{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:29360d3a-e90a-5195-a2fc-16fe4148e3ce",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.73.Final-tuxcare.3",
      "type": "library",
      "group": "io.netty",
      "name": "netty-codec-memcache",
      "version": "4.1.73.Final-tuxcare.3",
      "purl": "pkg:maven/io.netty/netty-codec-memcache@4.1.73.Final-tuxcare.3"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:73e7c313-7557-5794-ad1a-9e86b5a3c9f8",
      "id": "CVE-2022-24823",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-24823 is fixed in version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c4b287f0-9150-5938-9569-9b1e179bc4bb",
      "id": "CVE-2022-41881",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-41881 is fixed in version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:33898256-3669-5d9f-a165-0fd08a1add9b",
      "id": "CVE-2022-41915",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-41915 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c385f16a-f9cd-5aab-b10d-a3d01bb56c48",
      "id": "CVE-2023-34462",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-34462 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1ebf82fa-8f1d-5450-bfaf-aef054d2ff97",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-44487 is fixed in version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b749c4a4-1781-5315-8153-abc8223ede5f",
      "id": "CVE-2023-4586",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2023-4586 is a false positive for io.netty:netty-codec-memcache 4.1.73.Final-tuxcare.3."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:422e7b0f-5db3-5282-8955-066025f99152",
      "id": "CVE-2024-29025",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-29025 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:45afcc60-e9c4-549f-ad7e-1384b596dbd7",
      "id": "CVE-2024-47535",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-47535 is fixed in version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:338bf28b-0863-5361-8449-59c672e96826",
      "id": "CVE-2025-24970",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-24970 is fixed in version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:627259f6-9069-5ce2-9914-e8fa63b2f19f",
      "id": "CVE-2025-25193",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-25193 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a3028caa-0a4a-52e8-8d3d-cd58bf563380",
      "id": "CVE-2025-55163",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-55163 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:56f0a39a-f4e3-582a-8824-a98f648ec1bb",
      "id": "CVE-2025-58056",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58056 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3520db93-3097-5ef6-8b52-f8be3f47fb22",
      "id": "CVE-2025-58057",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58057 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1817b450-535a-5af0-b429-2605a6b5655b",
      "id": "CVE-2025-59419",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-59419 is fixed in version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f98201c9-6f63-5d36-82f5-7b0bf9acc089",
      "id": "CVE-2025-67735",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-67735 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1c907ba5-8a1f-5260-b47d-b60346b1df45",
      "id": "CVE-2026-33870",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33870 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ff839f37-cf7b-5a9d-ad8b-d8a848016011",
      "id": "CVE-2026-33871",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33871 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d036e200-36ed-5c1e-8600-d37ab9154194",
      "id": "CVE-2026-41417",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41417 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:255561c4-f619-5614-bb17-ade14b8ea64c",
      "id": "CVE-2026-42577",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42577 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:60dcdd64-65e7-513e-9656-7fb67ad3a91b",
      "id": "CVE-2026-42578",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42578 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7e42732f-c36b-56ad-88dc-421c3a2e1922",
      "id": "CVE-2026-42579",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42579 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5635537c-3373-5e1a-8710-876722544d31",
      "id": "CVE-2026-42580",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42580 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:70ec7e16-f65f-5ff6-bad0-1f8c6e281bb0",
      "id": "CVE-2026-42581",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42581 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:265774cd-a1d3-5cc1-956a-1b08cf8de596",
      "id": "CVE-2026-42583",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42583 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a6df4b88-7c48-574a-86a9-368a62ad8817",
      "id": "CVE-2026-42584",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42584 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cac61ba6-43ad-568f-9a6f-b5c834c8dbed",
      "id": "CVE-2026-42585",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42585 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b64320c1-be04-53f7-b010-f2a842c7d0ff",
      "id": "CVE-2026-42586",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42586 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:29077e8e-bd38-51bc-a9cb-7444fa5cff53",
      "id": "CVE-2026-42587",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42587 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f9f0595a-b385-5fb8-ae50-cd539e3ede0a",
      "id": "CVE-2026-44248",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44248 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dc464190-6bb2-5c1d-a880-8e680f9ab22e",
      "id": "CVE-2026-44249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44249 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:918c2cd2-3c5f-5e2e-8ef9-8f1152c584c4",
      "id": "CVE-2026-44250",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44250 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d67f2e50-0b41-5645-9f9d-80268acd9dec",
      "id": "CVE-2026-44890",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:82738dae-062e-5868-919f-622f7fefc644",
      "id": "CVE-2026-44891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44891 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0148879d-ec48-5039-9dcd-cf31c96e2cc2",
      "id": "CVE-2026-44893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44893 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d076f42a-5048-55e3-a889-6dd156750658",
      "id": "CVE-2026-45416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45416 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:51f0d6eb-0d12-5521-8be0-7505dd923402",
      "id": "CVE-2026-45536",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45536 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7a70c9ae-0791-59a9-999a-5299b9164585",
      "id": "CVE-2026-45673",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45673 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0e0b0b26-125e-5e8e-b796-b87a4fed8b5b",
      "id": "CVE-2026-45674",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45674 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:811c0428-085e-5e5a-846f-9ad355b4bdb3",
      "id": "CVE-2026-46340",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-46340 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c38b28c5-e895-57cd-a80a-d773a4049ac5",
      "id": "CVE-2026-47244",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47244 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:43b96fc9-b9ba-57a1-a358-a83d75fd684e",
      "id": "CVE-2026-47691",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47691 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1e0e450d-77d5-5003-b1b8-9ac289ef5692",
      "id": "CVE-2026-48006",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48006 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e1c9b063-3c5f-58ea-8f86-7b1ffb762c34",
      "id": "CVE-2026-48043",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-48043 does not affect version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-memcache. not_affected \u2014 Version 4.1.73 is not affected by CVE-2026-48043. The target uses a loop-based architecture with try-finally protection (introduced in 2016) that prevents the buffer leak described in the CVE. The vulnerable ChannelInboundHandlerAdapter pattern that the upstream patch fixes does not exist in this version."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3e7fcf53-0ed0-5451-8296-7a369def07e9",
      "id": "CVE-2026-48059",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48059 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dc73438d-5f04-50e2-bb20-3fe8bbb14432",
      "id": "CVE-2026-50010",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50010 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fe9636cf-618a-5239-a615-caa0d22fa3f3",
      "id": "CVE-2026-50011",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50011 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5f4c2e4d-db1a-5f0d-aaf3-f958530b956f",
      "id": "CVE-2026-50020",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50020 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b9afbe7f-91ff-5b66-af05-cd9c92ab13b9",
      "id": "CVE-2026-50560",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fa99be4e-a564-52bb-ac17-e93fbf308d6c",
      "id": "CVE-2026-55831",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55831 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:027ba53c-0f80-500e-ae25-bba728327ea9",
      "id": "CVE-2026-55833",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55833 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:34832bd0-57fc-5a17-aa36-1cce55cd4987",
      "id": "CVE-2026-55851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55851 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:50c21d90-f694-5f80-8fea-43ef953dc8a1",
      "id": "CVE-2026-56745",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56745 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c1dd916c-b68f-5603-b032-c5cb84b85e7d",
      "id": "CVE-2026-56746",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56746 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:40a82bf0-bb4b-5044-b1ac-500be1bf9949",
      "id": "CVE-2026-56817",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56817 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a583c27e-ea14-5603-bf52-6dbc2083c418",
      "id": "CVE-2026-56818",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-56818 does not affect version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-memcache. not_affected \u2014 The target version 4.1.73.Final-tuxcare.2 is NOT AFFECTED by CVE-2026-56818. The vulnerable code pattern (configurable `maxElements` limit check without cleanup, contrasting with `maxNestedArrayDepth` limit check WITH cleanup) was introduced in version 4.1.135.Final through commits e51c64c964 and 728c98b8ec (dated 2026-06-01/02). The target version predates these features entirely and does not ..."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ae9130eb-8e85-588a-a9f1-0dd2694be7db",
      "id": "CVE-2026-56819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56819 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e5c9e021-e377-5b6a-b07b-0d4ae9a8d9f9",
      "id": "CVE-2026-59898",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59898 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:047daf40-6d26-55e7-bea5-622e4d1e127c",
      "id": "CVE-2026-59899",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59899 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:33434656-0f6d-5a75-bad4-007073a2b026",
      "id": "CVE-2026-59900",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59900 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d764dae8-81fe-52ea-8ae8-ae25c859cd4a",
      "id": "CVE-2026-59901",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59901 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5f99bb6d-b1e4-51a6-b203-4e0cd072c400",
      "id": "CVE-2026-59919",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59919 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c5094073-e5fb-56b8-81a7-1f7a13b52688",
      "id": "CVE-2026-59920",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59920 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:53f4a0ae-0179-5ea8-90b2-eeed77a9cf41",
      "id": "CVE-2026-59921",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59921 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:317e42e7-ac65-5e3b-9b7f-e44f2f0431dc",
      "id": "GHSA-mfg7-5gfp-c4w3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bb6a0583-ffcb-5b0d-81e8-f8cfab788757",
      "id": "GHSA-v74w-7mr3-4qg3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ade3af04-9579-5b49-8b7f-348bf0e68b78",
      "id": "GHSA-xpw8-rcwv-8f8p",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-xpw8-rcwv-8f8p affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.73.Final-tuxcare.3"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.73.Final-tuxcare.3"
    }
  ]
}