{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:9f969c33-4c25-5933-8bfb-4b6d513c46e5",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.63.Final-tuxcare.4",
      "type": "library",
      "group": "io.netty",
      "name": "netty-codec-memcache",
      "version": "4.1.63.Final-tuxcare.4",
      "purl": "pkg:maven/io.netty/netty-codec-memcache@4.1.63.Final-tuxcare.4"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:e5f3ace7-716c-5275-84f6-75a248172378",
      "id": "CVE-2021-37136",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-37136 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:db690e20-3447-5d48-a9ef-7036bc522409",
      "id": "CVE-2021-37137",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-37137 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8777e947-b309-5cb0-b5bc-6901e52ef88c",
      "id": "CVE-2021-43797",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-43797 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8f0d7ecb-3ecc-5516-ad07-382920ba2596",
      "id": "CVE-2022-24823",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-24823 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5af97a35-6987-504b-a0e1-ebb12066ef19",
      "id": "CVE-2022-41881",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-41881 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a1464a0d-9b50-5da4-867a-ed40948af08b",
      "id": "CVE-2022-41915",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-41915 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:eee24d8b-5193-5464-a9d2-191c9e56e1d6",
      "id": "CVE-2023-34462",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-34462 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:79c21111-1b25-5948-a654-e934e0504484",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-44487 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:16465e3a-9b52-5f72-a20f-faa182517d59",
      "id": "CVE-2023-4586",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2023-4586 is a false positive for io.netty:netty-codec-memcache 4.1.63.Final-tuxcare.4."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:13a018a7-230f-5c5f-8d4f-d74c20efbf01",
      "id": "CVE-2024-29025",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-29025 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7eed63c4-5328-5021-8f59-37dbd18a2fba",
      "id": "CVE-2024-47535",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-47535 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a502d1dc-eaff-50a3-8221-319fe8ee13e0",
      "id": "CVE-2025-24970",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-24970 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:94d7ecef-737b-57a4-baf2-4e80abce25a0",
      "id": "CVE-2025-25193",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-25193 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8b1258ce-1370-558a-abf3-6ac984a14a2c",
      "id": "CVE-2025-55163",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55163 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:309e4e01-74ec-54a5-8275-c7631982d02b",
      "id": "CVE-2025-58056",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58056 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bedbd8b5-5067-535f-820a-149b2d306700",
      "id": "CVE-2025-58057",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-58057 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6c99e7a3-ca0a-5593-b9c7-d164b37bb3a7",
      "id": "CVE-2025-59419",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-59419 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e0f56c29-cd6d-500e-9ab5-24d5f76be0de",
      "id": "CVE-2025-67735",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-67735 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:33bbef36-c8f6-50f2-aa04-bf0ebdb9351a",
      "id": "CVE-2026-33870",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33870 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3bcc476b-c611-5839-b35c-b8ae1f2cba61",
      "id": "CVE-2026-33871",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33871 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d2386cc9-8c65-51d9-ad68-46290c25da82",
      "id": "CVE-2026-41417",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41417 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6213dc83-7070-5bfa-bf2a-eb0af7355825",
      "id": "CVE-2026-42577",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42577 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:71808ed0-c311-5424-bff0-5744f6a2cddc",
      "id": "CVE-2026-42578",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42578 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c2021f4a-d9c9-5d5b-bfc9-b3ae173910fe",
      "id": "CVE-2026-42579",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42579 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9f168752-6b72-5d49-9318-dbea3cbb9f8e",
      "id": "CVE-2026-42580",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42580 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:08b1b77b-6f31-5e84-887a-93dc23a6fa60",
      "id": "CVE-2026-42581",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42581 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:df034987-3bb4-55c9-85c1-cc9f9899b2ad",
      "id": "CVE-2026-42583",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42583 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b7b63141-fad1-5cc0-abc9-8e7ec322078b",
      "id": "CVE-2026-42584",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42584 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:75a6860e-f2c7-5b68-b8d2-ee38b98ce352",
      "id": "CVE-2026-42585",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42585 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:82300bcb-5f41-5efb-a879-14c9c3d3479e",
      "id": "CVE-2026-42586",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42586 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ea35cc4f-ef45-595a-bec7-22a63a3b291f",
      "id": "CVE-2026-42587",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42587 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:aa221baf-580a-5fbf-a8f6-695a37dcbc5c",
      "id": "CVE-2026-44248",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44248 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6a503ce3-6e69-5f35-aec5-2d3e05f24302",
      "id": "CVE-2026-44249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44249 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ccef6bf8-c94d-587b-8afd-24e51cf09fb8",
      "id": "CVE-2026-44250",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44250 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e70d38c0-19ed-5c75-b5c6-3eb761d38624",
      "id": "CVE-2026-44890",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4ea52c35-98f5-51ee-b4fb-4f6ea89369c0",
      "id": "CVE-2026-44891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44891 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9fdb5648-f084-5fad-84f6-216dbc521d19",
      "id": "CVE-2026-44893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44893 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:908420cd-b8cc-5ac7-876c-acf0d9414578",
      "id": "CVE-2026-45416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45416 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bfc39527-2cca-5f1b-b593-021aff0ca6d4",
      "id": "CVE-2026-45536",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45536 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:05d90300-3480-53f4-8c46-b006b7005b9c",
      "id": "CVE-2026-45673",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45673 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:34f9afc3-e92b-5ff8-97b3-a346cd3758f7",
      "id": "CVE-2026-45674",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45674 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:35c9107f-5038-5f43-9d61-18f0991cb255",
      "id": "CVE-2026-46340",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-46340 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:32c4fd2e-4204-5d65-a3af-15ad22468667",
      "id": "CVE-2026-47244",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47244 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:387811a2-9c81-53cb-be66-9041a8829613",
      "id": "CVE-2026-47691",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47691 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f437ff58-e1d5-587a-8821-098b32ed9531",
      "id": "CVE-2026-48006",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48006 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8e9778e1-f926-568b-8053-0157507a258f",
      "id": "CVE-2026-48043",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-48043 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:da306bf7-9cf2-588c-abf0-698a49543a21",
      "id": "CVE-2026-48059",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48059 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3e64e31f-7a65-5bcc-a9e2-42a4c28f2852",
      "id": "CVE-2026-50010",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50010 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:46b20138-be6b-5322-89d1-8613bff409ae",
      "id": "CVE-2026-50011",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50011 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f37c98cd-584f-5c9c-99cb-0522337e9c9c",
      "id": "CVE-2026-50020",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50020 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0dc873fe-fbb1-5629-a7e6-d6a25b7b3756",
      "id": "CVE-2026-50560",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ddde383c-5059-5048-b9ed-2afb98148c26",
      "id": "CVE-2026-55831",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55831 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d6cbac04-2564-542f-9a18-bf7eaa9d8908",
      "id": "CVE-2026-55833",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55833 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9936ed27-8465-5982-863a-ad1dafe2da40",
      "id": "CVE-2026-55851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55851 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:76a7135d-8074-542b-a168-dd269d4d9bf8",
      "id": "CVE-2026-56745",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56745 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3270970c-7dc2-563f-9e82-92b586e3326e",
      "id": "CVE-2026-56746",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56746 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e82fc98e-57d1-56a6-af04-a372b348dc7a",
      "id": "CVE-2026-56817",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-56817 does not affect version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec-memcache. not_affected \u2014 The Netty codec-xml module contains XmlDecoder, which instantiates an Aalto XML parser without security configuration (line 38: new InputFactoryImpl() with no XXE protection). However, this is a library component that Netty itself does not use in its own production code. The vulnerability only manifests when downstream applications explicitly add XmlDecoder to their Netty channel pipelines. Per..."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:426096b2-3c98-5e04-a4c3-19a71de6667e",
      "id": "CVE-2026-56818",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56818 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ea8ad80d-fe00-5e4e-807e-3fdce576dfbd",
      "id": "CVE-2026-56819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56819 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2a5a7ff7-8e74-5299-bba9-0307a4be7e3e",
      "id": "CVE-2026-59898",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59898 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:79b71b93-9270-58fe-975b-94e44c724bc7",
      "id": "CVE-2026-59899",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59899 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0ff76797-f989-588e-984e-028a1ebc128f",
      "id": "CVE-2026-59900",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59900 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c9a8511a-b7f7-5442-b885-f1ef5b7e60dc",
      "id": "CVE-2026-59901",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59901 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:65bd123a-d85b-5308-86a9-a1115eb609c1",
      "id": "CVE-2026-59919",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59919 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:29136d7f-37c2-5556-8d99-0f8a2133bc42",
      "id": "CVE-2026-59920",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59920 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4fa36938-13a5-51fb-93f5-98ed07cf0025",
      "id": "CVE-2026-59921",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59921 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9108b5c4-b541-57d8-ab4a-31595bc83389",
      "id": "GHSA-mfg7-5gfp-c4w3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5ca8a450-7d7b-59ed-b7d7-2fcdfb0312e9",
      "id": "GHSA-v74w-7mr3-4qg3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2cde441e-5c16-57b8-80cd-24334577ee38",
      "id": "GHSA-xpw8-rcwv-8f8p",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-xpw8-rcwv-8f8p affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.63.Final-tuxcare.4"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.63.Final-tuxcare.4"
    }
  ]
}