{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:159344b9-3da9-57af-a47a-5b94ad9158e9",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/io.netty/netty-codec-redis@4.1.63.Final-tuxcare.4",
      "type": "library",
      "group": "io.netty",
      "name": "netty-codec-redis",
      "version": "4.1.63.Final-tuxcare.4",
      "purl": "pkg:maven/io.netty/netty-codec-redis@4.1.63.Final-tuxcare.4"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:1db389b6-f173-58eb-a954-c7a0cea37685",
      "id": "CVE-2021-37136",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-37136 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ab9b23ed-4c7c-529d-96e4-72594bea248a",
      "id": "CVE-2021-37137",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-37137 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a9c59f88-0242-56af-97ca-4bbb84b2beff",
      "id": "CVE-2021-43797",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-43797 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1e52ff37-dfe1-5f97-a9eb-d2c854648869",
      "id": "CVE-2022-24823",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-24823 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d17569a9-2f92-5911-9ce2-c3596382a0e1",
      "id": "CVE-2022-41881",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-41881 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1cfbade9-c645-529c-8a4a-28a9dde1f618",
      "id": "CVE-2022-41915",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-41915 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d946796a-7951-5935-9c1a-7c3efd8e14c9",
      "id": "CVE-2023-34462",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-34462 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d237fd82-37a2-59b4-a717-982af99dd917",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-44487 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b9701f95-d4b8-5f99-8480-85d1a2675f10",
      "id": "CVE-2023-4586",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2023-4586 is a false positive for io.netty:netty-codec-redis 4.1.63.Final-tuxcare.4."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:49b010e5-0d7e-5f31-9397-a90c5f5ae6c8",
      "id": "CVE-2024-29025",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-29025 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c739b143-912a-5c96-9912-c28ddb1d4ec0",
      "id": "CVE-2024-47535",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-47535 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7f3f8832-5761-58d6-860c-d57c4259dee7",
      "id": "CVE-2025-24970",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-24970 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e80156d4-0544-52a0-a859-be5be5bc7f49",
      "id": "CVE-2025-25193",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-25193 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ebd70ec6-d78f-5ec5-b811-160721961c40",
      "id": "CVE-2025-55163",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55163 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:711d3cb1-7193-5d78-a0cf-1b0958912abd",
      "id": "CVE-2025-58056",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58056 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d735bf65-11fd-5334-9cd2-831cc58c781a",
      "id": "CVE-2025-58057",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-58057 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4b3f81ee-bd8b-5f11-bb64-f3ed5d3c4e1e",
      "id": "CVE-2025-59419",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-59419 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:617f5020-d544-5afc-9f18-df0f12ad10e0",
      "id": "CVE-2025-67735",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-67735 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a28cc220-2940-5185-9333-5a2adb7253c7",
      "id": "CVE-2026-33870",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33870 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4cb13a5e-6b8a-5cdf-b7b6-652842dc8a8b",
      "id": "CVE-2026-33871",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33871 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:479b7c87-8596-5912-9a65-903c981fd313",
      "id": "CVE-2026-41417",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41417 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:18d724c9-28a4-50a8-a102-6cb078eea490",
      "id": "CVE-2026-42577",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42577 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ab841223-1103-5a89-ab20-af77b28b3249",
      "id": "CVE-2026-42578",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42578 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f90a0dc7-690d-598c-8ed2-1ddbe4f7cebc",
      "id": "CVE-2026-42579",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42579 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:78112da1-29e1-5d7e-a65d-7d35f2a2fd2a",
      "id": "CVE-2026-42580",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42580 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:03c73392-bcd1-5233-971b-b50558a0bd14",
      "id": "CVE-2026-42581",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42581 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7c0ffb4f-c394-58b3-8967-43957d220df2",
      "id": "CVE-2026-42583",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42583 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2e8b3027-a5ff-5ce8-be1f-3ab4c25dbe6b",
      "id": "CVE-2026-42584",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42584 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a7e508f5-e487-590a-b144-95ab275987a1",
      "id": "CVE-2026-42585",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42585 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e9b00a42-68ca-535f-85bf-fee61291080c",
      "id": "CVE-2026-42586",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42586 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b41d4a93-57e0-51d0-8df8-d635c004bab4",
      "id": "CVE-2026-42587",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42587 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c9e18a79-d666-522e-b476-7838398c7c92",
      "id": "CVE-2026-44248",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44248 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:200c1fc8-d66a-58ec-95b1-3a34d6f88e2c",
      "id": "CVE-2026-44249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44249 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1a6cb398-8d3f-595a-b827-b7a7d9b364be",
      "id": "CVE-2026-44250",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44250 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:009fcdfd-be8e-504f-9ead-5f75512acb38",
      "id": "CVE-2026-44890",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:964215e6-e065-56d2-b949-256a62e8cd6a",
      "id": "CVE-2026-44891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44891 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b2758bb8-0c5b-5515-9600-c3c67ce326b2",
      "id": "CVE-2026-44893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44893 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c0df2722-097c-51d4-aea0-fa2ac609f065",
      "id": "CVE-2026-45416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45416 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:41b1fb15-9e50-515f-8e23-2ad2ea318915",
      "id": "CVE-2026-45536",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45536 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7f5f0f65-632d-5155-a50b-10d84327fd2a",
      "id": "CVE-2026-45673",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45673 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6374a0cc-5dd0-5eac-aad6-43ea85264993",
      "id": "CVE-2026-45674",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45674 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0001cf88-4995-5bdd-b27d-511360f6eefb",
      "id": "CVE-2026-46340",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-46340 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8a7637e6-c920-500d-ae09-9057d872119b",
      "id": "CVE-2026-47244",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47244 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c2ba5ab8-9dd2-53e1-9411-d2abbe0cb81e",
      "id": "CVE-2026-47691",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47691 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:672a4984-7044-5a41-a4b3-a878cb382b5d",
      "id": "CVE-2026-48006",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48006 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:23f2f9a0-456a-53a6-a1c9-b179e3d02d5e",
      "id": "CVE-2026-48043",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-48043 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2f7f70e8-b151-5b0d-81c1-f90ce9f66e6d",
      "id": "CVE-2026-48059",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48059 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:adbc3f3e-f6c9-5516-a54f-4ec447ada438",
      "id": "CVE-2026-50010",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50010 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3605540c-2b2a-53b2-be5b-2090ba3ccae4",
      "id": "CVE-2026-50011",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50011 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6df3dfda-3b45-509d-853d-8f21a7958338",
      "id": "CVE-2026-50020",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50020 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:60a28cc7-415c-5b65-8f76-22de329ba249",
      "id": "CVE-2026-50560",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b2bde29f-2d7d-5997-9491-31c14ede12d0",
      "id": "CVE-2026-55831",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55831 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4f142000-ecb9-56a0-ab37-16234d4534cc",
      "id": "CVE-2026-55833",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55833 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:07d0a38e-6289-5f85-a74b-da3ea3c3647d",
      "id": "CVE-2026-55851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55851 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9ef7b03b-93fc-53cd-b2f7-ff00b26451b7",
      "id": "CVE-2026-56745",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56745 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:51ba8d01-cec8-5b70-9dab-61ee4a669d00",
      "id": "CVE-2026-56746",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56746 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:299f523b-38f0-51a7-8e9b-8bbe49c30bc0",
      "id": "CVE-2026-56817",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-56817 does not affect version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec-redis. not_affected \u2014 The Netty codec-xml module contains XmlDecoder, which instantiates an Aalto XML parser without security configuration (line 38: new InputFactoryImpl() with no XXE protection). However, this is a library component that Netty itself does not use in its own production code. The vulnerability only manifests when downstream applications explicitly add XmlDecoder to their Netty channel pipelines. Per..."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:858bf239-00b6-5a2d-a42e-ff10b0405a7e",
      "id": "CVE-2026-56818",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56818 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4302f128-2a34-5405-87a5-a54a82252d8a",
      "id": "CVE-2026-56819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56819 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fcf7175e-d8e7-59e2-b589-b5ecbcc8e57a",
      "id": "CVE-2026-59898",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59898 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5e004e54-d735-5380-92d5-130284b60bfd",
      "id": "CVE-2026-59899",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59899 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:653fb582-4490-5ff6-8041-7c9ff8bf0ab3",
      "id": "CVE-2026-59900",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59900 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a4487407-abd2-5f4a-9c57-5ae87d723855",
      "id": "CVE-2026-59901",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59901 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3862143a-6be9-5f14-9405-79af410c6e6b",
      "id": "CVE-2026-59919",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59919 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e94f6c8b-c01a-5736-a11c-d8aa93112533",
      "id": "CVE-2026-59920",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59920 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4e3dd496-1e70-5370-b57e-aaa5ff46a5e8",
      "id": "CVE-2026-59921",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59921 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:56948a49-811e-5d00-b369-c988e4304c0d",
      "id": "GHSA-mfg7-5gfp-c4w3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fb4648f8-e42b-5c74-8574-f27ee3c91d2c",
      "id": "GHSA-v74w-7mr3-4qg3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:769f82f7-71c2-5826-b354-a8c7494ff926",
      "id": "GHSA-xpw8-rcwv-8f8p",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-xpw8-rcwv-8f8p affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.63.Final-tuxcare.4"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.63.Final-tuxcare.4"
    }
  ]
}