{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:88b121ed-36c7-5261-ab17-3a8ca0ac2298",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/io.netty/netty-testsuite-native@4.1.63.Final-tuxcare.2",
      "type": "library",
      "group": "io.netty",
      "name": "netty-testsuite-native",
      "version": "4.1.63.Final-tuxcare.2",
      "purl": "pkg:maven/io.netty/netty-testsuite-native@4.1.63.Final-tuxcare.2"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:5822dc07-556f-5bf3-8ace-35842273fd8b",
      "id": "CVE-2021-37136",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-37136 is fixed in version 4.1.63.Final-tuxcare.2 of io.netty:netty-testsuite-native."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:604cccdb-2ec1-523f-99fa-641d2ad16b44",
      "id": "CVE-2021-37137",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-37137 is fixed in version 4.1.63.Final-tuxcare.2 of io.netty:netty-testsuite-native."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b584163d-c11e-5eec-8278-20be33e254d3",
      "id": "CVE-2021-43797",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-43797 is fixed in version 4.1.63.Final-tuxcare.2 of io.netty:netty-testsuite-native."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:eb37a4f0-8b11-5faa-9ee0-07361c3456f8",
      "id": "CVE-2022-24823",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-24823 is fixed in version 4.1.63.Final-tuxcare.2 of io.netty:netty-testsuite-native."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:30fe03b2-d75b-5e67-b2e1-d389387c1060",
      "id": "CVE-2022-41881",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-41881 is fixed in version 4.1.63.Final-tuxcare.2 of io.netty:netty-testsuite-native."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1c3fab42-f689-5caa-85cd-4bb3a6a56609",
      "id": "CVE-2022-41915",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-41915 is fixed in version 4.1.63.Final-tuxcare.2 of io.netty:netty-testsuite-native."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ecf638ed-6888-553a-8443-c64999c54dd7",
      "id": "CVE-2023-34462",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-34462 is fixed in version 4.1.63.Final-tuxcare.2 of io.netty:netty-testsuite-native."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:51db93ef-4a14-5658-babf-312ea8b26839",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-44487 is fixed in version 4.1.63.Final-tuxcare.2 of io.netty:netty-testsuite-native."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:637fba5c-59ac-5e45-a265-dd900471534a",
      "id": "CVE-2023-4586",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2023-4586 is a false positive for io.netty:netty-testsuite-native 4.1.63.Final-tuxcare.2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:39bdd393-4a9a-5e77-873d-222852622bf3",
      "id": "CVE-2024-29025",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-29025 is fixed in version 4.1.63.Final-tuxcare.2 of io.netty:netty-testsuite-native."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:94edfc44-3078-58b2-bee3-6b3552eb27ce",
      "id": "CVE-2024-47535",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-47535 is fixed in version 4.1.63.Final-tuxcare.2 of io.netty:netty-testsuite-native."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3df182d1-c041-5fff-a726-2804187a017e",
      "id": "CVE-2025-24970",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-24970 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-testsuite-native."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e4bb3bb6-8f5e-50f9-bed5-759a54762e96",
      "id": "CVE-2025-25193",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-25193 is fixed in version 4.1.63.Final-tuxcare.2 of io.netty:netty-testsuite-native."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2fcacb73-7e71-5c65-be23-4fc35e88227a",
      "id": "CVE-2025-55163",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55163 is fixed in version 4.1.63.Final-tuxcare.2 of io.netty:netty-testsuite-native."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bbadc61f-8ae6-5c8c-81f5-253c1dd2143b",
      "id": "CVE-2025-58056",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58056 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-testsuite-native."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4a3619bf-61ec-5e00-a2c2-8ecbd8b0b890",
      "id": "CVE-2025-58057",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-58057 is fixed in version 4.1.63.Final-tuxcare.2 of io.netty:netty-testsuite-native."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:92ccbfbb-d5b3-593b-ae47-700dda98eb67",
      "id": "CVE-2025-59419",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-59419 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-testsuite-native."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:22fcaa3b-4e7e-5c75-a367-e28fcf7481f9",
      "id": "CVE-2025-67735",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-67735 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-testsuite-native."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:550ff5b0-a99c-5f7d-9df1-1799e472d92a",
      "id": "CVE-2026-33870",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33870 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-testsuite-native."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2b89d41a-846c-590e-9e3a-0a25e5b08349",
      "id": "CVE-2026-33871",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33871 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-testsuite-native."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2cd7a339-39b1-530e-9b25-769a33f63f25",
      "id": "CVE-2026-41417",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41417 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-testsuite-native."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7dd150d9-5043-5b48-acd7-af25a2873041",
      "id": "CVE-2026-42577",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42577 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-testsuite-native."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f40ba8ef-4492-5e65-bb54-b0557d51818c",
      "id": "CVE-2026-42578",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42578 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-testsuite-native."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c907a89b-1e19-5f0a-875f-de792006f559",
      "id": "CVE-2026-42579",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42579 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-testsuite-native."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9144c020-a202-546f-bea9-60d5e6c52d8f",
      "id": "CVE-2026-42580",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42580 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-testsuite-native."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dac1b573-7947-511c-ba92-6cef2c4b4480",
      "id": "CVE-2026-42581",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42581 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-testsuite-native."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:90b766e9-83bb-5e75-b615-c84f1c83f273",
      "id": "CVE-2026-42583",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42583 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-testsuite-native."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9d7304e4-6e64-59c2-86b6-6e4496dfcd52",
      "id": "CVE-2026-42584",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42584 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-testsuite-native."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3947e331-b73c-569d-b0cd-04ef0ca95350",
      "id": "CVE-2026-42585",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42585 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-testsuite-native."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fe2a9283-e162-5f45-917e-76b206c87a64",
      "id": "CVE-2026-42586",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42586 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-testsuite-native."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4a70ae24-687a-5450-9f52-8caa1d923dce",
      "id": "CVE-2026-42587",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42587 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-testsuite-native."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ee7d5dc3-cc42-5bc6-afdc-0bf4e4888b9d",
      "id": "CVE-2026-44248",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44248 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-testsuite-native."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:29bb434f-2947-574e-be1b-39ae9d9abd8c",
      "id": "CVE-2026-44249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44249 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-testsuite-native."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d84f1346-335f-5ffd-a523-ade7afce032d",
      "id": "CVE-2026-44250",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44250 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-testsuite-native."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:955fe58a-6721-5089-8ea0-ebc85ec1ba4a",
      "id": "CVE-2026-44890",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44890 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-testsuite-native."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:73e4f8f4-8d2a-51b9-9a2b-6995877861a9",
      "id": "CVE-2026-44891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44891 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-testsuite-native."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b8900983-1d62-572f-b0c6-d64a2066af29",
      "id": "CVE-2026-44893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44893 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-testsuite-native."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:439c359c-7d07-54a8-a4eb-9279dc8a9b48",
      "id": "CVE-2026-45416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45416 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-testsuite-native."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:26cc30ba-3296-5410-8736-36f018befc69",
      "id": "CVE-2026-45536",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45536 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-testsuite-native."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:da43dbe2-a563-5fea-aa88-44f6cf24e746",
      "id": "CVE-2026-45673",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45673 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-testsuite-native."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dab3a5d3-174d-582d-80ec-b9e16c79122c",
      "id": "CVE-2026-45674",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45674 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-testsuite-native."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5429cbe4-335d-5c24-858d-7279d2007cd4",
      "id": "CVE-2026-46340",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-46340 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-testsuite-native."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:578db3ff-f750-5891-9562-15fa68dbd768",
      "id": "CVE-2026-47244",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47244 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-testsuite-native."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5fd3e2ea-42b8-51ac-9d65-5ffcc98cbdcc",
      "id": "CVE-2026-47691",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47691 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-testsuite-native."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c340029a-81c3-5503-a926-22f1e25f7b56",
      "id": "CVE-2026-48006",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48006 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-testsuite-native."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4d6168c5-737b-5b64-ab54-62f1fed4602c",
      "id": "CVE-2026-48043",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48043 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-testsuite-native."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e4dc7a8b-d942-5797-96fe-37064064e88d",
      "id": "CVE-2026-48059",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48059 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-testsuite-native."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0f2e129a-bfb7-53d6-bc93-928e8dbed85a",
      "id": "CVE-2026-50010",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50010 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-testsuite-native."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0b426d48-15f7-5d1f-b70f-520c4bdb399e",
      "id": "CVE-2026-50011",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50011 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-testsuite-native."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:760a32f2-1b99-5789-87de-407e970a3334",
      "id": "CVE-2026-50020",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50020 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-testsuite-native."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:56dc9d87-4f9d-5cae-8b89-bab18d990ffc",
      "id": "CVE-2026-50560",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50560 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-testsuite-native."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0e26c98a-3a29-5218-80ef-78122aeb72b8",
      "id": "CVE-2026-55831",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55831 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-testsuite-native."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f2f57641-e9ad-5377-9f24-57aaae714f5b",
      "id": "CVE-2026-55833",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55833 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-testsuite-native."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cb1aa300-60d5-5ee1-a3fa-2863334753ca",
      "id": "CVE-2026-55851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55851 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-testsuite-native."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f5983b63-648c-561f-ba91-e395fcef9b7d",
      "id": "CVE-2026-56745",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56745 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-testsuite-native."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:70512b86-e048-5ef6-a4ae-a7cb07e81e3b",
      "id": "CVE-2026-56746",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56746 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-testsuite-native."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d7c52259-40c8-5c88-8140-c995a6db591d",
      "id": "CVE-2026-56817",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-56817 does not affect version 4.1.63.Final-tuxcare.2 of io.netty:netty-testsuite-native. not_affected \u2014 The Netty codec-xml module contains XmlDecoder, which instantiates an Aalto XML parser without security configuration (line 38: new InputFactoryImpl() with no XXE protection). However, this is a library component that Netty itself does not use in its own production code. The vulnerability only manifests when downstream applications explicitly add XmlDecoder to their Netty channel pipelines. Per..."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:03fcf5fa-a41e-5689-b437-30e42b716914",
      "id": "CVE-2026-59898",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59898 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-testsuite-native."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e4a183ef-a5b3-52c2-83e5-a0c5b635d1b6",
      "id": "CVE-2026-59899",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59899 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-testsuite-native."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:da0ecfe7-673a-5d31-8d9c-3d86a4e126e9",
      "id": "CVE-2026-59900",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59900 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-testsuite-native."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0794b837-5ece-5e85-b54c-be8fec85de44",
      "id": "CVE-2026-59901",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59901 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-testsuite-native."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:38681fad-0fe1-54ad-a4ef-d5fef42bf18d",
      "id": "CVE-2026-59919",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59919 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-testsuite-native."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:74c8dc8a-d476-5f9f-bff3-5385c98920bc",
      "id": "CVE-2026-59920",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59920 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-testsuite-native."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a38ce1ac-b6e4-579a-9653-31fb0dc792a5",
      "id": "CVE-2026-59921",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59921 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-testsuite-native."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1575aa9e-87e5-5351-ab36-e6889ce6c78f",
      "id": "GHSA-mfg7-5gfp-c4w3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-testsuite-native."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:89021a2d-7c25-5e6b-9935-fb32a901cabd",
      "id": "GHSA-v74w-7mr3-4qg3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-testsuite-native."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d9e8e3a5-26bb-5d09-b9a1-5caf39322c6a",
      "id": "GHSA-xpw8-rcwv-8f8p",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-xpw8-rcwv-8f8p affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-testsuite-native."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native@4.1.63.Final-tuxcare.2"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.netty/netty-testsuite-native@4.1.63.Final-tuxcare.2"
    }
  ]
}