{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:c251b3b9-f2c2-5e15-aef6-88e5e5fd9364",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/io.netty/netty-buffer@4.1.82.Final-tuxcare.4",
      "type": "library",
      "group": "io.netty",
      "name": "netty-buffer",
      "version": "4.1.82.Final-tuxcare.4",
      "purl": "pkg:maven/io.netty/netty-buffer@4.1.82.Final-tuxcare.4"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:536e3e2d-9b79-55cd-8a58-fb7fce586cb4",
      "id": "CVE-2022-41881",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-41881 is fixed in version 4.1.82.Final-tuxcare.4 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e8651e43-ea80-53ed-aaf7-4817ab2770be",
      "id": "CVE-2022-41915",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-41915 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9ee11f48-7f08-5f4b-be11-a7fe35b75fda",
      "id": "CVE-2023-34462",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-34462 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:34141717-744c-5ef4-a0f2-47356170a713",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-44487 is fixed in version 4.1.82.Final-tuxcare.4 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:832ddf16-fdfd-500c-a7ff-988fc6772f02",
      "id": "CVE-2023-4586",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2023-4586 is a false positive for io.netty:netty-buffer 4.1.82.Final-tuxcare.4."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:88573299-d8be-54ea-944a-fdd3311e058b",
      "id": "CVE-2024-29025",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-29025 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d174c49f-5c69-58f1-8939-f30ba7f22c6d",
      "id": "CVE-2024-47535",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-47535 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9bd4a09d-2ad3-587c-ab9e-8753cee5072d",
      "id": "CVE-2025-24970",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-24970 is fixed in version 4.1.82.Final-tuxcare.4 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9f7fa891-594b-5266-bac4-924bddcc05fe",
      "id": "CVE-2025-25193",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-25193 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c72c4b9a-2ebb-51d0-80cb-81eb933eb5c2",
      "id": "CVE-2025-55163",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55163 is fixed in version 4.1.82.Final-tuxcare.4 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f7f8b927-d2ba-5ef1-b27b-4f5eee8dc6c4",
      "id": "CVE-2025-58056",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58056 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ef94e2ab-3f27-51d4-ad29-0ba3a74d9d1e",
      "id": "CVE-2025-58057",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-58057 is fixed in version 4.1.82.Final-tuxcare.4 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:82d2a0ed-9a6e-5e35-9a82-083660643230",
      "id": "CVE-2025-59419",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-59419 is fixed in version 4.1.82.Final-tuxcare.4 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:022d83ac-c2a8-50e2-be40-6d566d14427b",
      "id": "CVE-2025-67735",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-67735 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9e7fe83b-684f-5293-af9c-fb8205d19e6d",
      "id": "CVE-2026-33870",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33870 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:13df8a18-c576-50cf-ae58-1ceda3a5517f",
      "id": "CVE-2026-33871",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33871 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0901a7d4-f047-583d-8a08-62857686b657",
      "id": "CVE-2026-41417",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41417 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b1fcf303-bff7-57b6-8e95-260502a2f4dd",
      "id": "CVE-2026-42577",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42577 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d9b3489d-e88b-5c22-9575-67ae82425f67",
      "id": "CVE-2026-42578",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42578 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e4bb3f78-574a-5dd2-b52d-1cbf733c0fe8",
      "id": "CVE-2026-42579",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42579 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a7eb1b08-fa19-5b52-9403-ed888ce2bc08",
      "id": "CVE-2026-42580",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42580 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b37b99dc-ee96-5941-b9c5-f2e3c5bb7123",
      "id": "CVE-2026-42581",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42581 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9f7a177f-e020-596c-ba46-43a434bddc2c",
      "id": "CVE-2026-42583",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42583 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:68d4a51d-9812-5a74-ba07-38fae18d5f3f",
      "id": "CVE-2026-42584",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42584 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:58f33acc-4fd7-5f3d-bb80-7e23ef10d6eb",
      "id": "CVE-2026-42585",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42585 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c83ff84a-0142-5eef-ba88-be250948a325",
      "id": "CVE-2026-42586",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42586 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:102b6fe8-b0f1-51cc-bdbc-66007ad973c9",
      "id": "CVE-2026-42587",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42587 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:91c6ca7a-9a4a-5430-8853-66edc5948192",
      "id": "CVE-2026-44248",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44248 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9522b056-1d59-57b6-b138-2d72e410fa4f",
      "id": "CVE-2026-44249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44249 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:24573ba8-3db7-55e1-8c97-9cbbe9a441fe",
      "id": "CVE-2026-44250",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44250 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:741cce46-7a84-5a29-be11-9a1ec8d4cc19",
      "id": "CVE-2026-44890",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.82.Final-tuxcare.4 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5f35267d-8e37-50e2-998e-fb6fd47f73ba",
      "id": "CVE-2026-44891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44891 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ae4b264d-be34-5c49-9455-7dfc9e52de10",
      "id": "CVE-2026-44893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44893 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d54c2d24-fb53-5ead-9882-959e6cfd02c4",
      "id": "CVE-2026-45416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45416 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:817e8afb-9a08-5690-979a-101a7f8464ab",
      "id": "CVE-2026-45536",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45536 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:071de98a-36f8-5040-83a0-69f58461b993",
      "id": "CVE-2026-45673",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45673 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e32634a8-5eea-524a-bd74-29e0ebba1da6",
      "id": "CVE-2026-45674",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45674 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:168c5314-248e-5e4a-ac40-216d08d0dc25",
      "id": "CVE-2026-46340",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-46340 is fixed in version 4.1.82.Final-tuxcare.4 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:aecc9230-480e-5165-8dac-3fc0373df689",
      "id": "CVE-2026-47244",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47244 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9c947639-da9a-5fa8-8939-0a53499b2f87",
      "id": "CVE-2026-47691",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47691 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:45b4b22a-8f1e-5ed7-9c2c-a3aba6b754f9",
      "id": "CVE-2026-48006",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48006 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5b6946be-7f6e-5167-b8f6-71a0ac45f5d6",
      "id": "CVE-2026-48043",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48043 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:88a0a0a0-d32a-5b3a-9717-11f70aa2352d",
      "id": "CVE-2026-48059",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48059 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0acf2bcf-078b-5df1-b0fa-34ab52d4fb1a",
      "id": "CVE-2026-50010",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50010 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:24074b5f-1538-596d-81eb-8dd73b060b5a",
      "id": "CVE-2026-50011",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50011 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d545c2f6-e00c-539e-b250-1a97d2501ba3",
      "id": "CVE-2026-50020",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50020 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:483fab33-0f65-506d-95c7-c715a5da66e2",
      "id": "CVE-2026-50560",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.82.Final-tuxcare.4 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0d199383-8b71-534d-8ce0-de03f0f9c7b2",
      "id": "CVE-2026-55831",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55831 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:65c0931f-fdc6-560f-81b3-7ecc4b002b6e",
      "id": "CVE-2026-55833",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55833 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f73d5932-f5e5-566a-858c-190bf4dec6c2",
      "id": "CVE-2026-55851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55851 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:aa985480-098b-5d54-b4b2-ddde5566afd1",
      "id": "CVE-2026-56745",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56745 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f8090b35-109a-51fb-bcf2-4a42509c4b30",
      "id": "CVE-2026-56746",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56746 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7ce65c75-2859-5696-aae0-edbe1f56cb09",
      "id": "CVE-2026-56817",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56817 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:374de2d5-a462-5c76-85a1-09b378057b5e",
      "id": "CVE-2026-56818",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-56818 does not affect version 4.1.82.Final-tuxcare.4 of io.netty:netty-buffer. not_affected \u2014 Version 4.1.82.Final is not affected by CVE-2026-56818. The vulnerability exists in the maxElements limit check that was introduced in version 4.1.135.Final (commit e51c64c964). Version 4.1.82.Final predates this security feature entirely - it has no maxElements configuration, no maxElements validation check, and therefore cannot exhibit the vulnerable pattern described in the CVE (throwing wit..."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:38c455c4-451d-581f-97fa-4ce58c1ad2a5",
      "id": "CVE-2026-56819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56819 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6e2e7193-f0bc-5430-ba6b-b5df233143ba",
      "id": "CVE-2026-59898",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59898 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7645bc03-d8cb-5ef8-8020-43b616a8f8ff",
      "id": "CVE-2026-59899",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59899 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d7b8158c-1aca-5d4e-b704-d3ca4d3a2cbb",
      "id": "CVE-2026-59900",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59900 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:29e4ce3e-aafe-5813-b565-74a476572dc1",
      "id": "CVE-2026-59901",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59901 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:85c0b2dd-a7bc-5e1c-984d-bde93e837c5c",
      "id": "CVE-2026-59919",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59919 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cbed76c0-dc03-5f83-9a17-dcf188f167d2",
      "id": "CVE-2026-59920",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59920 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:df76c46b-03e6-5f34-bac3-bc2e7493d090",
      "id": "CVE-2026-59921",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59921 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e2f155bf-3237-5917-8490-e57054784f7e",
      "id": "GHSA-mfg7-5gfp-c4w3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:10d4749f-b482-5c6f-add0-67c72664d5ea",
      "id": "GHSA-v74w-7mr3-4qg3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:46bccc3a-9a4c-5d92-bb99-01dbd452f0b7",
      "id": "GHSA-xpw8-rcwv-8f8p",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-xpw8-rcwv-8f8p is fixed in version 4.1.82.Final-tuxcare.4 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.82.Final-tuxcare.4"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.netty/netty-buffer@4.1.82.Final-tuxcare.4"
    }
  ]
}