{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:236bce6b-ae47-576c-8699-1b12bdb0d929",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/io.netty/netty-codec-socks@4.1.73.Final-tuxcare.3",
      "type": "library",
      "group": "io.netty",
      "name": "netty-codec-socks",
      "version": "4.1.73.Final-tuxcare.3",
      "purl": "pkg:maven/io.netty/netty-codec-socks@4.1.73.Final-tuxcare.3"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:e6c463b1-be44-592e-a9b6-7912680e47f6",
      "id": "CVE-2022-24823",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-24823 is fixed in version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-socks."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-socks@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e271b904-f527-5f1c-95d5-2110e4617c63",
      "id": "CVE-2022-41881",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-41881 is fixed in version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-socks."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-socks@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ad914a6d-b4d7-5e2d-94d9-a1029ac76cac",
      "id": "CVE-2022-41915",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-41915 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-socks."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-socks@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:54cce94c-ffc8-5124-9fe0-550e4059d48d",
      "id": "CVE-2023-34462",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-34462 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-socks."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-socks@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7f95acfe-dd9c-5dc0-becf-140af95b4562",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-44487 is fixed in version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-socks."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-socks@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:06b59431-74de-598d-a856-eaf3b3ebe316",
      "id": "CVE-2023-4586",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2023-4586 is a false positive for io.netty:netty-codec-socks 4.1.73.Final-tuxcare.3."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-socks@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4dc93d1a-a201-5a3d-a54c-3f8a93055adb",
      "id": "CVE-2024-29025",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-29025 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-socks."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-socks@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:913e3d07-1f43-55e5-89a4-c2cfb516e6e1",
      "id": "CVE-2024-47535",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-47535 is fixed in version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-socks."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-socks@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:19e9fc95-d571-59d1-9828-70a76d0578cf",
      "id": "CVE-2025-24970",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-24970 is fixed in version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-socks."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-socks@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:378cacbf-587b-5728-b3e5-8c8e5fc6b7a4",
      "id": "CVE-2025-25193",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-25193 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-socks."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-socks@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:23954ecf-6d0c-53a8-8db6-825c2a4cbd17",
      "id": "CVE-2025-55163",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-55163 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-socks."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-socks@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:000c88c2-5b77-539b-bc21-97980bbbc381",
      "id": "CVE-2025-58056",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58056 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-socks."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-socks@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fa689e3e-c707-53d3-b319-e8ddea391d3d",
      "id": "CVE-2025-58057",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58057 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-socks."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-socks@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c9b5988c-6fac-5ee3-9208-1beca2bfe152",
      "id": "CVE-2025-59419",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-59419 is fixed in version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-socks."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-socks@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:457f7781-d4f7-53e1-a9aa-52d172f45281",
      "id": "CVE-2025-67735",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-67735 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-socks."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-socks@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:02b6a92c-6a80-521b-8024-0d8345159293",
      "id": "CVE-2026-33870",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33870 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-socks."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-socks@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:acab12a2-5f6b-5c2f-be18-8dbe830c481d",
      "id": "CVE-2026-33871",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33871 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-socks."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-socks@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ecf3f96f-77e1-53eb-b332-0b67f4160ce8",
      "id": "CVE-2026-41417",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41417 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-socks."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-socks@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b14853b7-6dd7-5c92-8f91-2c07a5276ad1",
      "id": "CVE-2026-42577",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42577 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-socks."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-socks@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0fd87dc1-c15b-5ed7-90fa-1703b54e6891",
      "id": "CVE-2026-42578",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42578 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-socks."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-socks@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:35b28be1-4777-5bf6-9a83-0b774a17aa88",
      "id": "CVE-2026-42579",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42579 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-socks."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-socks@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:286ee0be-0a87-5c38-99c0-911d5663211a",
      "id": "CVE-2026-42580",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42580 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-socks."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-socks@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e165ede5-063f-545f-bcd3-81febe51663d",
      "id": "CVE-2026-42581",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42581 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-socks."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-socks@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8e2c19df-c7e1-517c-aff0-429f8a183cc6",
      "id": "CVE-2026-42583",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42583 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-socks."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-socks@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f8485bfb-710b-52e4-b14a-e53f73e69d3a",
      "id": "CVE-2026-42584",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42584 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-socks."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-socks@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:849e83d7-68f6-5102-a0f8-d4cba45a8497",
      "id": "CVE-2026-42585",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42585 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-socks."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-socks@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:91602e51-fc4c-55c5-818c-bb88e3edf9c9",
      "id": "CVE-2026-42586",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42586 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-socks."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-socks@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b73d9dd5-f873-53da-aa75-babaafc2de88",
      "id": "CVE-2026-42587",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42587 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-socks."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-socks@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e1602bc5-8a6a-5f68-bbea-fb066a5e74c1",
      "id": "CVE-2026-44248",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44248 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-socks."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-socks@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:08a2ab98-2336-5aa9-9690-f2f9596f4724",
      "id": "CVE-2026-44249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44249 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-socks."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-socks@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b42d3f93-2b2e-5b5c-aaa4-ec5566d2e354",
      "id": "CVE-2026-44250",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44250 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-socks."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-socks@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:25332355-5b86-5ada-afb5-d2ca88b9bf06",
      "id": "CVE-2026-44890",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-socks."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-socks@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:02fe5541-1907-5ab8-b9a5-06a37afd1add",
      "id": "CVE-2026-44891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44891 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-socks."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-socks@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ebdb9b7d-ee24-5052-bb99-bf13f6d32c96",
      "id": "CVE-2026-44893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44893 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-socks."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-socks@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2c8c219b-164b-5f11-b3eb-42b9bb3f619d",
      "id": "CVE-2026-45416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45416 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-socks."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-socks@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:22bfc7d4-47a7-5345-8f90-3b5910fa849e",
      "id": "CVE-2026-45536",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45536 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-socks."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-socks@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:af36c1fd-d682-5987-aa0e-bde026c2efd0",
      "id": "CVE-2026-45673",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45673 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-socks."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-socks@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:16d5d799-cb8a-518a-924f-17a08530471b",
      "id": "CVE-2026-45674",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45674 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-socks."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-socks@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:644f8ebf-9f1c-5ed4-abbb-5ab1395a6901",
      "id": "CVE-2026-46340",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-46340 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-socks."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-socks@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cd833004-028c-5f0c-bdde-1c14b1bc4b34",
      "id": "CVE-2026-47244",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47244 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-socks."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-socks@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d22400eb-29d9-5166-88c6-7cd130de02d5",
      "id": "CVE-2026-47691",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47691 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-socks."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-socks@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5bc07c19-2995-5530-ab41-c348b2527975",
      "id": "CVE-2026-48006",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48006 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-socks."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-socks@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a76658e3-77cc-5b23-a5f8-b35479e8ce66",
      "id": "CVE-2026-48043",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-48043 does not affect version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-socks. not_affected \u2014 Version 4.1.73 is not affected by CVE-2026-48043. The target uses a loop-based architecture with try-finally protection (introduced in 2016) that prevents the buffer leak described in the CVE. The vulnerable ChannelInboundHandlerAdapter pattern that the upstream patch fixes does not exist in this version."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-socks@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b9587443-ae02-5410-9562-72e0bc0bb74e",
      "id": "CVE-2026-48059",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48059 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-socks."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-socks@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d1967090-b7ce-5fbc-a35a-30214f705932",
      "id": "CVE-2026-50010",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50010 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-socks."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-socks@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3d0f8a98-dbec-5726-84da-27678f36e957",
      "id": "CVE-2026-50011",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50011 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-socks."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-socks@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d687b3f1-eb2d-5a7d-a1c7-aa6b31278e4e",
      "id": "CVE-2026-50020",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50020 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-socks."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-socks@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bbadd255-aece-58f6-aa33-d5094a6f1678",
      "id": "CVE-2026-50560",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-socks."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-socks@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a0cfaf3c-0819-5206-a0a1-3a6a76e54db0",
      "id": "CVE-2026-55831",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55831 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-socks."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-socks@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e2b4b4de-2b50-53cb-a662-79d99b32fcdb",
      "id": "CVE-2026-55833",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55833 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-socks."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-socks@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a57c7a26-4da3-5978-ae2e-9b8644700263",
      "id": "CVE-2026-55851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55851 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-socks."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-socks@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:009c7d6c-87c3-5d3f-8c3e-dcd9fc35b80b",
      "id": "CVE-2026-56745",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56745 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-socks."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-socks@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dd134ec6-5706-5b45-bab1-51744a8f3d10",
      "id": "CVE-2026-56746",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56746 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-socks."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-socks@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ac4fa1fc-8de8-5ee9-93ae-227e6c73a736",
      "id": "CVE-2026-56817",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56817 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-socks."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-socks@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:348d088d-2b78-55dd-a52a-135e80a8c3f3",
      "id": "CVE-2026-56818",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-56818 does not affect version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-socks. not_affected \u2014 The target version 4.1.73.Final-tuxcare.2 is NOT AFFECTED by CVE-2026-56818. The vulnerable code pattern (configurable `maxElements` limit check without cleanup, contrasting with `maxNestedArrayDepth` limit check WITH cleanup) was introduced in version 4.1.135.Final through commits e51c64c964 and 728c98b8ec (dated 2026-06-01/02). The target version predates these features entirely and does not ..."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-socks@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b43b6365-7f37-5041-953c-18cbd608791d",
      "id": "CVE-2026-56819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56819 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-socks."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-socks@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:05bcbc3a-365e-54f4-b624-e133b1098767",
      "id": "CVE-2026-59898",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59898 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-socks."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-socks@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2a57fcea-4893-52cc-b0be-abfff1e60f43",
      "id": "CVE-2026-59899",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59899 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-socks."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-socks@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ff1be362-53e9-5533-85cb-b80e5c96f001",
      "id": "CVE-2026-59900",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59900 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-socks."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-socks@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:880901ba-1062-5e39-bc78-ba1e29d20bef",
      "id": "CVE-2026-59901",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59901 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-socks."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-socks@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a4b20ec0-8b4c-5859-8288-523bd931ce84",
      "id": "CVE-2026-59919",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59919 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-socks."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-socks@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:baa43c2a-9b16-52f6-beea-7c2e6eee4770",
      "id": "CVE-2026-59920",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59920 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-socks."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-socks@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f2d6f90a-4579-5b25-936e-0b7b760c9f52",
      "id": "CVE-2026-59921",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59921 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-socks."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-socks@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:49186dc9-dfbe-597d-9959-49515de4fc3d",
      "id": "GHSA-mfg7-5gfp-c4w3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-socks."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-socks@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e943ad2d-655e-5429-9c41-cd9690da6cf1",
      "id": "GHSA-v74w-7mr3-4qg3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-socks."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-socks@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:30612881-2d4c-5733-9543-e46552ec6e74",
      "id": "GHSA-xpw8-rcwv-8f8p",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-xpw8-rcwv-8f8p affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-codec-socks."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-socks@4.1.73.Final-tuxcare.3"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.netty/netty-codec-socks@4.1.73.Final-tuxcare.3"
    }
  ]
}