{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:aeed3d60-4b18-5fa8-a2cf-90640927b484",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/io.netty/netty-codec-redis@4.1.49.Final-tuxcare.1",
      "type": "library",
      "group": "io.netty",
      "name": "netty-codec-redis",
      "version": "4.1.49.Final-tuxcare.1",
      "purl": "pkg:maven/io.netty/netty-codec-redis@4.1.49.Final-tuxcare.1"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:dc9fd9ef-9f56-5cec-8ec6-0157fe5bcf40",
      "id": "CVE-2021-21290",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-21290 affects version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.49.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:45a09178-57ea-5c1c-bfe6-c97a83eacef1",
      "id": "CVE-2021-21295",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-21295 affects version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.49.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d132dc53-11be-5d9f-a4ea-8ff5c82c5275",
      "id": "CVE-2021-21409",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-21409 is fixed in version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.49.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9009b358-3430-5c30-8cca-f5a17f5247aa",
      "id": "CVE-2021-37136",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-37136 is fixed in version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.49.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a4555f98-dc47-55a8-be3e-ffe49798b63c",
      "id": "CVE-2021-37137",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-37137 is fixed in version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.49.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2d9dacd7-17ef-5191-896a-4f6bc67c5376",
      "id": "CVE-2021-43797",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-43797 is fixed in version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.49.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:faabfdf9-c52b-5c1d-804d-437115bbc02c",
      "id": "CVE-2022-24823",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-24823 is fixed in version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.49.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e59b3c72-2824-57a1-92de-9fd0592d3884",
      "id": "CVE-2022-41881",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-41881 affects version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.49.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:16b4e97e-3b1e-537c-ad03-8249f76822f5",
      "id": "CVE-2022-41915",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-41915 affects version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.49.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:85e5929e-1e67-5f31-8719-575f29a4a487",
      "id": "CVE-2023-34462",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-34462 is fixed in version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.49.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:41541372-0afa-5eb1-9fc9-0038a53ed565",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-44487 is fixed in version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.49.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:189db1da-770c-5b33-a672-07298e6138ea",
      "id": "CVE-2023-4586",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2023-4586 is a false positive for io.netty:netty-codec-redis 4.1.49.Final-tuxcare.1."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.49.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f445dc40-f91e-56e2-b4a0-a1e52ca37b62",
      "id": "CVE-2024-29025",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-29025 affects version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.49.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0dc70ff1-4866-56c7-a6db-5449f55722c8",
      "id": "CVE-2024-47535",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-47535 affects version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.49.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bb94c3ad-62b9-5239-99fb-41d323b72007",
      "id": "CVE-2025-24970",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-24970 is fixed in version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.49.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8277f62a-e410-5b0e-9da7-87d4537335f3",
      "id": "CVE-2025-25193",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2025-25193 does not affect version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-redis. not_affected \u2014 CVE-2025-25193 addresses a bug in the BoundedInputStream class where null bytes (0x00) were not counted toward the read limit due to incorrect conditional logic (if b > 0 instead of if b != -1). This class does not exist in Netty 4.1.49.Final. BoundedInputStream was first introduced in CVE-2024-47535 fixes and backported only to versions 4.1.52.Final and later. Since the vulnerable code compone..."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.49.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e1839461-2876-5d3b-9f5a-8850852b8f85",
      "id": "CVE-2025-55163",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55163 is fixed in version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.49.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9b3be63e-409b-5962-b59a-934f377624ac",
      "id": "CVE-2025-58056",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58056 affects version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.49.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:61b74d73-4c07-5f56-b325-05908a11f710",
      "id": "CVE-2025-58057",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58057 affects version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.49.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d5926409-751f-5fe1-abad-22b83da6ad9b",
      "id": "CVE-2025-59419",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-59419 affects version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.49.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:50c21b7d-b4cd-50b6-8ba0-8f9b5cafbc07",
      "id": "CVE-2025-67735",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-67735 affects version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.49.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:56c11cb9-3421-510c-92c4-d4cf38b35a1d",
      "id": "CVE-2026-33870",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33870 affects version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.49.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fcad3f70-7908-59f7-96df-18c287ff6895",
      "id": "CVE-2026-33871",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33871 affects version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.49.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6e86f67a-83da-57c5-8dc8-4550ed8af4ba",
      "id": "CVE-2026-41417",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41417 affects version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.49.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d332e6ab-bf29-5fc9-958a-628202915644",
      "id": "CVE-2026-42577",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42577 affects version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.49.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:381d3dc1-1f96-5538-a9ed-cb329d046658",
      "id": "CVE-2026-42578",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42578 affects version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.49.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ba225020-745c-567c-967e-a83f960caa83",
      "id": "CVE-2026-42579",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42579 affects version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.49.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:65efebc8-9f51-52f6-8b3f-960cd09ef7ac",
      "id": "CVE-2026-42580",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42580 affects version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.49.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a51d15b5-988d-594c-adc6-d23d6cd6ad1f",
      "id": "CVE-2026-42581",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42581 affects version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.49.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dbcfbf02-ad4b-5645-898b-2984fa3d53c0",
      "id": "CVE-2026-42583",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42583 affects version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.49.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2402e290-317f-5ea8-b98e-e3cad3989631",
      "id": "CVE-2026-42584",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42584 affects version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.49.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4c070650-9cc2-510d-b722-df503cde0c67",
      "id": "CVE-2026-42585",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42585 affects version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.49.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b02c17a6-e9eb-53bb-b43c-5368bd33cac3",
      "id": "CVE-2026-42586",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42586 affects version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.49.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:46b72580-51d0-5887-b38b-21ed711d5046",
      "id": "CVE-2026-42587",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42587 affects version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.49.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6ca506f7-dbf7-5e19-8408-9c659c1d2c8e",
      "id": "CVE-2026-44248",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44248 affects version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.49.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7976f0da-bf3b-5dad-896d-acdff307c032",
      "id": "CVE-2026-44249",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-44249 does not affect version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-redis. not_affected \u2014 The target repository (Netty 4.1.49.Final-tuxcare.1) is not affected by CVE-2026-44249. The vulnerability exists in the IpSubnetFilterRule#compareTo(InetSocketAddress) method, which was introduced in version 4.1.52+ as part of a binary search optimization (PR #10492, merged September 2020). The target version predates this feature and uses a simpler matches() method that correctly applies the s..."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.49.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ef36ccd6-c754-55e9-aac0-cbf80c7fea43",
      "id": "CVE-2026-44250",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44250 affects version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.49.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:752dbd6e-26c5-5d9d-94a3-739a2111e5c1",
      "id": "CVE-2026-44890",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44890 affects version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.49.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:646448b9-5c48-5c9d-92fa-b371681d8ace",
      "id": "CVE-2026-44891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44891 affects version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.49.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8395848f-1e33-5e93-97ac-dfd96f41d97f",
      "id": "CVE-2026-44893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44893 affects version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.49.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:63f715f0-f7e6-5745-875c-510f73f72ad0",
      "id": "CVE-2026-45416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45416 affects version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.49.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d8ad8720-cb9f-5f1c-8791-04f10b1061c4",
      "id": "CVE-2026-45536",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45536 affects version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.49.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7a54a323-1cf7-5190-8ce1-8fc837bb31cc",
      "id": "CVE-2026-45673",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45673 affects version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.49.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8656a1e7-78c7-595b-a59a-2f82bb5371ef",
      "id": "CVE-2026-45674",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45674 affects version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.49.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:14caa146-c510-5caf-b839-c7574f7d333a",
      "id": "CVE-2026-46340",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-46340 affects version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.49.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:452741a5-6347-5ae7-9f0b-e31945bae6eb",
      "id": "CVE-2026-47244",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47244 affects version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.49.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:eecfa81d-0eb2-52b0-8e74-081dcc8a229e",
      "id": "CVE-2026-47691",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47691 affects version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.49.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9fb5fd94-f884-5101-9c1b-cc373ae43b71",
      "id": "CVE-2026-48006",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48006 affects version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.49.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:749ef258-2995-50ca-9031-f7a8ab0dae88",
      "id": "CVE-2026-48043",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48043 affects version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.49.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:88e0a81c-7ed5-51f2-a8a7-4ac876ffc489",
      "id": "CVE-2026-48059",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48059 affects version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.49.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4154cd67-da47-5a57-bc37-e64b325cced1",
      "id": "CVE-2026-50010",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50010 affects version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.49.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:07884e5e-643c-5504-af02-35b2c5be68fe",
      "id": "CVE-2026-50011",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50011 affects version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.49.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:da9fc31e-0d24-5b03-88df-8bd59057b370",
      "id": "CVE-2026-50020",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50020 affects version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.49.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e5c16d6b-34c2-5073-a9c0-048a02ab31b7",
      "id": "CVE-2026-50560",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50560 affects version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.49.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:40a06e7c-92bc-53e4-b509-513dee24bb3d",
      "id": "CVE-2026-55831",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55831 affects version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.49.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9b75b13a-b8f3-5299-938c-bf68352c4be4",
      "id": "CVE-2026-55833",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55833 affects version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.49.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5cb94fa5-1b9b-52b1-9dce-b09ab54fa411",
      "id": "CVE-2026-55851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55851 affects version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.49.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e27b1744-66b3-53ab-ad3e-5f1d50b5bfc5",
      "id": "CVE-2026-56745",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56745 affects version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.49.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e7a68701-0f69-5fa3-9113-f37db86f54a8",
      "id": "CVE-2026-56746",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56746 affects version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.49.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cf545419-0c83-5c0c-ba17-6423b22fcf39",
      "id": "CVE-2026-56817",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56817 affects version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.49.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b0e3c36a-af60-5a66-a936-3c652e0b17ef",
      "id": "CVE-2026-56818",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-56818 does not affect version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-redis. not_affected \u2014 CVE-2026-56818 describes a resource leak in RedisArrayAggregator where the maxElements limit check throws without calling releaseAndClearDepths(), while the maxNestedArrayDepth limit check properly cleans up. The target version (4.1.49.Final at SHA 3ff20edafd) does not contain these features - they were added in later commits (e51c64c964 adding maxElements, 728c98b8ec adding maxNestedArrayDepth..."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.49.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:96a07b31-c5b7-5890-9885-7268b9fbd463",
      "id": "CVE-2026-56819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56819 affects version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.49.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:22624d8c-68c5-54cf-b87e-0d47d62aef9a",
      "id": "CVE-2026-59898",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59898 affects version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.49.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f3543ddb-1f9f-586c-9fc8-cb28cd65b42b",
      "id": "CVE-2026-59899",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59899 affects version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.49.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b7b4926d-00e1-5bd8-bad6-f8d3f48ddec5",
      "id": "CVE-2026-59900",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59900 affects version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.49.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:24f88975-5f4c-5014-adfc-a96a763d7914",
      "id": "CVE-2026-59901",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59901 affects version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.49.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:eb14f92e-6d37-540c-bdf9-e0f3098e9bad",
      "id": "CVE-2026-59919",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59919 affects version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.49.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1a456fd5-f4dc-5d56-978d-f16545463fc9",
      "id": "CVE-2026-59920",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59920 affects version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.49.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6afcba1b-a090-57c9-a2a1-d039e58100eb",
      "id": "CVE-2026-59921",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59921 affects version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.49.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d9d2a537-2d40-5eaf-888c-44b9e3941e79",
      "id": "CVE-2026-73507",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-73507 affects version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.49.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:802f6aba-b541-55cd-a03f-8ef4d729fb10",
      "id": "CVE-2026-73508",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-73508 affects version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.49.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bdbc19e4-4e8c-5ca1-98b8-c3778f0a02d2",
      "id": "GHSA-mfg7-5gfp-c4w3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.49.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a40d5cb1-297b-5f1a-9921-d8c7229e3f86",
      "id": "GHSA-v74w-7mr3-4qg3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.49.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:64cc5e0d-ce3c-5c6b-9323-2f19aca83422",
      "id": "GHSA-xpw8-rcwv-8f8p",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-xpw8-rcwv-8f8p affects version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.49.Final-tuxcare.1"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.49.Final-tuxcare.1"
    }
  ]
}