{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:a7008125-34bc-56c2-8ce2-bdbe2d9c1973",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/io.netty/netty-codec-http2@4.1.82.Final-tuxcare.4",
      "type": "library",
      "group": "io.netty",
      "name": "netty-codec-http2",
      "version": "4.1.82.Final-tuxcare.4",
      "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.82.Final-tuxcare.4"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:89d4a244-2a93-5188-b753-51f18a549267",
      "id": "CVE-2022-41881",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-41881 is fixed in version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d6e37920-a052-5c1e-8e62-bd8fce6fb3ca",
      "id": "CVE-2022-41915",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-41915 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dc7f9ccc-1f16-5af7-a571-631d7bd1b46e",
      "id": "CVE-2023-34462",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-34462 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:526e5719-afe4-5e99-ab23-d37953859d54",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-44487 is fixed in version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e6270073-d5ab-59e7-9e77-a7b6d19011b0",
      "id": "CVE-2023-4586",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2023-4586 is a false positive for io.netty:netty-codec-http2 4.1.82.Final-tuxcare.4."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9727c04e-8c99-51f0-a5ad-69e78c14b24e",
      "id": "CVE-2024-29025",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-29025 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:921639b6-d29f-503c-b176-45698b61a30e",
      "id": "CVE-2024-47535",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-47535 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:974d7fd0-a33b-54e3-9e3e-33303e77b351",
      "id": "CVE-2025-24970",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-24970 is fixed in version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5414ec83-0193-5a7e-97ae-63885714b086",
      "id": "CVE-2025-25193",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-25193 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:643389f4-d45d-53af-80e0-d60a01845d19",
      "id": "CVE-2025-55163",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55163 is fixed in version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:036497d1-9d00-5fee-b591-528122211240",
      "id": "CVE-2025-58056",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58056 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9cff9023-9d0b-56b4-92b5-f2da6c068d6a",
      "id": "CVE-2025-58057",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-58057 is fixed in version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:137e6d79-0017-5e43-b88a-e72603eddfe8",
      "id": "CVE-2025-59419",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-59419 is fixed in version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d309387c-3928-5711-8816-24e2d7a541df",
      "id": "CVE-2025-67735",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-67735 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dbbd9779-fa77-5a10-be4e-8a50f8759231",
      "id": "CVE-2026-33870",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33870 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:951b65a3-844b-517d-ab0c-e2eb15d15100",
      "id": "CVE-2026-33871",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33871 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f530647b-62c7-53b0-9bb2-2a3603aa8b5b",
      "id": "CVE-2026-41417",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41417 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bc7487ff-f807-5bd4-a37b-91013e009271",
      "id": "CVE-2026-42577",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42577 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ad0e39fa-e894-5a56-9b5a-1ac8153a850b",
      "id": "CVE-2026-42578",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42578 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fa801a20-3f82-5db4-9658-500cf5e7dc53",
      "id": "CVE-2026-42579",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42579 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8f28272a-195b-533a-bd88-06ec62087f31",
      "id": "CVE-2026-42580",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42580 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a865934e-bd2a-561a-ae6d-6c299183f7d8",
      "id": "CVE-2026-42581",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42581 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:eeba6a7f-56ab-5e16-8e34-d14e91d2c462",
      "id": "CVE-2026-42583",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42583 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:121ebd97-6a67-53e5-aa55-853187ac3853",
      "id": "CVE-2026-42584",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42584 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b862161a-0df5-5d63-bcfc-a955dcd34564",
      "id": "CVE-2026-42585",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42585 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c1f4861a-045f-5ba7-b1e7-c17c2a44a13f",
      "id": "CVE-2026-42586",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42586 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1bd228c9-74cb-5890-9ff1-1cc7877163a5",
      "id": "CVE-2026-42587",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42587 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e3fd42ec-e560-526f-aa9f-9c29eb948ccf",
      "id": "CVE-2026-44248",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44248 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:531da012-7b8c-52ac-9e81-066e5a085ad9",
      "id": "CVE-2026-44249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44249 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dffb7c6f-4ba7-5384-bcc5-fbfb7ae1afc8",
      "id": "CVE-2026-44250",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44250 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f3ce887f-09a5-59f7-b20b-e5d7c76ddd84",
      "id": "CVE-2026-44890",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:841c9b4b-f919-5b46-9f6c-78b299a8fd4e",
      "id": "CVE-2026-44891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44891 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8f32ee5b-2666-5dd5-893e-5eb201e25097",
      "id": "CVE-2026-44893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44893 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:286f8ff6-4afd-55f9-8cfb-97dbae0f9f74",
      "id": "CVE-2026-45416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45416 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5d3d9c6c-630f-54b3-9abd-d21f491c41dd",
      "id": "CVE-2026-45536",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45536 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e8dcc125-54b7-55f3-b7d9-0564f8ce3266",
      "id": "CVE-2026-45673",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45673 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9a70eec2-66fa-5c6d-a711-360743dc2b67",
      "id": "CVE-2026-45674",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45674 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5d64e260-582e-545f-96c5-810b4df4af10",
      "id": "CVE-2026-46340",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-46340 is fixed in version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7ea88b0e-215d-5c18-a48a-d794b1881a7d",
      "id": "CVE-2026-47244",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47244 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e83f02bc-9a6b-5c0f-97de-392243526646",
      "id": "CVE-2026-47691",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47691 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0e7c0b24-4cee-54d4-b736-67d25bccb414",
      "id": "CVE-2026-48006",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48006 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:609fd640-fc6b-58b5-a0fd-48a185fec90c",
      "id": "CVE-2026-48043",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48043 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3d360163-19d4-5831-9522-cee232925289",
      "id": "CVE-2026-48059",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48059 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7a0a1509-edcd-59a8-a615-a2dc35d47a25",
      "id": "CVE-2026-50010",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50010 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:de772e9b-ea0a-5f77-9288-ec115697c2a1",
      "id": "CVE-2026-50011",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50011 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bd06b571-f8b0-525a-94a9-aa45f66d91c7",
      "id": "CVE-2026-50020",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50020 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:aed4f86c-93f9-5629-9728-82d8ede99e93",
      "id": "CVE-2026-50560",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c1407dea-c284-5369-80fd-4633519c33bd",
      "id": "CVE-2026-55831",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55831 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:12bc8c28-8440-5b71-8f82-ed481234ed8a",
      "id": "CVE-2026-55833",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55833 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bf28cd83-89e8-5232-9542-2fc28e80fc69",
      "id": "CVE-2026-55851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55851 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ba682f12-ae2f-51d0-8b64-068496e79f59",
      "id": "CVE-2026-56745",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56745 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ec242c27-6b77-55ff-86e8-64c5da623c02",
      "id": "CVE-2026-56746",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56746 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5f3fb39a-9e89-5ee4-840d-8518f98e3df1",
      "id": "CVE-2026-56817",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56817 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d975995b-269f-52e9-8f7c-93e0b9e1a633",
      "id": "CVE-2026-56818",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-56818 does not affect version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec-http2. not_affected \u2014 Version 4.1.82.Final is not affected by CVE-2026-56818. The vulnerability exists in the maxElements limit check that was introduced in version 4.1.135.Final (commit e51c64c964). Version 4.1.82.Final predates this security feature entirely - it has no maxElements configuration, no maxElements validation check, and therefore cannot exhibit the vulnerable pattern described in the CVE (throwing wit..."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:aa3e2e95-9d1a-59c3-908f-f59ce56f6607",
      "id": "CVE-2026-56819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56819 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:448f4495-5e80-573e-b1ad-1986818a437c",
      "id": "CVE-2026-59898",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59898 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2a1afae9-769d-5ead-8c68-517a47ab07f1",
      "id": "CVE-2026-59899",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59899 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:551f26df-e86d-5e0e-87a8-977520db4711",
      "id": "CVE-2026-59900",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59900 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2e9c1a2a-ac78-597c-be83-9c338227babf",
      "id": "CVE-2026-59901",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59901 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:05ce261c-1c2f-5b4d-8354-2349441b1d37",
      "id": "CVE-2026-59919",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59919 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fc1960bc-033b-5fdc-a1c2-d8156f1f12b1",
      "id": "CVE-2026-59920",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59920 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5da9a020-e40c-569a-a0e1-f74222393117",
      "id": "CVE-2026-59921",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59921 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3ae23b98-f689-5049-aa5b-9657c707feb8",
      "id": "GHSA-mfg7-5gfp-c4w3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:20cb4c8a-92df-5737-aae6-406167b44b74",
      "id": "GHSA-v74w-7mr3-4qg3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3d6fb518-78e7-5280-b2bb-1219efb11eca",
      "id": "GHSA-xpw8-rcwv-8f8p",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-xpw8-rcwv-8f8p is fixed in version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.82.Final-tuxcare.4"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.82.Final-tuxcare.4"
    }
  ]
}