{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:3fa38c3d-6c85-51a9-b96e-1ef7db410c03",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/io.netty/netty-testsuite-native-image-client@4.1.63.Final-tuxcare.1",
      "type": "library",
      "group": "io.netty",
      "name": "netty-testsuite-native-image-client",
      "version": "4.1.63.Final-tuxcare.1",
      "purl": "pkg:maven/io.netty/netty-testsuite-native-image-client@4.1.63.Final-tuxcare.1"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:d82275b4-2f4e-5892-b543-8747eb208cf9",
      "id": "CVE-2021-37136",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-37136 is fixed in version 4.1.63.Final-tuxcare.1 of io.netty:netty-testsuite-native-image-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7eda5a3f-33a6-5477-ac78-c54756aeacb5",
      "id": "CVE-2021-37137",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-37137 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-testsuite-native-image-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9671709a-dc3a-5a73-84b0-bcb9fab6fe8d",
      "id": "CVE-2021-43797",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-43797 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-testsuite-native-image-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f1b7d88c-7a3c-54b5-90fb-5149f801c0ed",
      "id": "CVE-2022-24823",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-24823 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-testsuite-native-image-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b39c72e2-b75d-5600-9a45-161a881d58de",
      "id": "CVE-2022-41881",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-41881 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-testsuite-native-image-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9ef1d02b-d1bf-5fb8-857c-f01763ceb33c",
      "id": "CVE-2022-41915",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-41915 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-testsuite-native-image-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7fabff27-24ff-5fc7-a05c-ce441da11a4b",
      "id": "CVE-2023-34462",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-34462 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-testsuite-native-image-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b1ed7e6a-e7de-54e5-920b-035baf49a981",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-44487 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-testsuite-native-image-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:31e9d4f2-ab09-5c76-8f37-2b7d7509dfe2",
      "id": "CVE-2023-4586",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2023-4586 is a false positive for io.netty:netty-testsuite-native-image-client 4.1.63.Final-tuxcare.1."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b7262275-e9ec-5580-893a-2515df8e077f",
      "id": "CVE-2024-29025",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-29025 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-testsuite-native-image-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2ab70a0e-b6b5-502d-ac11-24ada5ef6349",
      "id": "CVE-2024-47535",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-47535 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-testsuite-native-image-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ad85aa4b-36ed-5a1c-a22f-1c51288d8537",
      "id": "CVE-2025-24970",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-24970 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-testsuite-native-image-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:900b8c38-5877-5ca0-922f-698f441cf154",
      "id": "CVE-2025-25193",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-25193 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-testsuite-native-image-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a8f74c15-87ed-5ae3-bc91-212e09627f54",
      "id": "CVE-2025-55163",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-55163 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-testsuite-native-image-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3508ea94-61df-5723-9d50-1f3ba0c470cf",
      "id": "CVE-2025-58056",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58056 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-testsuite-native-image-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:146253eb-8c0a-5bd4-b549-6ceb83238042",
      "id": "CVE-2025-58057",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58057 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-testsuite-native-image-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:aedc1c5f-a8e9-534c-b484-24ea098324c1",
      "id": "CVE-2025-59419",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-59419 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-testsuite-native-image-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0f1cb214-07fc-510d-ab7f-a6c7aea60533",
      "id": "CVE-2025-67735",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-67735 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-testsuite-native-image-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7d6309e6-e3ce-5aa5-b9ef-4e30aa5b4db0",
      "id": "CVE-2026-33870",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33870 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-testsuite-native-image-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0bbd09be-9a13-54b0-a4d2-272e90225c00",
      "id": "CVE-2026-33871",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33871 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-testsuite-native-image-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e97c83d6-af57-5cff-9224-03cfbbf29287",
      "id": "CVE-2026-41417",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41417 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-testsuite-native-image-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ee9a5b1d-dbca-5a68-b0f0-6d8e589cb265",
      "id": "CVE-2026-42577",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42577 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-testsuite-native-image-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fe8e16da-0df9-5fc2-a448-52ea5144d3be",
      "id": "CVE-2026-42578",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42578 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-testsuite-native-image-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3ba8003d-ac55-56d4-b510-987957bb82e1",
      "id": "CVE-2026-42579",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42579 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-testsuite-native-image-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f3c2498b-0354-525c-932e-f6d13f40f6fa",
      "id": "CVE-2026-42580",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42580 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-testsuite-native-image-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d8f887d8-6ca8-58d0-ab3a-fcd3ec9061bf",
      "id": "CVE-2026-42581",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42581 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-testsuite-native-image-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:38161d92-fbcd-5f36-ac8c-a91efe0f4efc",
      "id": "CVE-2026-42583",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42583 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-testsuite-native-image-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f7f21f0b-60b1-55c1-86c6-dd7bd893cfc3",
      "id": "CVE-2026-42584",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42584 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-testsuite-native-image-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1cf7d950-98cd-50c2-a91c-0217a6ae8cd3",
      "id": "CVE-2026-42585",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42585 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-testsuite-native-image-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f2831374-531f-5e5f-b584-67fcc33be51c",
      "id": "CVE-2026-42586",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42586 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-testsuite-native-image-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ebf4c802-4fa2-5b9f-91a0-39f83d74a15a",
      "id": "CVE-2026-42587",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42587 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-testsuite-native-image-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c40825cd-a3ee-544c-bdc4-a09572764954",
      "id": "CVE-2026-44248",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44248 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-testsuite-native-image-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c2f610ff-cb53-5a61-8836-dda132d5cb18",
      "id": "CVE-2026-44249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44249 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-testsuite-native-image-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:50645251-9562-5c55-bf72-abdbf2181cc0",
      "id": "CVE-2026-44250",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44250 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-testsuite-native-image-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6e355733-364c-5380-a0a5-9839cafeb026",
      "id": "CVE-2026-44890",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44890 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-testsuite-native-image-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bf377ce4-93f7-5ddb-9fb8-a58c0cf19d02",
      "id": "CVE-2026-44891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44891 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-testsuite-native-image-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:04f6604b-5899-5c71-a56b-4d1996f34266",
      "id": "CVE-2026-44893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44893 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-testsuite-native-image-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6b48d05d-9d8d-5b2c-b0bd-7e8731ac5058",
      "id": "CVE-2026-45416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45416 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-testsuite-native-image-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5d992e14-fea9-52c6-ab08-7d5f3fb08c84",
      "id": "CVE-2026-45536",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45536 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-testsuite-native-image-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7722d91f-1da5-56a2-b823-cda0da4e8af4",
      "id": "CVE-2026-45673",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45673 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-testsuite-native-image-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5c25606e-3906-53a0-9e1f-251c332421f0",
      "id": "CVE-2026-45674",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45674 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-testsuite-native-image-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:10a276da-032d-500e-8180-4bd3bd1eb016",
      "id": "CVE-2026-46340",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-46340 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-testsuite-native-image-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:00d3d8cb-fdc2-518e-bbad-b6add3017fcd",
      "id": "CVE-2026-47244",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47244 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-testsuite-native-image-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1f1d1a94-8491-5e98-8226-c8a7cf26aec0",
      "id": "CVE-2026-47691",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47691 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-testsuite-native-image-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a57f858d-a02c-584f-a16a-986b6a3e3774",
      "id": "CVE-2026-48006",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48006 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-testsuite-native-image-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b2056e18-c675-50cc-bbee-02c1b687c628",
      "id": "CVE-2026-48043",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48043 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-testsuite-native-image-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c6236380-ce41-5c46-abb6-4ccc8159ed9c",
      "id": "CVE-2026-48059",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48059 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-testsuite-native-image-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0e56f241-4f36-5c79-9bc1-8b4627452bfb",
      "id": "CVE-2026-50010",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50010 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-testsuite-native-image-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5865003e-9d67-5eb2-ab6a-2686c4a6bd76",
      "id": "CVE-2026-50011",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50011 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-testsuite-native-image-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:49eacd2b-51e8-522b-821a-ea71ad942e1b",
      "id": "CVE-2026-50020",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50020 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-testsuite-native-image-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9a708f1e-9124-52f1-8753-4a1c45e0ff0d",
      "id": "CVE-2026-50560",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50560 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-testsuite-native-image-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:acc64913-6331-5fff-ae8e-05831fe82ae9",
      "id": "CVE-2026-55831",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55831 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-testsuite-native-image-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:91fb4a66-20a4-57c7-9021-1d64d34018fa",
      "id": "CVE-2026-55833",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55833 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-testsuite-native-image-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:90efa0bf-7c42-5570-b598-664b68ec6677",
      "id": "CVE-2026-55851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55851 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-testsuite-native-image-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:be42e524-eb99-54cc-867a-db36fb47692a",
      "id": "CVE-2026-56745",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56745 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-testsuite-native-image-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:497d12cf-fd89-5a12-a82e-a20fdc3730c7",
      "id": "CVE-2026-56746",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56746 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-testsuite-native-image-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1bc44b25-9082-5ef4-8448-c678fed2aae5",
      "id": "CVE-2026-56817",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-56817 does not affect version 4.1.63.Final-tuxcare.1 of io.netty:netty-testsuite-native-image-client. not_affected \u2014 The Netty codec-xml module contains XmlDecoder, which instantiates an Aalto XML parser without security configuration (line 38: new InputFactoryImpl() with no XXE protection). However, this is a library component that Netty itself does not use in its own production code. The vulnerability only manifests when downstream applications explicitly add XmlDecoder to their Netty channel pipelines. Per..."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dcc58ad6-e9fc-5393-858e-428986f8b499",
      "id": "CVE-2026-59898",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59898 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-testsuite-native-image-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4dd19c6d-fe44-5b49-8a63-c2928065cacc",
      "id": "CVE-2026-59899",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59899 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-testsuite-native-image-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a5751e82-7207-59ec-8816-9d757d0f9bc6",
      "id": "CVE-2026-59900",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59900 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-testsuite-native-image-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:98839232-b135-5e1d-a75f-d600a4313a4c",
      "id": "CVE-2026-59901",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59901 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-testsuite-native-image-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d6ae758c-3cec-5383-ad39-07820d8d145b",
      "id": "CVE-2026-59919",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59919 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-testsuite-native-image-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:df3f64e1-7be0-5ba1-b57b-c5bf4d0d8c73",
      "id": "CVE-2026-59920",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59920 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-testsuite-native-image-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:130174b3-0258-5fc2-8395-d9871173acb9",
      "id": "CVE-2026-59921",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59921 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-testsuite-native-image-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:39e1f5ba-5120-5d87-99e0-ddb64b2a1c4a",
      "id": "GHSA-mfg7-5gfp-c4w3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-testsuite-native-image-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9ddb60d2-d7d7-568c-88ac-a6007b6e5843",
      "id": "GHSA-v74w-7mr3-4qg3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-testsuite-native-image-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:938e02dc-aeaf-5f53-b415-21c52b80ce49",
      "id": "GHSA-xpw8-rcwv-8f8p",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-xpw8-rcwv-8f8p affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-testsuite-native-image-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client@4.1.63.Final-tuxcare.1"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client@4.1.63.Final-tuxcare.1"
    }
  ]
}