"
    }
  ]
}