{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:373cd7ac-a6be-5410-82f6-eca1ec7fff58",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/io.netty/netty-codec-dns@4.1.73.Final-tuxcare.3",
      "type": "library",
      "group": "io.netty",
      "name": "netty-codec-dns",
      "version": "4.1.73.Final-tuxcare.3",
      "purl": "pkg:maven/io.netty/netty-codec-dns@4.1.73.Final-tuxcare.3"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:0f2232fa-ae9b-5ee0-8c52-34a3c3aa130e",
      "id": "CVE-2022-24823",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-24823 is fixed in version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a3836b92-198b-5a06-a283-72749b267d94",
      "id": "CVE-2022-41881",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-41881 is fixed in version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:447a6eb5-0d9f-558a-8c78-9b52cc053ab4",
      "id": "CVE-2022-41915",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-41915 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5aa85aa3-3ba9-508c-903a-58d4cadd671e",
      "id": "CVE-2023-34462",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-34462 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:14d4fccb-641a-5440-bfea-ae8d8f021b9f",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-44487 is fixed in version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cb82b2d4-84bb-52c0-bf5e-01043e5b0152",
      "id": "CVE-2023-4586",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2023-4586 is a false positive for io.netty:netty-codec-dns 4.1.73.Final-tuxcare.3."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2962c338-07f9-5de8-a2b3-c8a63768c0d8",
      "id": "CVE-2024-29025",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-29025 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d7bd19c5-a3e8-5304-91d5-520559f40642",
      "id": "CVE-2024-47535",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-47535 is fixed in version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f13ce858-99ba-5bf6-a97b-0b0222f1ae80",
      "id": "CVE-2025-24970",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-24970 is fixed in version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:52a8a9a6-e4fe-5f7b-b404-6d32180b5ceb",
      "id": "CVE-2025-25193",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-25193 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1c62970e-0125-5aab-830f-3924ae06a539",
      "id": "CVE-2025-55163",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-55163 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:718ae821-9005-502b-b45e-65d21f166dfa",
      "id": "CVE-2025-58056",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58056 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:33233572-1eb7-589c-82e3-a8a73ac93970",
      "id": "CVE-2025-58057",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58057 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:70fc7635-65fd-512f-800b-cc823a03a839",
      "id": "CVE-2025-59419",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-59419 is fixed in version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ce4267a6-3257-589a-b73b-08589c377b96",
      "id": "CVE-2025-67735",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-67735 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:81f325f8-f877-53a7-984c-0e66842fba42",
      "id": "CVE-2026-33870",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33870 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7735c205-d25d-564a-b1c4-a0da663d4e01",
      "id": "CVE-2026-33871",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33871 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a9147f2c-e583-5c7c-9a17-3f9465025dd1",
      "id": "CVE-2026-41417",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41417 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:04dc41d9-133b-507f-8422-cd745fa52001",
      "id": "CVE-2026-42577",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42577 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bf0ac21b-e2aa-5fa0-b851-ef5fb35dc3ad",
      "id": "CVE-2026-42578",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42578 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3475d2b9-e296-55b3-8382-8f7048389c4d",
      "id": "CVE-2026-42579",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42579 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:84bfc1bd-fe2e-5e81-8d3f-49e1a385465b",
      "id": "CVE-2026-42580",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42580 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:51ae3cff-466b-5dfe-8d35-766846cbee8f",
      "id": "CVE-2026-42581",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42581 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:54049233-c575-51b9-83d0-7e01de32223c",
      "id": "CVE-2026-42583",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42583 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e603847d-9fe0-5ee3-a187-136ba5315659",
      "id": "CVE-2026-42584",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42584 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:18eb051a-ad54-52ed-8981-20bfc5f24ffc",
      "id": "CVE-2026-42585",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42585 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9903d8de-1bb9-5d94-9875-4ab6cd429a22",
      "id": "CVE-2026-42586",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42586 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0d932d72-4cd4-58c1-9a3f-27b5b644cc07",
      "id": "CVE-2026-42587",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42587 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5fb3b139-9260-5d4c-bae1-b358d7b359fa",
      "id": "CVE-2026-44248",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44248 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:13887daf-791a-568a-a83f-96bd8470df42",
      "id": "CVE-2026-44249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44249 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:05b71552-5362-54e0-8041-76a2a7c9f522",
      "id": "CVE-2026-44250",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44250 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bf1a9398-6577-5463-a92f-400eea8b1085",
      "id": "CVE-2026-44890",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:622509c5-e502-55bb-bc13-1e007b25cdbc",
      "id": "CVE-2026-44891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44891 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b59ebee2-ac4a-5e0d-aaf4-7d540c56f2cb",
      "id": "CVE-2026-44893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44893 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ad372fc7-ddff-50ff-b729-e984fc6fb78c",
      "id": "CVE-2026-45416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45416 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ab78dc5d-3aac-5b28-b669-69e4a43b5f6a",
      "id": "CVE-2026-45536",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45536 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2e3d8f48-4b1b-5790-af2f-68206964e29f",
      "id": "CVE-2026-45673",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45673 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9436d570-0abe-50dc-9442-45d2ad9a1f3d",
      "id": "CVE-2026-45674",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45674 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:04e3b2e1-f0f9-5e78-92c9-95c78a52dd9d",
      "id": "CVE-2026-46340",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-46340 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3a518496-b573-5d21-b8fd-aa464cf6bee1",
      "id": "CVE-2026-47244",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47244 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:52f8e935-2fc4-5cb6-9aca-f6a2638107a8",
      "id": "CVE-2026-47691",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47691 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:11a5e5de-b412-5c23-9de1-2fe21c79f8a0",
      "id": "CVE-2026-48006",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48006 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d578d5e1-f426-5c55-8568-a519e54db780",
      "id": "CVE-2026-48043",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-48043 does not affect version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-dns. not_affected \u2014 Version 4.1.73 is not affected by CVE-2026-48043. The target uses a loop-based architecture with try-finally protection (introduced in 2016) that prevents the buffer leak described in the CVE. The vulnerable ChannelInboundHandlerAdapter pattern that the upstream patch fixes does not exist in this version."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cec4916d-4165-5be6-9a25-ac9891db8b8a",
      "id": "CVE-2026-48059",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48059 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:177b5902-a2bf-564c-8493-5618e796ca13",
      "id": "CVE-2026-50010",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50010 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:008d5e21-05fa-5fd3-a99b-39440a96a335",
      "id": "CVE-2026-50011",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50011 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a5f09a1b-129e-5b7c-9e69-64c13d5c2138",
      "id": "CVE-2026-50020",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50020 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cd253f31-7dd6-54af-a92a-6a8c1212c94e",
      "id": "CVE-2026-50560",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:55322606-8eaf-55bc-831d-e686e0d5045c",
      "id": "CVE-2026-55831",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55831 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:62fd1fd6-af70-5c47-90e8-3234eff3461c",
      "id": "CVE-2026-55833",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55833 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:40c2a3e8-7002-5739-8c4f-5cdeed7de104",
      "id": "CVE-2026-55851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55851 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dc1c102d-b241-5f23-a02f-f31bf0fd11b8",
      "id": "CVE-2026-56745",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56745 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:72a19d13-5e6f-55ca-ab96-ad6312df6090",
      "id": "CVE-2026-56746",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56746 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b496b658-1006-585f-ad84-0523e6f0b17b",
      "id": "CVE-2026-56817",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56817 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e44ac057-6d5a-58b2-8353-682ff2cb3615",
      "id": "CVE-2026-56818",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-56818 does not affect version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-dns. not_affected \u2014 The target version 4.1.73.Final-tuxcare.2 is NOT AFFECTED by CVE-2026-56818. The vulnerable code pattern (configurable `maxElements` limit check without cleanup, contrasting with `maxNestedArrayDepth` limit check WITH cleanup) was introduced in version 4.1.135.Final through commits e51c64c964 and 728c98b8ec (dated 2026-06-01/02). The target version predates these features entirely and does not ..."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9695575e-ca6c-50a4-a44b-0f57bdd6e3a7",
      "id": "CVE-2026-56819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56819 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3291af6d-6548-5418-9b75-90158c6d4af7",
      "id": "CVE-2026-59898",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59898 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:28cc4f3e-29a2-5021-8e67-6990f8ae2eb9",
      "id": "CVE-2026-59899",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59899 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cc4b7e1e-7054-5830-82aa-67e5a632c318",
      "id": "CVE-2026-59900",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59900 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:80d2b7f4-b071-5871-979f-7f3b89a8437f",
      "id": "CVE-2026-59901",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59901 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:750d9b8e-c667-5943-b183-46ccbf1b5347",
      "id": "CVE-2026-59919",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59919 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d6c6e25e-5d8f-570b-8fee-c1502c1d4993",
      "id": "CVE-2026-59920",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59920 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5bf9deb9-2c86-58a7-841f-9c0fd597ab8b",
      "id": "CVE-2026-59921",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59921 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:45b9bcb7-8177-5446-b2c1-3b6ae3f47aad",
      "id": "CVE-2026-73507",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-73507 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:84483c18-ced4-5ff6-a583-b2ca2e713b56",
      "id": "CVE-2026-73508",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-73508 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:35c326e6-39d7-503b-bf8b-bf76e7af6016",
      "id": "GHSA-mfg7-5gfp-c4w3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a4cf892a-a082-5b02-8149-7167d235b0ba",
      "id": "GHSA-v74w-7mr3-4qg3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:900c603b-a23e-57df-9839-c38f9430e758",
      "id": "GHSA-xpw8-rcwv-8f8p",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-xpw8-rcwv-8f8p affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.73.Final-tuxcare.3"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.73.Final-tuxcare.3"
    }
  ]
}