{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:afceb14e-cdce-50fa-a43a-1f32e400875b",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/io.netty/netty-codec-http2@4.1.115.Final-tuxcare.7",
      "type": "library",
      "group": "io.netty",
      "name": "netty-codec-http2",
      "version": "4.1.115.Final-tuxcare.7",
      "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.115.Final-tuxcare.7"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:eea2763e-dc75-5e93-86ef-9126fac9210e",
      "id": "CVE-2025-24970",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-24970 is fixed in version 4.1.115.Final-tuxcare.7 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.115.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:096b660b-8673-5c50-8ac5-e042f9ea3e92",
      "id": "CVE-2025-25193",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-25193 is fixed in version 4.1.115.Final-tuxcare.7 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.115.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ab497b02-f7ae-5931-b133-1d2fa26816a2",
      "id": "CVE-2025-55163",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55163 is fixed in version 4.1.115.Final-tuxcare.7 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.115.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2209597b-7957-5919-9c5b-009c9c1e53d9",
      "id": "CVE-2025-58056",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-58056 is fixed in version 4.1.115.Final-tuxcare.7 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.115.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:01ecf76d-cb6e-5969-b0e4-13ecf57d8bd3",
      "id": "CVE-2025-58057",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-58057 is fixed in version 4.1.115.Final-tuxcare.7 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.115.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0903b370-7544-5ac0-802d-063c09447325",
      "id": "CVE-2025-59419",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-59419 is fixed in version 4.1.115.Final-tuxcare.7 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.115.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:72c1e03e-e258-5f9e-9d10-93730f33eaf2",
      "id": "CVE-2025-67735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-67735 is fixed in version 4.1.115.Final-tuxcare.7 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.115.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ca6f0f8e-b14f-53ab-bb65-2191897ce5b7",
      "id": "CVE-2026-33870",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-33870 is fixed in version 4.1.115.Final-tuxcare.7 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.115.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3fa621fb-2fdc-5228-a1f9-97b5677a37d5",
      "id": "CVE-2026-33871",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-33871 is fixed in version 4.1.115.Final-tuxcare.7 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.115.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8027d887-5efc-5aef-95e9-b4888d12c5ca",
      "id": "CVE-2026-41417",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41417 is fixed in version 4.1.115.Final-tuxcare.7 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.115.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4bd2f63d-0c9e-5393-b9c1-90a4828c62ac",
      "id": "CVE-2026-42577",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42577 affects version 4.1.115.Final-tuxcare.7 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.115.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:83fa7d8d-1873-5a51-9aae-87b8cfe780bd",
      "id": "CVE-2026-42578",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42578 affects version 4.1.115.Final-tuxcare.7 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.115.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:57d1c20e-0284-5c05-a8ad-de44ea7d2c04",
      "id": "CVE-2026-42579",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42579 is fixed in version 4.1.115.Final-tuxcare.7 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.115.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8654f88f-616c-5413-8652-8fec1df5e13a",
      "id": "CVE-2026-42580",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42580 affects version 4.1.115.Final-tuxcare.7 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.115.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0940dc4e-a8d4-565e-bffd-15e6e8acf338",
      "id": "CVE-2026-42581",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42581 is fixed in version 4.1.115.Final-tuxcare.7 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.115.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:428e4365-4698-535e-87df-5851b58f170f",
      "id": "CVE-2026-42583",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42583 is fixed in version 4.1.115.Final-tuxcare.7 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.115.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3fea3ff2-b728-5ee0-a872-0db21bff9d97",
      "id": "CVE-2026-42584",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42584 affects version 4.1.115.Final-tuxcare.7 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.115.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:473a2bb7-24f2-5903-b597-148d4817a3ee",
      "id": "CVE-2026-42585",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42585 affects version 4.1.115.Final-tuxcare.7 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.115.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0be5927f-ae75-5374-9504-730a498b70b5",
      "id": "CVE-2026-42586",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42586 affects version 4.1.115.Final-tuxcare.7 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.115.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:01199e21-55af-5e51-892c-dad388df098e",
      "id": "CVE-2026-42587",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42587 affects version 4.1.115.Final-tuxcare.7 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.115.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0ae3eab5-0fe2-5da7-a4cf-ab408eae0701",
      "id": "CVE-2026-44248",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44248 affects version 4.1.115.Final-tuxcare.7 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.115.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1e1e07b9-9760-5ebf-bbf2-c15f9e786d76",
      "id": "CVE-2026-44249",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44249 is fixed in version 4.1.115.Final-tuxcare.7 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.115.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d8f80d4a-f9cc-5e3c-b4a8-49bc8ec6951b",
      "id": "CVE-2026-44250",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44250 affects version 4.1.115.Final-tuxcare.7 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.115.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d0284dd6-1898-5406-8a99-b4285c6961b9",
      "id": "CVE-2026-44890",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.115.Final-tuxcare.7 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.115.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e57bdaee-ef5c-5fa0-a84d-6e3e98010a24",
      "id": "CVE-2026-44891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44891 affects version 4.1.115.Final-tuxcare.7 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.115.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c5b29542-3e69-5840-b865-56c3da26656a",
      "id": "CVE-2026-44893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44893 affects version 4.1.115.Final-tuxcare.7 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.115.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:537eb179-685d-55cd-9446-4a8a10e86c1b",
      "id": "CVE-2026-45416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45416 affects version 4.1.115.Final-tuxcare.7 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.115.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:246dfe3f-0884-59c2-8c15-39b9ab9c84e9",
      "id": "CVE-2026-45536",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45536 affects version 4.1.115.Final-tuxcare.7 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.115.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:adfd0f69-edf7-5192-b0b6-8b40ecd0714b",
      "id": "CVE-2026-45673",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45673 affects version 4.1.115.Final-tuxcare.7 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.115.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7e7ee29c-49f4-58ed-9a16-6816217b64a8",
      "id": "CVE-2026-45674",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-45674 is fixed in version 4.1.115.Final-tuxcare.7 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.115.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ee3cd2f7-5f1d-5a00-9b01-f70ac653fe9d",
      "id": "CVE-2026-46340",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-46340 is fixed in version 4.1.115.Final-tuxcare.7 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.115.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:663737cf-2d56-5a25-bd2f-c0c236d70db2",
      "id": "CVE-2026-47244",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47244 affects version 4.1.115.Final-tuxcare.7 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.115.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2c9af4a6-34e6-5d7b-bd48-afca9894fb3e",
      "id": "CVE-2026-47691",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-47691 does not affect version 4.1.115.Final-tuxcare.7 of io.netty:netty-codec-http2. Patches already applied: fb9fbe974b57430ee439636bf576c93a2759364f (already in target via 54c8ecfb9e80 'Backport CVE-2026-45674 to 4.1.115.Final'); 5749d7822f0bf18e2eb0ea1f10d7b7181456ad75 (already in target via 54c8ecfb9e80 'Backport CVE-2026-45674 to 4.1.115.Final'); 6f19adf36863712f96b16d768d92f0c2f78cf315 (already in target via 54c8ecfb9e80 'Backport CVE-2026-45674 to 4.1.115.Final')"
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.115.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ee4c3b95-2d39-5026-a5e1-67fa6e41093d",
      "id": "CVE-2026-48006",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48006 affects version 4.1.115.Final-tuxcare.7 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.115.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bb488969-ca0a-5599-bce2-7550bdaf43e5",
      "id": "CVE-2026-48043",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-48043 is fixed in version 4.1.115.Final-tuxcare.7 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.115.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f408ff4d-0be8-55a0-ac3e-622ab34a49a3",
      "id": "CVE-2026-48059",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-48059 is fixed in version 4.1.115.Final-tuxcare.7 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.115.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:635a920f-17df-5f56-8ac5-8a838cad5c01",
      "id": "CVE-2026-50010",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50010 is fixed in version 4.1.115.Final-tuxcare.7 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.115.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:38349587-9d8f-5432-bf88-177eecf5c882",
      "id": "CVE-2026-50011",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50011 affects version 4.1.115.Final-tuxcare.7 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.115.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f1d274fb-793e-5ae4-8a74-987927d4f019",
      "id": "CVE-2026-50020",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50020 is fixed in version 4.1.115.Final-tuxcare.7 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.115.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:574b1b18-b347-5f9b-be8b-d6f8f9747c50",
      "id": "CVE-2026-50560",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.115.Final-tuxcare.7 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.115.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2642c63d-f91d-55e5-9086-7e4cabf25458",
      "id": "CVE-2026-55831",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55831 affects version 4.1.115.Final-tuxcare.7 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.115.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f8ff82ec-2e62-5965-8ba5-341df3ff5004",
      "id": "CVE-2026-55833",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55833 affects version 4.1.115.Final-tuxcare.7 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.115.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7c79e406-e9fc-5238-b652-82e3ec08ea23",
      "id": "CVE-2026-55851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55851 affects version 4.1.115.Final-tuxcare.7 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.115.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:13b51192-a5ae-5b31-9080-345a5a87b6cf",
      "id": "CVE-2026-56745",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56745 affects version 4.1.115.Final-tuxcare.7 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.115.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:40e0155d-44e0-5de9-ab5f-d84592304612",
      "id": "CVE-2026-56746",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56746 affects version 4.1.115.Final-tuxcare.7 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.115.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2133faf4-88ba-58a8-b223-c5f283339d63",
      "id": "CVE-2026-56817",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56817 affects version 4.1.115.Final-tuxcare.7 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.115.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fe831172-02ce-5cea-b248-8bc5f9f6e152",
      "id": "CVE-2026-56818",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56818 affects version 4.1.115.Final-tuxcare.7 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.115.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2758ec73-e4a3-5f35-aea6-084c2747bbb4",
      "id": "CVE-2026-56819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56819 affects version 4.1.115.Final-tuxcare.7 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.115.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:aaf11052-72da-5c6c-a3c3-328c42454aa8",
      "id": "CVE-2026-56820",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56820 affects version 4.1.115.Final-tuxcare.7 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.115.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f01ddfa7-4253-5972-9e2a-6a5c2629f076",
      "id": "CVE-2026-56821",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56821 affects version 4.1.115.Final-tuxcare.7 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.115.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:aca32942-2377-531c-a449-85e6e3530b53",
      "id": "CVE-2026-56822",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56822 affects version 4.1.115.Final-tuxcare.7 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.115.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:56732703-72b3-5894-94a2-cebc98538109",
      "id": "CVE-2026-59898",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59898 affects version 4.1.115.Final-tuxcare.7 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.115.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:45d7c106-003c-531f-ae8b-e43f2c2b55e7",
      "id": "CVE-2026-59899",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59899 affects version 4.1.115.Final-tuxcare.7 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.115.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:63a8c28d-a425-58cb-bcdf-850d004a20ff",
      "id": "CVE-2026-59900",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59900 affects version 4.1.115.Final-tuxcare.7 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.115.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:22ad10e9-56a1-550a-a0b0-d27c204b385f",
      "id": "CVE-2026-59901",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59901 affects version 4.1.115.Final-tuxcare.7 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.115.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:82f6d821-f8b9-58be-a3c3-0e8b57893740",
      "id": "CVE-2026-59919",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59919 affects version 4.1.115.Final-tuxcare.7 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.115.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e0a77753-dc97-5a9b-9ba7-dba5ec6a169d",
      "id": "CVE-2026-59920",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59920 affects version 4.1.115.Final-tuxcare.7 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.115.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3ab9f616-87aa-5d0a-9812-662fd31a8bf5",
      "id": "CVE-2026-59921",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59921 affects version 4.1.115.Final-tuxcare.7 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.115.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a9f4b9aa-16af-5ffc-b8d4-9f9aacc1e050",
      "id": "CVE-2026-73507",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-73507 affects version 4.1.115.Final-tuxcare.7 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.115.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:25f0b4f4-7a8a-57bd-b740-2f13f9c4aec3",
      "id": "CVE-2026-73508",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-73508 affects version 4.1.115.Final-tuxcare.7 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.115.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e9b5b4bf-5917-51a4-93af-5c04b2ac10dd",
      "id": "GHSA-mfg7-5gfp-c4w3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.115.Final-tuxcare.7 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.115.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ac277a73-f567-5aa9-93ba-042c292611ef",
      "id": "GHSA-v74w-7mr3-4qg3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.115.Final-tuxcare.7 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.115.Final-tuxcare.7"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.115.Final-tuxcare.7"
    }
  ]
}