{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:7a8ca3b5-4027-5ad1-91d8-b714cda05127",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.5",
      "type": "library",
      "group": "io.netty",
      "name": "netty-codec-xml",
      "version": "4.1.82.Final-tuxcare.5",
      "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.5"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:3092fab4-70f4-5478-b107-317970c1c32c",
      "id": "CVE-2022-41881",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-41881 is fixed in version 4.1.82.Final-tuxcare.5 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9f484638-3a7e-5899-b01f-e3d39b2ba5ee",
      "id": "CVE-2022-41915",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-41915 affects version 4.1.82.Final-tuxcare.5 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7f127bad-f278-525e-8777-e8aed13128fa",
      "id": "CVE-2023-34462",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-34462 affects version 4.1.82.Final-tuxcare.5 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c4d8c383-217c-57a2-a174-c7e1f74f9edf",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-44487 is fixed in version 4.1.82.Final-tuxcare.5 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b8bc2ab4-933f-5e04-8d6b-680ff421ea84",
      "id": "CVE-2023-4586",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2023-4586 is a false positive for io.netty:netty-codec-xml 4.1.82.Final-tuxcare.5."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:40d0816d-2403-5dd4-a1f9-5a63d472fd82",
      "id": "CVE-2024-29025",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-29025 affects version 4.1.82.Final-tuxcare.5 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5ce0d45a-dc9d-5f63-9a4a-8a21f949c453",
      "id": "CVE-2024-47535",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-47535 affects version 4.1.82.Final-tuxcare.5 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:977b4b47-aca0-5361-a56d-32f308b83328",
      "id": "CVE-2025-24970",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-24970 is fixed in version 4.1.82.Final-tuxcare.5 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:66c97add-e3dd-5538-b171-c9b059201c7d",
      "id": "CVE-2025-25193",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-25193 affects version 4.1.82.Final-tuxcare.5 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:65baf74d-ba8b-5b91-8446-1e5e9d4f9993",
      "id": "CVE-2025-55163",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55163 is fixed in version 4.1.82.Final-tuxcare.5 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:87124f39-c2b8-575a-8381-1212452f8314",
      "id": "CVE-2025-58056",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58056 affects version 4.1.82.Final-tuxcare.5 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:739b605b-538a-5c74-af98-75f01cf87ddb",
      "id": "CVE-2025-58057",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-58057 is fixed in version 4.1.82.Final-tuxcare.5 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:580a3df7-aa3a-5b1c-ab49-364d9f9419a3",
      "id": "CVE-2025-59419",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-59419 is fixed in version 4.1.82.Final-tuxcare.5 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5954171f-f7c0-58d5-8eda-d858bf6e3360",
      "id": "CVE-2025-67735",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-67735 affects version 4.1.82.Final-tuxcare.5 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:73038c84-ae2d-5809-b36e-e0abd6cde198",
      "id": "CVE-2026-33870",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33870 affects version 4.1.82.Final-tuxcare.5 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0586e55e-81e1-5998-b71e-d9a6d71126cb",
      "id": "CVE-2026-33871",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33871 affects version 4.1.82.Final-tuxcare.5 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b1c1e991-9a0b-57e4-9377-7d885643b327",
      "id": "CVE-2026-41417",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41417 affects version 4.1.82.Final-tuxcare.5 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bffeb63d-2a1f-5ada-a2c3-276556fcc8b5",
      "id": "CVE-2026-42577",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42577 affects version 4.1.82.Final-tuxcare.5 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c1180ff9-48da-5091-b05f-38d62d2412aa",
      "id": "CVE-2026-42578",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42578 affects version 4.1.82.Final-tuxcare.5 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bafbf689-4199-585d-ba59-46d310430f7c",
      "id": "CVE-2026-42579",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42579 affects version 4.1.82.Final-tuxcare.5 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:23513dab-7468-531f-bfdf-f4ecbc35d8b5",
      "id": "CVE-2026-42580",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42580 affects version 4.1.82.Final-tuxcare.5 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:37771021-dcad-5a70-8f17-212f73f3a727",
      "id": "CVE-2026-42581",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42581 affects version 4.1.82.Final-tuxcare.5 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e15f33e6-e787-5345-98be-07681fb3ca24",
      "id": "CVE-2026-42583",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42583 affects version 4.1.82.Final-tuxcare.5 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f2ccb532-52dc-5e35-bd6a-43483bddecb3",
      "id": "CVE-2026-42584",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42584 affects version 4.1.82.Final-tuxcare.5 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1dc10b78-0280-51de-a7dc-bff468958b80",
      "id": "CVE-2026-42585",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42585 affects version 4.1.82.Final-tuxcare.5 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5d09bbce-9844-50d7-8bc2-5c5e846251a7",
      "id": "CVE-2026-42586",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42586 affects version 4.1.82.Final-tuxcare.5 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dc50b484-b02d-5a59-bd3c-32a9b5ad35ba",
      "id": "CVE-2026-42587",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42587 affects version 4.1.82.Final-tuxcare.5 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e5ea6b45-0f5d-5554-b89d-48c4fe875ff6",
      "id": "CVE-2026-44248",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44248 affects version 4.1.82.Final-tuxcare.5 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b446f5d3-bc5d-5153-b932-e94900a2f3c0",
      "id": "CVE-2026-44249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44249 affects version 4.1.82.Final-tuxcare.5 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c61b5baf-eae8-5882-88ce-09149d74a455",
      "id": "CVE-2026-44250",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44250 affects version 4.1.82.Final-tuxcare.5 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3ffe90ff-e52a-5514-aeda-1955bd254e02",
      "id": "CVE-2026-44890",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.82.Final-tuxcare.5 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f48f6866-8248-56d9-b156-d9ef12c39e18",
      "id": "CVE-2026-44891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44891 affects version 4.1.82.Final-tuxcare.5 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8791c4b8-557b-5618-a576-3b49a57f6aab",
      "id": "CVE-2026-44893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44893 affects version 4.1.82.Final-tuxcare.5 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b97d1c89-5d66-5426-bd71-56d59cc1ab39",
      "id": "CVE-2026-45416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45416 affects version 4.1.82.Final-tuxcare.5 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1bd99aca-41fe-5eac-b2b7-c6b63de0f415",
      "id": "CVE-2026-45536",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45536 affects version 4.1.82.Final-tuxcare.5 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ba400b48-ba77-58ea-a4dd-a72e427ee5b9",
      "id": "CVE-2026-45673",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45673 affects version 4.1.82.Final-tuxcare.5 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8202631e-62c9-5f99-b1b8-6d0e69212e1f",
      "id": "CVE-2026-45674",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45674 affects version 4.1.82.Final-tuxcare.5 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8e0745b3-61f7-5f2b-bb7f-ae49731f3ca9",
      "id": "CVE-2026-46340",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-46340 is fixed in version 4.1.82.Final-tuxcare.5 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:87876f26-6638-527b-9998-59107439a7a6",
      "id": "CVE-2026-47244",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47244 affects version 4.1.82.Final-tuxcare.5 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:78f752e1-8452-518a-98f6-513cbdbe065c",
      "id": "CVE-2026-47691",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47691 affects version 4.1.82.Final-tuxcare.5 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9bf1814e-c731-5e96-a5d3-d7407fa04f11",
      "id": "CVE-2026-48006",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48006 affects version 4.1.82.Final-tuxcare.5 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:35590843-41bc-5803-9054-e6cc28d601db",
      "id": "CVE-2026-48043",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-48043 is fixed in version 4.1.82.Final-tuxcare.5 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:61359dd2-7d0f-50d5-8376-ba84000de092",
      "id": "CVE-2026-48059",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48059 affects version 4.1.82.Final-tuxcare.5 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dfb467c8-efc3-5a66-8e24-4e7654936d6d",
      "id": "CVE-2026-50010",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50010 affects version 4.1.82.Final-tuxcare.5 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8eba9298-0b26-5ed7-a4d5-8fc6b6fbc5ed",
      "id": "CVE-2026-50011",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50011 affects version 4.1.82.Final-tuxcare.5 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3f15cdb3-3f7a-52de-a3fc-92055d447ab7",
      "id": "CVE-2026-50020",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50020 affects version 4.1.82.Final-tuxcare.5 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a809a5f2-7c7b-5527-bde9-9b011064005d",
      "id": "CVE-2026-50560",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.82.Final-tuxcare.5 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:18c6ba7a-8b9e-50ea-93ac-a8022e7383e3",
      "id": "CVE-2026-55831",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55831 affects version 4.1.82.Final-tuxcare.5 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:02f1b63b-ce40-5f2d-ae89-7a7cb3b0f7a5",
      "id": "CVE-2026-55833",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55833 affects version 4.1.82.Final-tuxcare.5 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:491a6d48-6765-55a9-bb2f-6a1a1b521801",
      "id": "CVE-2026-55851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55851 affects version 4.1.82.Final-tuxcare.5 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:30c51db7-b74c-504e-ba49-1f28ac02b781",
      "id": "CVE-2026-56745",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56745 affects version 4.1.82.Final-tuxcare.5 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2c61ccf6-b8bb-59cb-996c-fcbd07965aff",
      "id": "CVE-2026-56746",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56746 affects version 4.1.82.Final-tuxcare.5 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7aa0d997-3eb1-59fb-9240-43d7f573be85",
      "id": "CVE-2026-56817",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56817 affects version 4.1.82.Final-tuxcare.5 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e22855c7-6276-514b-ad03-95407778c08c",
      "id": "CVE-2026-56818",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-56818 does not affect version 4.1.82.Final-tuxcare.5 of io.netty:netty-codec-xml. not_affected \u2014 Version 4.1.82.Final is not affected by CVE-2026-56818. The vulnerability exists in the maxElements limit check that was introduced in version 4.1.135.Final (commit e51c64c964). Version 4.1.82.Final predates this security feature entirely - it has no maxElements configuration, no maxElements validation check, and therefore cannot exhibit the vulnerable pattern described in the CVE (throwing wit..."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3105c3e0-bc18-51a3-a423-dcc1cf914e71",
      "id": "CVE-2026-56819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56819 affects version 4.1.82.Final-tuxcare.5 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e412e0e5-bd60-5725-9c98-d2ac3d43a4ad",
      "id": "CVE-2026-59898",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59898 affects version 4.1.82.Final-tuxcare.5 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:47545b5c-d88e-5c2a-832e-27135820ab81",
      "id": "CVE-2026-59899",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59899 affects version 4.1.82.Final-tuxcare.5 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cf3722f9-da0c-53fe-9293-e16555e53870",
      "id": "CVE-2026-59900",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59900 affects version 4.1.82.Final-tuxcare.5 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f3dc17e6-ec1d-5dd1-83cd-0e4c0cf39444",
      "id": "CVE-2026-59901",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59901 affects version 4.1.82.Final-tuxcare.5 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cbcc75c5-13b6-588b-95b5-49ac3612c638",
      "id": "CVE-2026-59919",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59919 affects version 4.1.82.Final-tuxcare.5 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8ef2a2a4-6bee-5497-a385-6b99e7c21d70",
      "id": "CVE-2026-59920",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59920 affects version 4.1.82.Final-tuxcare.5 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:68c2bc1f-f316-5b53-ade0-d06bcf6a1d61",
      "id": "CVE-2026-59921",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59921 affects version 4.1.82.Final-tuxcare.5 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ac367825-8d95-569a-85c8-3cf811aec031",
      "id": "GHSA-mfg7-5gfp-c4w3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.82.Final-tuxcare.5 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:888d668f-010c-50ce-870a-54bae4afb850",
      "id": "GHSA-v74w-7mr3-4qg3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.82.Final-tuxcare.5 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2fdd1cbf-4fdb-50df-a24c-0decde143be6",
      "id": "GHSA-xpw8-rcwv-8f8p",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-xpw8-rcwv-8f8p is fixed in version 4.1.82.Final-tuxcare.5 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.5"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.5"
    }
  ]
}