{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:9b8127d9-6fee-5553-9885-1b0515c8db6f",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/io.netty/netty-testsuite@4.1.63.Final-tuxcare.3",
      "type": "library",
      "group": "io.netty",
      "name": "netty-testsuite",
      "version": "4.1.63.Final-tuxcare.3",
      "purl": "pkg:maven/io.netty/netty-testsuite@4.1.63.Final-tuxcare.3"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:09fc86c8-1261-5406-b64a-b5026f4eb550",
      "id": "CVE-2021-37136",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-37136 is fixed in version 4.1.63.Final-tuxcare.3 of io.netty:netty-testsuite."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:717ac280-050a-5320-bb35-c355b9bf519b",
      "id": "CVE-2021-37137",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-37137 is fixed in version 4.1.63.Final-tuxcare.3 of io.netty:netty-testsuite."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d019c534-144c-5124-ba07-5d84adb3549b",
      "id": "CVE-2021-43797",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-43797 is fixed in version 4.1.63.Final-tuxcare.3 of io.netty:netty-testsuite."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d56bfd4c-87ae-5afb-904f-0876a912199e",
      "id": "CVE-2022-24823",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-24823 is fixed in version 4.1.63.Final-tuxcare.3 of io.netty:netty-testsuite."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ba1abe0f-fc16-5e9d-9696-27df0506bce8",
      "id": "CVE-2022-41881",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-41881 is fixed in version 4.1.63.Final-tuxcare.3 of io.netty:netty-testsuite."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:56cc81d5-4cfe-5269-a70f-41f20a3b67f9",
      "id": "CVE-2022-41915",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-41915 is fixed in version 4.1.63.Final-tuxcare.3 of io.netty:netty-testsuite."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bf2d3c29-b536-553f-88d8-d21dcace1ed1",
      "id": "CVE-2023-34462",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-34462 is fixed in version 4.1.63.Final-tuxcare.3 of io.netty:netty-testsuite."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ebf3f23b-abb9-54a1-8c9b-e599dbcb5655",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-44487 is fixed in version 4.1.63.Final-tuxcare.3 of io.netty:netty-testsuite."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0a5850f2-8f0d-5d13-8430-a19b9db0f118",
      "id": "CVE-2023-4586",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2023-4586 is a false positive for io.netty:netty-testsuite 4.1.63.Final-tuxcare.3."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1f09466a-a7a9-5bd8-a792-a67e9223620b",
      "id": "CVE-2024-29025",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-29025 is fixed in version 4.1.63.Final-tuxcare.3 of io.netty:netty-testsuite."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:85126e1c-9796-5c1a-8cb0-74c9490822ff",
      "id": "CVE-2024-47535",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-47535 is fixed in version 4.1.63.Final-tuxcare.3 of io.netty:netty-testsuite."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c51798b9-aa54-56c6-8096-a2439b514020",
      "id": "CVE-2025-24970",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-24970 is fixed in version 4.1.63.Final-tuxcare.3 of io.netty:netty-testsuite."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:75397bb6-adb8-58ba-abe8-0e3f6df6ca66",
      "id": "CVE-2025-25193",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-25193 is fixed in version 4.1.63.Final-tuxcare.3 of io.netty:netty-testsuite."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:743ce571-550d-52cd-bfba-51385a4db6bc",
      "id": "CVE-2025-55163",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55163 is fixed in version 4.1.63.Final-tuxcare.3 of io.netty:netty-testsuite."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:54abb8bf-7960-5d4b-bc68-e605b3189420",
      "id": "CVE-2025-58056",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58056 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-testsuite."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a216bc98-df72-51b7-8fa5-89d5e32b0421",
      "id": "CVE-2025-58057",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-58057 is fixed in version 4.1.63.Final-tuxcare.3 of io.netty:netty-testsuite."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d2d2f6f4-53b0-57c3-836d-2004669cbe46",
      "id": "CVE-2025-59419",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-59419 is fixed in version 4.1.63.Final-tuxcare.3 of io.netty:netty-testsuite."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1ee26d43-5f18-5b0b-896c-b1708743ef52",
      "id": "CVE-2025-67735",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-67735 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-testsuite."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c76b9d56-571e-5627-b9a9-1511474aaf21",
      "id": "CVE-2026-33870",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33870 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-testsuite."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7f7e5078-fafc-59b0-8820-3716fa6f24cf",
      "id": "CVE-2026-33871",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33871 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-testsuite."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c9fa73da-9241-57c9-9e69-9605131a24fc",
      "id": "CVE-2026-41417",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41417 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-testsuite."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d989f900-42d8-503c-8a97-fc64bb5c1be2",
      "id": "CVE-2026-42577",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42577 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-testsuite."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:02dacd1b-42bb-58f6-b866-bf488439c9c2",
      "id": "CVE-2026-42578",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42578 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-testsuite."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5822c750-3e38-5746-9a7e-d3fc936686ab",
      "id": "CVE-2026-42579",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42579 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-testsuite."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1f55a0d8-1bca-58e7-b3f3-00112b0efadf",
      "id": "CVE-2026-42580",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42580 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-testsuite."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a74cf308-ce49-56be-bdaf-dbfdbfa95653",
      "id": "CVE-2026-42581",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42581 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-testsuite."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b37c830e-d470-5b3e-b096-3a8dcf9c245b",
      "id": "CVE-2026-42583",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42583 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-testsuite."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c4a45489-3d65-55eb-8e27-12938dc2fb3e",
      "id": "CVE-2026-42584",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42584 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-testsuite."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:21ec6da8-b364-5216-9322-bea99b471758",
      "id": "CVE-2026-42585",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42585 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-testsuite."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8d7ab4d6-81cd-514f-8965-bd84b2befaad",
      "id": "CVE-2026-42586",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42586 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-testsuite."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:29d09bd6-3de1-5a09-87eb-543ba4b69561",
      "id": "CVE-2026-42587",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42587 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-testsuite."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ccd42ff7-6849-565c-99e3-b1c36735535f",
      "id": "CVE-2026-44248",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44248 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-testsuite."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:403097ef-a994-5897-aafc-9d45395395ad",
      "id": "CVE-2026-44249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44249 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-testsuite."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d5d3dc64-ab4d-524c-b03d-f8373f02a63d",
      "id": "CVE-2026-44250",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44250 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-testsuite."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b38ea11d-9a7e-553d-95e3-f09bd721934f",
      "id": "CVE-2026-44890",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44890 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-testsuite."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:93388b63-205b-5e64-a688-b4b01d6a33d9",
      "id": "CVE-2026-44891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44891 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-testsuite."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f74aa97f-35fc-57ef-9c4a-ec933b7ee3fd",
      "id": "CVE-2026-44893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44893 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-testsuite."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3f52f202-34e0-5ca2-9349-263c4b929dbc",
      "id": "CVE-2026-45416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45416 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-testsuite."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b39a4d6d-b120-5568-998d-69a36e327454",
      "id": "CVE-2026-45536",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45536 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-testsuite."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8d7d6cfe-6d46-5f56-87f9-29ad319b08f3",
      "id": "CVE-2026-45673",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45673 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-testsuite."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:36ef37fb-8d3e-56fd-9030-ef6b08129989",
      "id": "CVE-2026-45674",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45674 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-testsuite."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:eee0aa88-d347-54a5-b489-a653a19edb14",
      "id": "CVE-2026-46340",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-46340 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-testsuite."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:eaf41d52-c55b-51df-8971-c9dfe1884846",
      "id": "CVE-2026-47244",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47244 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-testsuite."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:03774e7f-0990-5824-80b1-87761865ce00",
      "id": "CVE-2026-47691",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47691 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-testsuite."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:13e02992-1405-517b-9b33-3606aff91196",
      "id": "CVE-2026-48006",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48006 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-testsuite."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cd09b6e5-32d1-5761-8fc4-319899272c34",
      "id": "CVE-2026-48043",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48043 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-testsuite."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:49ecfbbb-d86b-5e9d-8d24-2c8395fa0cde",
      "id": "CVE-2026-48059",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48059 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-testsuite."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f65cf64f-ad44-52cb-b468-233b3806bf63",
      "id": "CVE-2026-50010",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50010 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-testsuite."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:156a036a-cb12-5809-aa25-3bb5515cde18",
      "id": "CVE-2026-50011",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50011 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-testsuite."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d2ae3c0f-6512-5f90-90f5-7fddf72eecf5",
      "id": "CVE-2026-50020",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50020 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-testsuite."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9042beed-4677-599c-ba00-b1a49090b0c9",
      "id": "CVE-2026-50560",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50560 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-testsuite."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c2bfb6e9-83ab-58ec-820b-20ea109a47c1",
      "id": "CVE-2026-55831",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55831 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-testsuite."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:56de91ce-6538-570f-9924-1e6d11193152",
      "id": "CVE-2026-55833",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55833 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-testsuite."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:edaf2cdf-40ab-541b-a252-943edcb48f79",
      "id": "CVE-2026-55851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55851 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-testsuite."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:48cc004d-6043-52d6-899d-a82a844429d4",
      "id": "CVE-2026-56745",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56745 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-testsuite."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1cfb6325-2ff9-5e8b-b328-874727ec59cb",
      "id": "CVE-2026-56746",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56746 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-testsuite."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:873aaaad-856a-5fd5-98a3-8ed5e6dfa449",
      "id": "CVE-2026-56817",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-56817 does not affect version 4.1.63.Final-tuxcare.3 of io.netty:netty-testsuite. not_affected \u2014 The Netty codec-xml module contains XmlDecoder, which instantiates an Aalto XML parser without security configuration (line 38: new InputFactoryImpl() with no XXE protection). However, this is a library component that Netty itself does not use in its own production code. The vulnerability only manifests when downstream applications explicitly add XmlDecoder to their Netty channel pipelines. Per..."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ca2b9ab1-b027-5b61-bdfc-211b8979ace7",
      "id": "CVE-2026-59898",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59898 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-testsuite."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4993a713-6870-5102-bcdf-f2b42596d84f",
      "id": "CVE-2026-59899",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59899 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-testsuite."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:56c45df8-fcdc-5f69-8be7-a229e7f14881",
      "id": "CVE-2026-59900",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59900 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-testsuite."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c4c9cedf-e8d8-5f70-baf7-414a9fc6d195",
      "id": "CVE-2026-59901",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59901 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-testsuite."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7160b1ad-f2d8-5ca7-94c7-1e08b6cbac8e",
      "id": "CVE-2026-59919",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59919 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-testsuite."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:74d6ff3b-034f-50f9-80a3-d7f1f4b34136",
      "id": "CVE-2026-59920",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59920 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-testsuite."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:25993380-61d3-5ad4-9d4a-1f3e4632c199",
      "id": "CVE-2026-59921",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59921 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-testsuite."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:78691a52-80b4-541b-a58d-1ade7b9fb30e",
      "id": "GHSA-mfg7-5gfp-c4w3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-testsuite."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e860f0ae-d54d-51a5-8dfd-b5a3f3abd611",
      "id": "GHSA-v74w-7mr3-4qg3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-testsuite."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a095548b-d5cf-5b8e-9faf-164605e16ad4",
      "id": "GHSA-xpw8-rcwv-8f8p",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-xpw8-rcwv-8f8p affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-testsuite."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite@4.1.63.Final-tuxcare.3"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.netty/netty-testsuite@4.1.63.Final-tuxcare.3"
    }
  ]
}