{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:d4adef0a-0aad-5354-9e57-e0347e526966",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/io.netty/netty-bom@4.1.75.Final-tuxcare.4",
      "type": "library",
      "group": "io.netty",
      "name": "netty-bom",
      "version": "4.1.75.Final-tuxcare.4",
      "purl": "pkg:maven/io.netty/netty-bom@4.1.75.Final-tuxcare.4"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:b54e22d8-5351-5ef0-b829-67bfe1591b8a",
      "id": "CVE-2022-24823",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-24823 is fixed in version 4.1.75.Final-tuxcare.4 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:51f89269-26a6-5a28-8439-5b844e93513d",
      "id": "CVE-2022-41881",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-41881 is fixed in version 4.1.75.Final-tuxcare.4 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fd040c67-5bae-5c65-a8bc-ec0985ee6eec",
      "id": "CVE-2022-41915",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-41915 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8d473b83-7b07-5966-9335-f1af377f1c81",
      "id": "CVE-2023-34462",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-34462 is fixed in version 4.1.75.Final-tuxcare.4 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e9b8ad72-a005-5dfa-93e6-f4335c8451b8",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-44487 is fixed in version 4.1.75.Final-tuxcare.4 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8c47c7ff-b3ed-50af-9710-3b574e468e80",
      "id": "CVE-2023-4586",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2023-4586 is a false positive for io.netty:netty-bom 4.1.75.Final-tuxcare.4."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9d4bed92-9aa4-5115-8f52-2ec8ca52c66c",
      "id": "CVE-2024-29025",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-29025 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:72bd4928-1ab2-5d1d-a0ac-4a6735ea7563",
      "id": "CVE-2024-47535",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-47535 is fixed in version 4.1.75.Final-tuxcare.4 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bca411d1-c308-5496-bcde-d2729f9b1b54",
      "id": "CVE-2025-24970",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-24970 is fixed in version 4.1.75.Final-tuxcare.4 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8c95e9ce-84d0-58cb-b9e1-18907a45ed72",
      "id": "CVE-2025-25193",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-25193 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f96595d1-c980-5c84-9d19-0ac7d9a29e3f",
      "id": "CVE-2025-55163",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-55163 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8b0490b1-5545-5102-a98a-b8b1f35d36f5",
      "id": "CVE-2025-58056",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-58056 is fixed in version 4.1.75.Final-tuxcare.4 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:25d8092e-4ed2-5d85-8fe4-23b319f6179e",
      "id": "CVE-2025-58057",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58057 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f944830a-d5e4-5d20-badc-85ccf8bf0393",
      "id": "CVE-2025-59419",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-59419 is fixed in version 4.1.75.Final-tuxcare.4 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:330c2262-5dcb-5762-836b-020124884d8a",
      "id": "CVE-2025-67735",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-67735 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4e313744-e785-5771-8355-2ada7d787451",
      "id": "CVE-2026-33870",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33870 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:25974f31-9eea-5f21-a9ae-9a4c084d0514",
      "id": "CVE-2026-33871",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33871 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:480e5b5c-b708-5bb5-aa9f-0c6891f9d13d",
      "id": "CVE-2026-41417",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41417 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0447b160-c9ba-5396-8575-f01e227ff758",
      "id": "CVE-2026-42577",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42577 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ab1c61c8-ab26-55f2-a433-1bd84c3f97ec",
      "id": "CVE-2026-42578",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42578 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dfd6cec2-8b8a-546b-bd09-9ee2213f0587",
      "id": "CVE-2026-42579",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42579 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0a21667b-bbdb-5329-8e9c-f02c33e4fda3",
      "id": "CVE-2026-42580",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42580 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:97feed7b-f9eb-5e78-9c2a-6495d8956149",
      "id": "CVE-2026-42581",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42581 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3a30bc5f-68ec-51be-82a9-267184bcf3a1",
      "id": "CVE-2026-42583",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42583 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:93f19b71-df4d-5e24-9bce-c9edd3c25106",
      "id": "CVE-2026-42584",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42584 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:50ed1d3f-cb98-5812-bb7c-82f2276ecc26",
      "id": "CVE-2026-42585",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42585 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3442b70f-9dd3-55d5-be21-b23a6600dfa0",
      "id": "CVE-2026-42586",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42586 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1143b878-f2f4-5d11-8b2c-3c59f5995404",
      "id": "CVE-2026-42587",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42587 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:18c2b57c-89c0-53cf-a691-758eaecfad53",
      "id": "CVE-2026-44248",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44248 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5d2bfbf0-ac06-5257-a5c6-05a1ed6f5ad7",
      "id": "CVE-2026-44249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44249 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:294ab835-184d-5b31-b00d-970c242ec0d0",
      "id": "CVE-2026-44250",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44250 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b08080c2-c3a4-522a-bac5-389bc3bb0716",
      "id": "CVE-2026-44890",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.75.Final-tuxcare.4 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6d7c4462-d91b-5ae0-b010-1418e6eca5a3",
      "id": "CVE-2026-44891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44891 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8a216328-e136-5f81-9f3e-17f845a4e601",
      "id": "CVE-2026-44893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44893 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0434c9a4-b42a-5051-b89c-7b23be1f4e80",
      "id": "CVE-2026-45416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45416 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f337f05c-96c7-5145-959c-c47dd8e4ad6a",
      "id": "CVE-2026-45536",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45536 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:75f1ca8f-3cd4-54db-bdf5-5879188edeac",
      "id": "CVE-2026-45673",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45673 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5956aeac-d25d-5632-a8dc-d586b8821be7",
      "id": "CVE-2026-45674",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45674 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:50f6741f-a54b-56a2-9f93-c125207b7fe5",
      "id": "CVE-2026-46340",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-46340 is fixed in version 4.1.75.Final-tuxcare.4 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6702b38b-0a51-52ad-a440-dbd8ff51caf8",
      "id": "CVE-2026-47244",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47244 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:54e42a0e-e965-5152-8bf3-7e6d73abbb9d",
      "id": "CVE-2026-47691",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47691 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7bd0ef0f-2dbd-5576-9991-969e23d0e83d",
      "id": "CVE-2026-48006",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48006 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1197e122-af29-5b26-96b1-c5023fd64e9d",
      "id": "CVE-2026-48043",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-48043 does not affect version 4.1.75.Final-tuxcare.4 of io.netty:netty-bom. already_fixed \u2014 The target repository (Netty 4.1.75.Final-tuxcare.1) already contains equivalent protection against CVE-2026-48043. While the upstream patch targets a newer architecture with a ChannelInboundHandlerAdapter tail handler (introduced in CVE-2025-58057 refactoring), the target's older architecture implements the same defensive pattern: a try-finally block ensuring ByteBuf.release() is called uncond..."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6e24b318-243c-5d1f-abae-2d5f7b2d40e4",
      "id": "CVE-2026-48059",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48059 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:87ad21a1-79f5-588e-a299-8237b7f330a7",
      "id": "CVE-2026-50010",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50010 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6df28e3c-7319-51b6-80bb-cb8765aa133f",
      "id": "CVE-2026-50011",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50011 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6d5bfdd0-5518-55c7-81ff-787b9a68cd04",
      "id": "CVE-2026-50020",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50020 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:95e66b87-cd06-5bd4-a9f5-267da9a39476",
      "id": "CVE-2026-50560",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.75.Final-tuxcare.4 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4d5e2f21-4262-5af5-89b5-31f38fbe1400",
      "id": "CVE-2026-55831",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55831 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:334807a4-8025-58bc-b001-16a75719783c",
      "id": "CVE-2026-55833",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55833 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4529da22-a7ca-5804-96ab-5f5d0c5261f7",
      "id": "CVE-2026-55851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55851 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:390a0a66-801f-5d77-a30c-1ab1ceadbab7",
      "id": "CVE-2026-56745",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56745 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6096ab80-f4e2-52de-8a44-60bfee4540ad",
      "id": "CVE-2026-56746",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56746 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6e1e3317-c103-5c37-bfb1-2f5b386a6665",
      "id": "CVE-2026-56817",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56817 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4f2593d2-838e-5b42-95ed-24a957d4384f",
      "id": "CVE-2026-56818",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-56818 does not affect version 4.1.75.Final-tuxcare.4 of io.netty:netty-bom. not_affected \u2014 The target version 4.1.75.Final (released March 2022) predates the introduction of the vulnerable feature by over 4 years. CVE-2026-56818 describes incomplete cleanup when the `maxElements` limit is exceeded in RedisArrayAggregator. However, the `maxElements` configuration parameter and associated exception handling were introduced in June 2026 (commits e51c64c964 and 728c98b8ec), neither of wh..."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6fa0337c-1a8c-5f89-a156-c24f42c272b3",
      "id": "CVE-2026-56819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56819 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:057e779c-af91-5f78-b3c6-5ef4a5a7ad80",
      "id": "CVE-2026-59898",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59898 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b4f955b2-2066-50ea-8a28-affe034729a1",
      "id": "CVE-2026-59899",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59899 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0b994587-67bd-5658-9341-cc03c4030d45",
      "id": "CVE-2026-59900",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59900 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:61553592-089f-538f-a8ff-9d58952f61e9",
      "id": "CVE-2026-59901",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59901 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:af4c186b-dcfe-5c14-a193-d27ec69a5662",
      "id": "CVE-2026-59919",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59919 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b648807a-7bbf-5d63-b762-e59f8191f426",
      "id": "CVE-2026-59920",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59920 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fb95cdaa-5a10-5d5e-9010-657403275c48",
      "id": "CVE-2026-59921",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59921 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:21545986-b699-54e2-85e7-43ec03497524",
      "id": "CVE-2026-73507",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-73507 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e4e56ed7-ea58-5efc-b3d0-063c3347b104",
      "id": "CVE-2026-73508",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-73508 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:51e83ff9-250d-5c5f-a46a-54590b96ecdc",
      "id": "GHSA-mfg7-5gfp-c4w3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cdbc0159-34eb-5f04-b35a-f8a182e6d6e3",
      "id": "GHSA-v74w-7mr3-4qg3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:398631fa-ac8a-5055-a25d-b40f68dcfb97",
      "id": "GHSA-xpw8-rcwv-8f8p",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-xpw8-rcwv-8f8p is fixed in version 4.1.75.Final-tuxcare.4 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.75.Final-tuxcare.4"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.netty/netty-bom@4.1.75.Final-tuxcare.4"
    }
  ]
}