{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:9df53c69-7ce3-58c3-ae35-3239007f8797",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.4",
      "type": "library",
      "group": "io.netty",
      "name": "netty-codec-xml",
      "version": "4.1.82.Final-tuxcare.4",
      "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.4"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:66a31562-bda9-50d2-a194-b83fc827ad8d",
      "id": "CVE-2022-41881",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-41881 is fixed in version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c180af08-b1c5-56a2-9bb0-b6ed284b5bae",
      "id": "CVE-2022-41915",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-41915 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7a7194fb-bf47-5811-97b9-d477eaa06eb7",
      "id": "CVE-2023-34462",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-34462 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bf279d17-5ef3-5548-8d79-0f57cc01d658",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-44487 is fixed in version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:64542e3b-4872-5bdb-9d54-07ef4ac7936d",
      "id": "CVE-2023-4586",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2023-4586 is a false positive for io.netty:netty-codec-xml 4.1.82.Final-tuxcare.4."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:aad694be-9dbc-546a-9b10-f8c6c398547e",
      "id": "CVE-2024-29025",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-29025 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:98709a5b-650e-5799-9729-8498badfaa23",
      "id": "CVE-2024-47535",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-47535 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:019f0a52-2262-5dbb-b0e4-b9c59cf431f0",
      "id": "CVE-2025-24970",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-24970 is fixed in version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5646b4fe-a2d3-5d0f-a378-0fc68ddb312c",
      "id": "CVE-2025-25193",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-25193 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0d42e452-0542-52e2-a758-2621b9c34861",
      "id": "CVE-2025-55163",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55163 is fixed in version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5aefa9f6-0041-5f43-a576-3cdf2665db4d",
      "id": "CVE-2025-58056",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58056 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e16b63e3-b878-511b-bb6d-52b0dfa9bf6d",
      "id": "CVE-2025-58057",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-58057 is fixed in version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:59a30826-2d5d-5065-9685-d969566d82a0",
      "id": "CVE-2025-59419",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-59419 is fixed in version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:76f71989-685d-5440-a142-416f0aa4601b",
      "id": "CVE-2025-67735",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-67735 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8f8f27f2-bf1d-5d83-aa99-3de16e173317",
      "id": "CVE-2026-33870",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33870 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0412f0be-86ad-5c5e-b8e7-b61ef33ff48a",
      "id": "CVE-2026-33871",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33871 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dc20fdc6-4c9d-5449-9333-7d1b6229dab2",
      "id": "CVE-2026-41417",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41417 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c2d4535c-5fc9-5fcf-a100-565659b0354b",
      "id": "CVE-2026-42577",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42577 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8c0ff984-7736-5f3d-a79d-b008565609c2",
      "id": "CVE-2026-42578",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42578 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:251cbda7-4a11-588d-b39c-d7e0a4ca1f2d",
      "id": "CVE-2026-42579",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42579 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5c751c8a-6359-53b6-ae13-ba5d2c18e48c",
      "id": "CVE-2026-42580",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42580 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4de2a37d-d43e-568c-82f5-ab065095e8e0",
      "id": "CVE-2026-42581",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42581 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:13d5136c-3049-5dae-ab7f-0d005a0f56ae",
      "id": "CVE-2026-42583",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42583 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4720e06d-8543-5f3a-a051-fb22dba4bb51",
      "id": "CVE-2026-42584",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42584 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0155f2ff-1450-5325-a2d0-0a12a1cedda9",
      "id": "CVE-2026-42585",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42585 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cdaddb24-b616-5fcd-aec7-12f5380c059a",
      "id": "CVE-2026-42586",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42586 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:19bb03fb-b641-5e3a-814b-2bd5d01f7e51",
      "id": "CVE-2026-42587",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42587 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:695a9d03-03ac-51ed-b074-5bde6094b3e2",
      "id": "CVE-2026-44248",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44248 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1ada7cdb-371c-54e6-88be-434113623e54",
      "id": "CVE-2026-44249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44249 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:00edf363-c6b0-5639-be62-46cf30376a24",
      "id": "CVE-2026-44250",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44250 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f1911d3d-6d0c-55b1-b79d-e56decad5240",
      "id": "CVE-2026-44890",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9baed11f-9ab7-5cd5-b06e-abbb60d0acf7",
      "id": "CVE-2026-44891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44891 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:653266f4-4a14-5028-b8e7-cea1911599f1",
      "id": "CVE-2026-44893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44893 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:67f5e7cd-10a0-5fb5-b351-6d62e276d0ec",
      "id": "CVE-2026-45416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45416 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b667a6a1-534a-5de4-ac81-55f9a8b0b489",
      "id": "CVE-2026-45536",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45536 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:434331e0-48af-5a2d-a405-f7fab31c3f41",
      "id": "CVE-2026-45673",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45673 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3c0852b0-7c2e-5730-a0d7-6aedc7a74f54",
      "id": "CVE-2026-45674",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45674 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:311fb70e-4811-5e44-98e6-76ca1889233d",
      "id": "CVE-2026-46340",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-46340 is fixed in version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7a11c08a-ce78-5ca7-88fa-ec4a34fb3d09",
      "id": "CVE-2026-47244",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47244 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:59397545-6c79-55cb-b86d-3b1ecde6cc65",
      "id": "CVE-2026-47691",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47691 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4e837cd7-63ce-54c1-b68f-44098b263940",
      "id": "CVE-2026-48006",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48006 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7f3fa155-cf02-5989-b350-a9fdbc37a610",
      "id": "CVE-2026-48043",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48043 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f7e151ab-96eb-505b-8fe4-d9e7a5ae7bea",
      "id": "CVE-2026-48059",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48059 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c50ed11d-8098-541c-8141-6e74775f5022",
      "id": "CVE-2026-50010",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50010 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fac3e42d-dc02-5472-a919-e93970b633ab",
      "id": "CVE-2026-50011",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50011 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dbc8dead-5d42-586c-8fb8-7e5c57735604",
      "id": "CVE-2026-50020",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50020 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:aaa10339-4814-542e-a450-9d7bc3524201",
      "id": "CVE-2026-50560",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cf07cc22-24d1-5e4c-bdef-7e90b11e218c",
      "id": "CVE-2026-55831",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55831 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b029f2df-ad7a-52ba-9693-26092217a560",
      "id": "CVE-2026-55833",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55833 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:84270d82-6e23-5148-bb6d-162ddb854dad",
      "id": "CVE-2026-55851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55851 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7294ccb8-49a1-5d60-8cfe-9aa232b521a6",
      "id": "CVE-2026-56745",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56745 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cade325d-eb09-5c23-a0da-d4f5697c2bfd",
      "id": "CVE-2026-56746",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56746 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:160d5e73-eb9e-5789-a49f-3d5b425d335e",
      "id": "CVE-2026-56817",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56817 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ed1cabef-6e85-53fd-bd5c-6d4981187c09",
      "id": "CVE-2026-56818",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-56818 does not affect version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec-xml. not_affected \u2014 Version 4.1.82.Final is not affected by CVE-2026-56818. The vulnerability exists in the maxElements limit check that was introduced in version 4.1.135.Final (commit e51c64c964). Version 4.1.82.Final predates this security feature entirely - it has no maxElements configuration, no maxElements validation check, and therefore cannot exhibit the vulnerable pattern described in the CVE (throwing wit..."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8669bbbb-aa44-5d9d-8a48-0bbb8002daaa",
      "id": "CVE-2026-56819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56819 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5fe6030d-b340-5635-b842-3b284d179051",
      "id": "CVE-2026-59898",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59898 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:189768ae-2654-51c4-8a9b-512a73cc2e7a",
      "id": "CVE-2026-59899",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59899 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:60dedc0a-fb36-5f85-a21e-78faad8bf488",
      "id": "CVE-2026-59900",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59900 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:be2b401d-74bb-5b78-b765-b2531919c0d5",
      "id": "CVE-2026-59901",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59901 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d7a2f77f-94e6-5208-bc44-29a41e232052",
      "id": "CVE-2026-59919",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59919 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2974b179-6c71-5327-bbdc-b22b6e01167c",
      "id": "CVE-2026-59920",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59920 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bc4509bc-100e-55f4-8471-17f23f60f328",
      "id": "CVE-2026-59921",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59921 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d42e0f10-6ee9-5544-9e36-9966817f1c68",
      "id": "GHSA-mfg7-5gfp-c4w3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f8026b30-c036-54d4-b11e-777bbe940ae5",
      "id": "GHSA-v74w-7mr3-4qg3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5b1019a0-478d-51d1-b304-edb9422b3b5e",
      "id": "GHSA-xpw8-rcwv-8f8p",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-xpw8-rcwv-8f8p is fixed in version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.4"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.4"
    }
  ]
}