{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:62785cc6-d15b-5d6d-bcbc-6d929846d60e",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.82.Final-tuxcare.6",
      "type": "library",
      "group": "io.netty",
      "name": "netty-codec-smtp",
      "version": "4.1.82.Final-tuxcare.6",
      "purl": "pkg:maven/io.netty/netty-codec-smtp@4.1.82.Final-tuxcare.6"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:e213c72e-d72d-5759-bf7d-44b37539ffb4",
      "id": "CVE-2022-41881",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-41881 is fixed in version 4.1.82.Final-tuxcare.6 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.82.Final-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9afa99a7-17ed-5eb5-a419-f85edb9b422e",
      "id": "CVE-2022-41915",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-41915 affects version 4.1.82.Final-tuxcare.6 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.82.Final-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:61077cb6-6114-573c-bd3f-1367671752f6",
      "id": "CVE-2023-34462",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-34462 affects version 4.1.82.Final-tuxcare.6 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.82.Final-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d3969a87-4c30-5582-9438-421d97071866",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-44487 is fixed in version 4.1.82.Final-tuxcare.6 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.82.Final-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9f6627cb-2e46-52e2-a640-469e0edbcc19",
      "id": "CVE-2023-4586",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2023-4586 is a false positive for io.netty:netty-codec-smtp 4.1.82.Final-tuxcare.6."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.82.Final-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:21f92557-93ed-52b6-bb1b-b4e19821bf3b",
      "id": "CVE-2024-29025",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-29025 affects version 4.1.82.Final-tuxcare.6 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.82.Final-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8021ba42-580e-5775-be36-7ed8609459a1",
      "id": "CVE-2024-47535",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-47535 affects version 4.1.82.Final-tuxcare.6 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.82.Final-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0b9bc132-d822-5885-a343-ac09ced4c861",
      "id": "CVE-2025-24970",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-24970 is fixed in version 4.1.82.Final-tuxcare.6 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.82.Final-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:684ba2b0-e2ce-5998-a650-3ce0df1ae963",
      "id": "CVE-2025-25193",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-25193 affects version 4.1.82.Final-tuxcare.6 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.82.Final-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9761e2fa-2b96-53e4-a435-3d84deb9004e",
      "id": "CVE-2025-55163",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55163 is fixed in version 4.1.82.Final-tuxcare.6 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.82.Final-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:96a08aa9-4fa3-5bbc-b9bd-37ca6373c5b9",
      "id": "CVE-2025-58056",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58056 affects version 4.1.82.Final-tuxcare.6 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.82.Final-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:67eba010-35c2-5207-879b-99cd925786a4",
      "id": "CVE-2025-58057",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-58057 is fixed in version 4.1.82.Final-tuxcare.6 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.82.Final-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c8784c21-9731-56f6-b57e-17ebc8fe4464",
      "id": "CVE-2025-59419",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-59419 is fixed in version 4.1.82.Final-tuxcare.6 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.82.Final-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c9c8f2c4-f595-5277-a7d1-0b0e23c15501",
      "id": "CVE-2025-67735",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-67735 affects version 4.1.82.Final-tuxcare.6 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.82.Final-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:da8c716d-3d10-579e-bc87-06de9c998fc9",
      "id": "CVE-2026-33870",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33870 affects version 4.1.82.Final-tuxcare.6 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.82.Final-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dde51e53-001f-5591-b127-e9aec8929346",
      "id": "CVE-2026-33871",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33871 affects version 4.1.82.Final-tuxcare.6 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.82.Final-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:45e57984-34d1-57f7-80ad-7eb37dc4b2c7",
      "id": "CVE-2026-41417",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41417 affects version 4.1.82.Final-tuxcare.6 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.82.Final-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0d401f3e-5227-5782-973d-eb5ec5fff595",
      "id": "CVE-2026-42577",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42577 affects version 4.1.82.Final-tuxcare.6 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.82.Final-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:05845266-9f76-5041-a73e-be858db36352",
      "id": "CVE-2026-42578",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42578 affects version 4.1.82.Final-tuxcare.6 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.82.Final-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:554fe6a9-233c-5d3c-afde-88feb91ee677",
      "id": "CVE-2026-42579",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42579 affects version 4.1.82.Final-tuxcare.6 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.82.Final-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d9ced4a9-f3f4-5048-b374-e1926e888ceb",
      "id": "CVE-2026-42580",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42580 affects version 4.1.82.Final-tuxcare.6 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.82.Final-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e7624fa1-1855-5078-8bcc-34afc794bbe7",
      "id": "CVE-2026-42581",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42581 affects version 4.1.82.Final-tuxcare.6 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.82.Final-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:348a24e1-11c8-5412-9273-02b1c40975ae",
      "id": "CVE-2026-42583",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42583 affects version 4.1.82.Final-tuxcare.6 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.82.Final-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c342bc67-d47f-53f5-bb24-2d5bf27a5f42",
      "id": "CVE-2026-42584",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42584 affects version 4.1.82.Final-tuxcare.6 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.82.Final-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:90fe5dea-2cc8-5439-8d40-c80b81ad564e",
      "id": "CVE-2026-42585",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42585 affects version 4.1.82.Final-tuxcare.6 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.82.Final-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9c8ebaf5-e581-5f34-919f-d449bfa94df3",
      "id": "CVE-2026-42586",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42586 affects version 4.1.82.Final-tuxcare.6 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.82.Final-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:46270c80-c846-5b06-9c3c-0b83ff33c945",
      "id": "CVE-2026-42587",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42587 affects version 4.1.82.Final-tuxcare.6 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.82.Final-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7b944544-68a6-538a-844d-6fcd83bf268e",
      "id": "CVE-2026-44248",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44248 affects version 4.1.82.Final-tuxcare.6 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.82.Final-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c7ce1800-eb9c-546d-bd0b-20652eb36b26",
      "id": "CVE-2026-44249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44249 affects version 4.1.82.Final-tuxcare.6 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.82.Final-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:754d5ca5-648c-5b4b-ab04-61a0a3a7d7ff",
      "id": "CVE-2026-44250",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44250 affects version 4.1.82.Final-tuxcare.6 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.82.Final-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4d62b97e-18e8-5f99-b3db-30965b50f03e",
      "id": "CVE-2026-44890",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.82.Final-tuxcare.6 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.82.Final-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2523e558-e1c8-54f1-820e-13ce8a99d4f9",
      "id": "CVE-2026-44891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44891 affects version 4.1.82.Final-tuxcare.6 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.82.Final-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:abaf2508-159b-5e26-a003-b9e301306bc8",
      "id": "CVE-2026-44893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44893 affects version 4.1.82.Final-tuxcare.6 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.82.Final-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2b41e660-4c2a-503f-ae8c-9f1f243283a2",
      "id": "CVE-2026-45416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45416 affects version 4.1.82.Final-tuxcare.6 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.82.Final-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c99fe3bb-f92f-5219-ae57-166cbb67158a",
      "id": "CVE-2026-45536",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45536 affects version 4.1.82.Final-tuxcare.6 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.82.Final-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ab16d34e-fa5b-59a1-8ba2-92b4e77b233d",
      "id": "CVE-2026-45673",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45673 affects version 4.1.82.Final-tuxcare.6 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.82.Final-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9f62dd0b-e4bc-58f7-903b-f629f9d01d54",
      "id": "CVE-2026-45674",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45674 affects version 4.1.82.Final-tuxcare.6 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.82.Final-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ebedcfbc-ddf6-539b-a7b1-530a656bbac1",
      "id": "CVE-2026-46340",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-46340 is fixed in version 4.1.82.Final-tuxcare.6 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.82.Final-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:61c0cb7d-2c59-5a87-acbc-ba6f0a644a57",
      "id": "CVE-2026-47244",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47244 affects version 4.1.82.Final-tuxcare.6 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.82.Final-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2611de40-cb5a-5795-ab0c-cebd4ca0dfd9",
      "id": "CVE-2026-47691",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47691 affects version 4.1.82.Final-tuxcare.6 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.82.Final-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:33dbf7e6-1d07-5522-ba7d-839d4e87d81a",
      "id": "CVE-2026-48006",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48006 affects version 4.1.82.Final-tuxcare.6 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.82.Final-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6036a850-28b8-52b5-8d14-6f06866727d2",
      "id": "CVE-2026-48043",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-48043 is fixed in version 4.1.82.Final-tuxcare.6 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.82.Final-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5a99a4c1-5418-5f6e-bdd1-78841e34d2c0",
      "id": "CVE-2026-48059",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48059 affects version 4.1.82.Final-tuxcare.6 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.82.Final-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f7950481-e459-5046-b260-4099956df077",
      "id": "CVE-2026-50010",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50010 affects version 4.1.82.Final-tuxcare.6 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.82.Final-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:eb9785e8-561f-5dbb-b2f0-5dbbced9136c",
      "id": "CVE-2026-50011",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50011 affects version 4.1.82.Final-tuxcare.6 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.82.Final-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:004981fb-0c4f-5e83-b76c-b9030fbb4391",
      "id": "CVE-2026-50020",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50020 affects version 4.1.82.Final-tuxcare.6 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.82.Final-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a3f133a1-d4d7-5fee-bada-da3120b7b816",
      "id": "CVE-2026-50560",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.82.Final-tuxcare.6 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.82.Final-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9d59bc71-4c9b-5baf-8735-1941fabcfd16",
      "id": "CVE-2026-55831",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55831 affects version 4.1.82.Final-tuxcare.6 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.82.Final-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:98a5d6dc-aa5b-5686-927f-b6b3b73e399b",
      "id": "CVE-2026-55833",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55833 affects version 4.1.82.Final-tuxcare.6 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.82.Final-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fb145755-2651-5128-be06-e0708025777b",
      "id": "CVE-2026-55851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55851 affects version 4.1.82.Final-tuxcare.6 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.82.Final-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8ebae77e-ad4a-5af0-9219-816a533958af",
      "id": "CVE-2026-56745",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56745 affects version 4.1.82.Final-tuxcare.6 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.82.Final-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7e581c78-7f3e-5db8-91d1-dcbaed033e93",
      "id": "CVE-2026-56746",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56746 affects version 4.1.82.Final-tuxcare.6 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.82.Final-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a9d24820-7135-5999-bb43-450a1273df36",
      "id": "CVE-2026-56817",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56817 affects version 4.1.82.Final-tuxcare.6 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.82.Final-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cb2b5133-c0b7-596c-bdc6-223a0329c3b1",
      "id": "CVE-2026-56818",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-56818 does not affect version 4.1.82.Final-tuxcare.6 of io.netty:netty-codec-smtp. not_affected \u2014 Version 4.1.82.Final is not affected by CVE-2026-56818. The vulnerability exists in the maxElements limit check that was introduced in version 4.1.135.Final (commit e51c64c964). Version 4.1.82.Final predates this security feature entirely - it has no maxElements configuration, no maxElements validation check, and therefore cannot exhibit the vulnerable pattern described in the CVE (throwing wit..."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.82.Final-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cafb5604-9605-523a-92ca-383df1474884",
      "id": "CVE-2026-56819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56819 affects version 4.1.82.Final-tuxcare.6 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.82.Final-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0f9ec259-187f-5615-827a-e16f5711c0e1",
      "id": "CVE-2026-59898",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59898 affects version 4.1.82.Final-tuxcare.6 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.82.Final-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ce2e4e41-4693-55ed-b9c7-c6298db91f32",
      "id": "CVE-2026-59899",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59899 affects version 4.1.82.Final-tuxcare.6 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.82.Final-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:94d5f0d7-769e-5b90-ac7f-0df3f90c473b",
      "id": "CVE-2026-59900",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59900 affects version 4.1.82.Final-tuxcare.6 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.82.Final-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6d9038f6-9c1a-5d22-b81e-430eb447fc7f",
      "id": "CVE-2026-59901",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59901 affects version 4.1.82.Final-tuxcare.6 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.82.Final-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:196449e5-c34f-574e-89a2-9538900b0953",
      "id": "CVE-2026-59919",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59919 affects version 4.1.82.Final-tuxcare.6 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.82.Final-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0b1bc922-01c2-55f5-80fa-b5e02148d4a5",
      "id": "CVE-2026-59920",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59920 affects version 4.1.82.Final-tuxcare.6 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.82.Final-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f10d5ba3-1c1d-588e-8276-085265672cc6",
      "id": "CVE-2026-59921",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59921 affects version 4.1.82.Final-tuxcare.6 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.82.Final-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d22ddef0-9e06-5ca5-b4db-6b39cfb980fc",
      "id": "CVE-2026-73507",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-73507 affects version 4.1.82.Final-tuxcare.6 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.82.Final-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:618a7e84-41b9-550a-9ed9-bf84c4178621",
      "id": "CVE-2026-73508",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-73508 affects version 4.1.82.Final-tuxcare.6 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.82.Final-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d61057ef-70e5-5b21-928c-a9f141b27b3e",
      "id": "GHSA-mfg7-5gfp-c4w3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.82.Final-tuxcare.6 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.82.Final-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8b9e3a44-22ba-5da9-a99d-6144aff89915",
      "id": "GHSA-v74w-7mr3-4qg3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.82.Final-tuxcare.6 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.82.Final-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:64cbc24a-2955-506f-9fd7-ad1faf2677ad",
      "id": "GHSA-xpw8-rcwv-8f8p",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-xpw8-rcwv-8f8p is fixed in version 4.1.82.Final-tuxcare.6 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.82.Final-tuxcare.6"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.82.Final-tuxcare.6"
    }
  ]
}