{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:8db654e0-2223-5929-993d-ded72a971263",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/io.netty/netty-codec-socks@4.1.75.Final-tuxcare.4",
      "type": "library",
      "group": "io.netty",
      "name": "netty-codec-socks",
      "version": "4.1.75.Final-tuxcare.4",
      "purl": "pkg:maven/io.netty/netty-codec-socks@4.1.75.Final-tuxcare.4"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:4e02cffa-60a2-578c-b0a5-7556f8ae230a",
      "id": "CVE-2022-24823",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-24823 is fixed in version 4.1.75.Final-tuxcare.4 of io.netty:netty-codec-socks."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-socks@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0f292c69-8dbc-55a1-9d3e-93c0720b76d4",
      "id": "CVE-2022-41881",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-41881 is fixed in version 4.1.75.Final-tuxcare.4 of io.netty:netty-codec-socks."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-socks@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:90cb4937-390b-54ce-b096-7b9a1f15bd0c",
      "id": "CVE-2022-41915",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-41915 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-codec-socks."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-socks@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:387c96a1-0522-5393-bbc1-9d02b3a7ffa1",
      "id": "CVE-2023-34462",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-34462 is fixed in version 4.1.75.Final-tuxcare.4 of io.netty:netty-codec-socks."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-socks@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d0e13550-4e13-5a71-ab03-7383d8c72752",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-44487 is fixed in version 4.1.75.Final-tuxcare.4 of io.netty:netty-codec-socks."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-socks@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8b319598-7481-5062-87a2-8701dbbf43e4",
      "id": "CVE-2023-4586",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2023-4586 is a false positive for io.netty:netty-codec-socks 4.1.75.Final-tuxcare.4."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-socks@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3c441dd3-8cf2-5a52-8094-9d494fc3fad3",
      "id": "CVE-2024-29025",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-29025 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-codec-socks."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-socks@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2f10e410-9577-51fe-8b89-34090f915f24",
      "id": "CVE-2024-47535",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-47535 is fixed in version 4.1.75.Final-tuxcare.4 of io.netty:netty-codec-socks."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-socks@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:63ec6201-29e5-5f6f-a79d-682f4af9e81c",
      "id": "CVE-2025-24970",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-24970 is fixed in version 4.1.75.Final-tuxcare.4 of io.netty:netty-codec-socks."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-socks@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bd62a838-73c2-5f8d-9050-89bbdea58fe8",
      "id": "CVE-2025-25193",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-25193 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-codec-socks."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-socks@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:08475b51-73ae-5a42-b865-1320f4f3f94b",
      "id": "CVE-2025-55163",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-55163 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-codec-socks."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-socks@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b6976d62-5df8-525d-926a-50010153bbce",
      "id": "CVE-2025-58056",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-58056 is fixed in version 4.1.75.Final-tuxcare.4 of io.netty:netty-codec-socks."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-socks@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7c42740a-d9eb-51e8-a668-ded98526d62b",
      "id": "CVE-2025-58057",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58057 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-codec-socks."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-socks@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:865883e0-bd1a-5db7-90ae-c6e68418fc8e",
      "id": "CVE-2025-59419",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-59419 is fixed in version 4.1.75.Final-tuxcare.4 of io.netty:netty-codec-socks."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-socks@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2101f3c1-7db7-54f8-8808-78be7631b4eb",
      "id": "CVE-2025-67735",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-67735 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-codec-socks."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-socks@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4a92fd3d-a9d4-5fe4-af25-1eb2ff19ddd2",
      "id": "CVE-2026-33870",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33870 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-codec-socks."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-socks@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:22d8c1eb-298a-5d22-b1dc-51c30458295a",
      "id": "CVE-2026-33871",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33871 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-codec-socks."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-socks@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:37b873bd-b55a-59cb-a06e-e40057385d1d",
      "id": "CVE-2026-41417",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41417 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-codec-socks."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-socks@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9193f1d1-50fb-5655-a0ea-06a39d2c2eef",
      "id": "CVE-2026-42577",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42577 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-codec-socks."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-socks@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:75890aa8-ed9a-5019-b743-b43dbe34601b",
      "id": "CVE-2026-42578",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42578 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-codec-socks."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-socks@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1c9043af-fe47-5163-8e7c-45f9c2a3540a",
      "id": "CVE-2026-42579",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42579 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-codec-socks."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-socks@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a4071660-161c-5b9a-bd77-7205e8cd6442",
      "id": "CVE-2026-42580",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42580 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-codec-socks."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-socks@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0a9f45d0-cafd-525c-a655-a7245d4cf2bc",
      "id": "CVE-2026-42581",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42581 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-codec-socks."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-socks@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d24249cf-2c14-5e24-a224-f1e07eeba55a",
      "id": "CVE-2026-42583",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42583 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-codec-socks."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-socks@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:139bd6c9-2b1e-538b-8b18-90d997eefd36",
      "id": "CVE-2026-42584",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42584 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-codec-socks."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-socks@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0bddf0af-94d7-5d63-af4b-87cbf69742ca",
      "id": "CVE-2026-42585",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42585 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-codec-socks."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-socks@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5d22c293-dbfa-5155-b2c8-4249a803ce35",
      "id": "CVE-2026-42586",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42586 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-codec-socks."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-socks@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:247dfc00-2693-5eea-828b-f69012818980",
      "id": "CVE-2026-42587",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42587 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-codec-socks."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-socks@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:953d5acd-f7de-556b-8e13-7a370161870f",
      "id": "CVE-2026-44248",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44248 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-codec-socks."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-socks@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:38ee5739-a938-5014-8d86-ec33eb8d4bed",
      "id": "CVE-2026-44249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44249 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-codec-socks."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-socks@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:875919d3-1ceb-5dde-b22a-aa10ad5618a5",
      "id": "CVE-2026-44250",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44250 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-codec-socks."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-socks@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d78b0283-5a46-5b69-b29f-163a2bec7897",
      "id": "CVE-2026-44890",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.75.Final-tuxcare.4 of io.netty:netty-codec-socks."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-socks@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c4c64584-efe6-5a09-a152-f4ce5003856e",
      "id": "CVE-2026-44891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44891 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-codec-socks."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-socks@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:69d3b925-b9db-5e76-a52d-9a6949d0962c",
      "id": "CVE-2026-44893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44893 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-codec-socks."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-socks@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:316c9ea6-dccd-5614-b3c0-3876d82fb6e8",
      "id": "CVE-2026-45416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45416 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-codec-socks."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-socks@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:368f6cea-bb4a-5d6e-9250-693e8a4d86bc",
      "id": "CVE-2026-45536",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45536 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-codec-socks."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-socks@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f5fc7fff-d991-56cb-b806-8aa079b26c09",
      "id": "CVE-2026-45673",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45673 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-codec-socks."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-socks@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fd2831b8-6fe1-5e50-b33c-022f8f5a031b",
      "id": "CVE-2026-45674",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45674 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-codec-socks."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-socks@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f5058ee3-6ac9-5b20-a3c2-16f6d07529bb",
      "id": "CVE-2026-46340",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-46340 is fixed in version 4.1.75.Final-tuxcare.4 of io.netty:netty-codec-socks."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-socks@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7ffd3292-38d7-5a87-9a7d-28b5c4fbca38",
      "id": "CVE-2026-47244",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47244 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-codec-socks."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-socks@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9d3d4304-8ed4-5785-9d2f-5f899c77a7dd",
      "id": "CVE-2026-47691",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47691 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-codec-socks."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-socks@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e64365be-230b-55bb-98d2-e1c061207896",
      "id": "CVE-2026-48006",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48006 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-codec-socks."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-socks@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2cfec409-6d7b-5b28-a416-22a4a3b6ae53",
      "id": "CVE-2026-48043",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-48043 does not affect version 4.1.75.Final-tuxcare.4 of io.netty:netty-codec-socks. already_fixed \u2014 The target repository (Netty 4.1.75.Final-tuxcare.1) already contains equivalent protection against CVE-2026-48043. While the upstream patch targets a newer architecture with a ChannelInboundHandlerAdapter tail handler (introduced in CVE-2025-58057 refactoring), the target's older architecture implements the same defensive pattern: a try-finally block ensuring ByteBuf.release() is called uncond..."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-socks@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9bcba6a4-0505-5806-a9b9-117be5c1f02f",
      "id": "CVE-2026-48059",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48059 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-codec-socks."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-socks@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c845e5c9-b055-5963-acc3-0e7e8ab6cfd5",
      "id": "CVE-2026-50010",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50010 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-codec-socks."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-socks@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:24d4d716-9be5-506a-99ca-67b7a06fc24f",
      "id": "CVE-2026-50011",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50011 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-codec-socks."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-socks@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:948ea9a7-c530-5796-ae38-682a77e04877",
      "id": "CVE-2026-50020",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50020 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-codec-socks."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-socks@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5ce74d3f-28d1-5d7c-8bef-8a95de434766",
      "id": "CVE-2026-50560",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.75.Final-tuxcare.4 of io.netty:netty-codec-socks."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-socks@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:930c2115-13c8-5742-a8a4-66f6e3285d7e",
      "id": "CVE-2026-55831",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55831 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-codec-socks."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-socks@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f852de8f-10c9-5c01-8e1c-04e6aeccc002",
      "id": "CVE-2026-55833",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55833 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-codec-socks."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-socks@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dd8dabc5-7450-5952-b706-cc20f7ffeab2",
      "id": "CVE-2026-55851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55851 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-codec-socks."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-socks@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fa2d4d4b-22a5-5db3-b397-4aa88595451f",
      "id": "CVE-2026-56745",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56745 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-codec-socks."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-socks@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4093fe4a-a85c-5dc5-8ce4-d699615cb264",
      "id": "CVE-2026-56746",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56746 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-codec-socks."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-socks@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e311951d-6908-54de-be22-d5c6e8d51956",
      "id": "CVE-2026-56817",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56817 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-codec-socks."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-socks@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7c9ec9de-b360-5e22-8baa-c30dd4b2a8fb",
      "id": "CVE-2026-56818",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-56818 does not affect version 4.1.75.Final-tuxcare.4 of io.netty:netty-codec-socks. not_affected \u2014 The target version 4.1.75.Final (released March 2022) predates the introduction of the vulnerable feature by over 4 years. CVE-2026-56818 describes incomplete cleanup when the `maxElements` limit is exceeded in RedisArrayAggregator. However, the `maxElements` configuration parameter and associated exception handling were introduced in June 2026 (commits e51c64c964 and 728c98b8ec), neither of wh..."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-socks@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:018c7676-c30f-5a49-9ce7-57f82f76705a",
      "id": "CVE-2026-56819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56819 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-codec-socks."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-socks@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fec8b1db-5a9b-5835-80d1-0412cc8e99b7",
      "id": "CVE-2026-59898",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59898 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-codec-socks."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-socks@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f3cd7318-3bb3-5a5b-8f0b-9ea3f4b2065d",
      "id": "CVE-2026-59899",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59899 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-codec-socks."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-socks@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4c4cc33d-46af-55ad-be11-56846f5a2a81",
      "id": "CVE-2026-59900",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59900 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-codec-socks."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-socks@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a9ce8000-efce-59eb-a494-c4f58385ff91",
      "id": "CVE-2026-59901",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59901 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-codec-socks."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-socks@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2ba1a80d-b8ea-5466-9079-178279fa265d",
      "id": "CVE-2026-59919",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59919 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-codec-socks."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-socks@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f6832c49-de7c-5ff9-8c38-7cfe76075d58",
      "id": "CVE-2026-59920",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59920 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-codec-socks."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-socks@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2b961855-2f73-5947-8750-570bbe97e153",
      "id": "CVE-2026-59921",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59921 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-codec-socks."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-socks@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:307f8c51-571a-5056-bfaa-101dce053292",
      "id": "GHSA-mfg7-5gfp-c4w3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-codec-socks."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-socks@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d288cee0-149e-53a4-9e36-b221a69e4fe3",
      "id": "GHSA-v74w-7mr3-4qg3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-codec-socks."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-socks@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:36152755-8025-588a-b70a-30629fd8f20f",
      "id": "GHSA-xpw8-rcwv-8f8p",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-xpw8-rcwv-8f8p is fixed in version 4.1.75.Final-tuxcare.4 of io.netty:netty-codec-socks."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-socks@4.1.75.Final-tuxcare.4"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.netty/netty-codec-socks@4.1.75.Final-tuxcare.4"
    }
  ]
}