{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:885ebd08-8ae2-5a57-b07a-521428ea0aec",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.82.Final-tuxcare.5",
      "type": "library",
      "group": "io.netty",
      "name": "netty-codec-mqtt",
      "version": "4.1.82.Final-tuxcare.5",
      "purl": "pkg:maven/io.netty/netty-codec-mqtt@4.1.82.Final-tuxcare.5"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:ee69d2ae-1521-5d1e-8ce8-526d8c0bec98",
      "id": "CVE-2022-41881",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-41881 is fixed in version 4.1.82.Final-tuxcare.5 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.82.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:16e68228-61f7-57f7-963d-21f0f58ad72a",
      "id": "CVE-2022-41915",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-41915 affects version 4.1.82.Final-tuxcare.5 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.82.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9b841151-4660-5bb9-82dd-e538180df4b2",
      "id": "CVE-2023-34462",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-34462 affects version 4.1.82.Final-tuxcare.5 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.82.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:15c7867e-bbf5-5d32-915a-970e249b364e",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-44487 is fixed in version 4.1.82.Final-tuxcare.5 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.82.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cb331516-10e9-5d02-afbe-3bbc718a7891",
      "id": "CVE-2023-4586",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2023-4586 is a false positive for io.netty:netty-codec-mqtt 4.1.82.Final-tuxcare.5."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.82.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:329c3fc9-be1a-52b7-8195-7dc85e96bbd1",
      "id": "CVE-2024-29025",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-29025 affects version 4.1.82.Final-tuxcare.5 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.82.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ae88194a-9bb5-561a-8099-760a46592c96",
      "id": "CVE-2024-47535",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-47535 affects version 4.1.82.Final-tuxcare.5 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.82.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e30f9d4a-16d7-53c9-b32c-51167dcdfdcd",
      "id": "CVE-2025-24970",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-24970 is fixed in version 4.1.82.Final-tuxcare.5 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.82.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b91a0e87-aed8-5d55-a39c-f1bd2dc9f627",
      "id": "CVE-2025-25193",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-25193 affects version 4.1.82.Final-tuxcare.5 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.82.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:456070f7-57af-548f-bbbf-52bc4be898ba",
      "id": "CVE-2025-55163",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55163 is fixed in version 4.1.82.Final-tuxcare.5 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.82.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4cb1036c-fdb4-5537-a12c-1542deb39437",
      "id": "CVE-2025-58056",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58056 affects version 4.1.82.Final-tuxcare.5 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.82.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7dd56599-5b4d-5b63-8c88-8fb42b5449e8",
      "id": "CVE-2025-58057",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-58057 is fixed in version 4.1.82.Final-tuxcare.5 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.82.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4893f206-0181-5c30-8deb-395a93f6b770",
      "id": "CVE-2025-59419",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-59419 is fixed in version 4.1.82.Final-tuxcare.5 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.82.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:02197f39-e06e-542b-b103-c00927362083",
      "id": "CVE-2025-67735",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-67735 affects version 4.1.82.Final-tuxcare.5 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.82.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:14458407-3fe2-5ea4-a889-198aee71a48b",
      "id": "CVE-2026-33870",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33870 affects version 4.1.82.Final-tuxcare.5 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.82.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8f27e48a-2af0-5933-8b07-c3b36f4d7ccc",
      "id": "CVE-2026-33871",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33871 affects version 4.1.82.Final-tuxcare.5 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.82.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1b30fa07-efa6-5357-9c4a-ec56b0bada95",
      "id": "CVE-2026-41417",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41417 affects version 4.1.82.Final-tuxcare.5 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.82.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:33e10e6c-d50f-5c2a-809d-3c82011ba861",
      "id": "CVE-2026-42577",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42577 affects version 4.1.82.Final-tuxcare.5 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.82.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:35816bc5-8c66-5394-aa2d-eb9bb6bebf4d",
      "id": "CVE-2026-42578",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42578 affects version 4.1.82.Final-tuxcare.5 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.82.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ef4ca7b8-cf2c-5eb4-a88c-df4a51132175",
      "id": "CVE-2026-42579",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42579 affects version 4.1.82.Final-tuxcare.5 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.82.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a43edb86-ecf5-547c-9bc0-1ade5ed6c6b2",
      "id": "CVE-2026-42580",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42580 affects version 4.1.82.Final-tuxcare.5 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.82.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:895636d1-754b-5055-9358-a2b94377c19b",
      "id": "CVE-2026-42581",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42581 affects version 4.1.82.Final-tuxcare.5 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.82.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dd0f1de3-59f5-5feb-8099-1bb9636d4e18",
      "id": "CVE-2026-42583",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42583 affects version 4.1.82.Final-tuxcare.5 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.82.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e56bcc61-5c63-54a5-b5db-b89d9a6e1c3b",
      "id": "CVE-2026-42584",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42584 affects version 4.1.82.Final-tuxcare.5 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.82.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ed13d17b-b453-5025-8483-fdd6bd4a503e",
      "id": "CVE-2026-42585",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42585 affects version 4.1.82.Final-tuxcare.5 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.82.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2517d96e-69dc-5d96-941e-704f692bf946",
      "id": "CVE-2026-42586",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42586 affects version 4.1.82.Final-tuxcare.5 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.82.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f3a2e5d4-e0ad-52a6-bd79-df336b0ebdb5",
      "id": "CVE-2026-42587",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42587 affects version 4.1.82.Final-tuxcare.5 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.82.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ae4d680b-ba52-508c-bbea-8ef817c43d99",
      "id": "CVE-2026-44248",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44248 affects version 4.1.82.Final-tuxcare.5 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.82.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4d2f03b5-bc51-5610-9073-672c6f23ec62",
      "id": "CVE-2026-44249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44249 affects version 4.1.82.Final-tuxcare.5 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.82.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7999a392-1eda-5218-a647-a97d719d9978",
      "id": "CVE-2026-44250",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44250 affects version 4.1.82.Final-tuxcare.5 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.82.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8e0eba46-f707-511e-836a-96ea0d7c7e04",
      "id": "CVE-2026-44890",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.82.Final-tuxcare.5 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.82.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:83c8bbca-fc78-52ce-9c2b-b0ed4929508b",
      "id": "CVE-2026-44891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44891 affects version 4.1.82.Final-tuxcare.5 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.82.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:952f23c9-9d17-52e0-b97d-b70e27722c0c",
      "id": "CVE-2026-44893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44893 affects version 4.1.82.Final-tuxcare.5 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.82.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:654ea69b-6082-5563-b187-1cf1d5c3258e",
      "id": "CVE-2026-45416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45416 affects version 4.1.82.Final-tuxcare.5 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.82.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ad51c0e6-c548-5555-9e47-766d59f8de78",
      "id": "CVE-2026-45536",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45536 affects version 4.1.82.Final-tuxcare.5 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.82.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6bc9dc96-c26e-56c1-be55-f93de8b0f0a3",
      "id": "CVE-2026-45673",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45673 affects version 4.1.82.Final-tuxcare.5 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.82.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e02bce0e-4892-5eba-abe3-4ec6b1f8d67b",
      "id": "CVE-2026-45674",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45674 affects version 4.1.82.Final-tuxcare.5 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.82.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e42090f7-d03f-5b5c-8390-ce7b7edc985c",
      "id": "CVE-2026-46340",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-46340 is fixed in version 4.1.82.Final-tuxcare.5 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.82.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c6a76e2f-fa91-587f-9647-1f4031ac8f62",
      "id": "CVE-2026-47244",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47244 affects version 4.1.82.Final-tuxcare.5 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.82.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:034edc26-835f-56d9-abdd-15dca8d31feb",
      "id": "CVE-2026-47691",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47691 affects version 4.1.82.Final-tuxcare.5 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.82.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1aa407ac-95ff-5b59-9b76-4faf3906a321",
      "id": "CVE-2026-48006",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48006 affects version 4.1.82.Final-tuxcare.5 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.82.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ff2e120e-80a8-5a5c-a8d3-f6117f59726d",
      "id": "CVE-2026-48043",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-48043 is fixed in version 4.1.82.Final-tuxcare.5 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.82.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e513eab5-3fcd-5ca0-aa3b-657977b333e6",
      "id": "CVE-2026-48059",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48059 affects version 4.1.82.Final-tuxcare.5 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.82.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7fb6e940-267a-5099-becb-4b7612f6912b",
      "id": "CVE-2026-50010",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50010 affects version 4.1.82.Final-tuxcare.5 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.82.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e75a15e3-9bd8-54d1-af95-df637fb7be2a",
      "id": "CVE-2026-50011",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50011 affects version 4.1.82.Final-tuxcare.5 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.82.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4202aca9-af4a-5c6a-9c51-38db3df12a13",
      "id": "CVE-2026-50020",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50020 affects version 4.1.82.Final-tuxcare.5 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.82.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:67b52536-1306-5250-adf0-7a4a98117cd2",
      "id": "CVE-2026-50560",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.82.Final-tuxcare.5 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.82.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:755c099f-5f62-5343-adf6-47bbd3feed1b",
      "id": "CVE-2026-55831",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55831 affects version 4.1.82.Final-tuxcare.5 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.82.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:baef5758-2ea0-59dc-847a-d1b2e2b92c92",
      "id": "CVE-2026-55833",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55833 affects version 4.1.82.Final-tuxcare.5 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.82.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:19db2aed-55d9-590c-998c-5836466f9a98",
      "id": "CVE-2026-55851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55851 affects version 4.1.82.Final-tuxcare.5 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.82.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7c9b2184-333a-52d5-87fd-1e9bb278ab8a",
      "id": "CVE-2026-56745",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56745 affects version 4.1.82.Final-tuxcare.5 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.82.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fdfefffb-c96f-542f-bd88-a0d06c09212f",
      "id": "CVE-2026-56746",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56746 affects version 4.1.82.Final-tuxcare.5 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.82.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ca658032-be52-5ba0-9f47-36c7bdfe438e",
      "id": "CVE-2026-56817",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56817 affects version 4.1.82.Final-tuxcare.5 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.82.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e05d63a7-ef1e-51a0-bb47-06035635ed62",
      "id": "CVE-2026-56818",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-56818 does not affect version 4.1.82.Final-tuxcare.5 of io.netty:netty-codec-mqtt. not_affected \u2014 Version 4.1.82.Final is not affected by CVE-2026-56818. The vulnerability exists in the maxElements limit check that was introduced in version 4.1.135.Final (commit e51c64c964). Version 4.1.82.Final predates this security feature entirely - it has no maxElements configuration, no maxElements validation check, and therefore cannot exhibit the vulnerable pattern described in the CVE (throwing wit..."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.82.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6653d850-64bc-5033-aba2-6d5db7c4a241",
      "id": "CVE-2026-56819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56819 affects version 4.1.82.Final-tuxcare.5 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.82.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f0ad680b-f15b-54fa-a432-6b173417053b",
      "id": "CVE-2026-59898",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59898 affects version 4.1.82.Final-tuxcare.5 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.82.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:26bb37f8-3031-5d0d-9d3a-ecc32370fea4",
      "id": "CVE-2026-59899",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59899 affects version 4.1.82.Final-tuxcare.5 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.82.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8c09ef6f-0d9c-55e4-b4f7-844aac5492ae",
      "id": "CVE-2026-59900",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59900 affects version 4.1.82.Final-tuxcare.5 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.82.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bff4a82f-bc2b-591f-a4bb-ddac63ac3e8a",
      "id": "CVE-2026-59901",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59901 affects version 4.1.82.Final-tuxcare.5 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.82.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1574bb40-83ba-5fde-bf3c-9664d95211de",
      "id": "CVE-2026-59919",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59919 affects version 4.1.82.Final-tuxcare.5 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.82.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0d36c47f-5171-5360-a9f3-eac421441844",
      "id": "CVE-2026-59920",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59920 affects version 4.1.82.Final-tuxcare.5 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.82.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8b633a58-1588-5956-b694-72d58364b57c",
      "id": "CVE-2026-59921",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59921 affects version 4.1.82.Final-tuxcare.5 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.82.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:257189dd-0130-506c-abc1-07ca2e35fa3a",
      "id": "CVE-2026-73507",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-73507 affects version 4.1.82.Final-tuxcare.5 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.82.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d51b3f69-be1d-5c9f-8a70-90f19b467c9f",
      "id": "CVE-2026-73508",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-73508 affects version 4.1.82.Final-tuxcare.5 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.82.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7bea8309-6fa7-5a1a-9b3a-960b79e5b2c8",
      "id": "GHSA-mfg7-5gfp-c4w3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.82.Final-tuxcare.5 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.82.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d220fe66-f4a6-54f2-8a0b-51b63401dcf0",
      "id": "GHSA-v74w-7mr3-4qg3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.82.Final-tuxcare.5 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.82.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:007cd943-7f80-5781-9771-0d9727d52be6",
      "id": "GHSA-xpw8-rcwv-8f8p",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-xpw8-rcwv-8f8p is fixed in version 4.1.82.Final-tuxcare.5 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.82.Final-tuxcare.5"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.82.Final-tuxcare.5"
    }
  ]
}