{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:023243c7-fc9d-5ccc-9318-6b45891f10b9",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.6",
      "type": "library",
      "group": "io.netty",
      "name": "netty-codec-xml",
      "version": "4.1.82.Final-tuxcare.6",
      "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.6"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:964743d0-a170-5c1b-941f-5099bd227aa6",
      "id": "CVE-2022-41881",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-41881 is fixed in version 4.1.82.Final-tuxcare.6 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bae50445-e86b-5512-869d-d42973611217",
      "id": "CVE-2022-41915",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-41915 affects version 4.1.82.Final-tuxcare.6 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b38f9e36-f8d7-5cc6-abf8-1cf5c2105108",
      "id": "CVE-2023-34462",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-34462 affects version 4.1.82.Final-tuxcare.6 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e871eda6-efbe-5ad9-9af7-19987622362e",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-44487 is fixed in version 4.1.82.Final-tuxcare.6 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:05fb5d60-6fa7-5457-b5e5-9c78c1a4101b",
      "id": "CVE-2023-4586",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2023-4586 is a false positive for io.netty:netty-codec-xml 4.1.82.Final-tuxcare.6."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ec9e34f9-0e65-5418-9544-2899f329812c",
      "id": "CVE-2024-29025",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-29025 affects version 4.1.82.Final-tuxcare.6 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5356b3c1-7916-516a-8f16-b1f8e4d4f2bc",
      "id": "CVE-2024-47535",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-47535 affects version 4.1.82.Final-tuxcare.6 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:42b8c42e-6b9e-50f7-acbe-2681ee8dda54",
      "id": "CVE-2025-24970",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-24970 is fixed in version 4.1.82.Final-tuxcare.6 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:11ee4d65-d3b4-528e-825f-9c2bd14dfff0",
      "id": "CVE-2025-25193",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-25193 affects version 4.1.82.Final-tuxcare.6 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3270736b-73c3-5dab-aa35-f3a8a6fb8e7f",
      "id": "CVE-2025-55163",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55163 is fixed in version 4.1.82.Final-tuxcare.6 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5c1fcdc3-acd2-58a6-ba20-dbd61f4ce8e5",
      "id": "CVE-2025-58056",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58056 affects version 4.1.82.Final-tuxcare.6 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:411bb23a-0d5c-5da4-86c1-8776f4a4713f",
      "id": "CVE-2025-58057",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-58057 is fixed in version 4.1.82.Final-tuxcare.6 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f3da43db-9b41-5b4f-bafa-e985d90f5e75",
      "id": "CVE-2025-59419",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-59419 is fixed in version 4.1.82.Final-tuxcare.6 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:78beb146-8b3d-502f-b988-16dd31312989",
      "id": "CVE-2025-67735",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-67735 affects version 4.1.82.Final-tuxcare.6 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d426d133-9d16-5f52-b35f-ba23dbbbd88d",
      "id": "CVE-2026-33870",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33870 affects version 4.1.82.Final-tuxcare.6 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0dc2c3d9-2ba9-5a5c-801a-47f4065e5591",
      "id": "CVE-2026-33871",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33871 affects version 4.1.82.Final-tuxcare.6 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e63e3bae-fa6b-5842-98c6-d7059b0456e9",
      "id": "CVE-2026-41417",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41417 affects version 4.1.82.Final-tuxcare.6 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a9eeba0e-a8f7-5a31-b272-3b1518ca32c0",
      "id": "CVE-2026-42577",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42577 affects version 4.1.82.Final-tuxcare.6 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ce09335b-21ca-5721-b311-1ebfb9c429e3",
      "id": "CVE-2026-42578",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42578 affects version 4.1.82.Final-tuxcare.6 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:10ad189b-2fb9-597a-aeb4-7dfd88fae4f4",
      "id": "CVE-2026-42579",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42579 affects version 4.1.82.Final-tuxcare.6 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bee9f63d-d94b-539e-9661-2b56afbfc94c",
      "id": "CVE-2026-42580",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42580 affects version 4.1.82.Final-tuxcare.6 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f0874d21-44fe-5573-9fd7-669fb3e27e61",
      "id": "CVE-2026-42581",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42581 affects version 4.1.82.Final-tuxcare.6 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bfb7b437-d294-5597-bbcd-9b2a7b595496",
      "id": "CVE-2026-42583",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42583 affects version 4.1.82.Final-tuxcare.6 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4b6066de-bba6-5e25-bdc4-d0e575cadc7a",
      "id": "CVE-2026-42584",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42584 affects version 4.1.82.Final-tuxcare.6 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:676f3fba-3313-5736-a464-e87ae81513e6",
      "id": "CVE-2026-42585",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42585 affects version 4.1.82.Final-tuxcare.6 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8ff4b9d9-54b9-5322-8571-c93a50c9b0e0",
      "id": "CVE-2026-42586",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42586 affects version 4.1.82.Final-tuxcare.6 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2fc4fbb1-9102-5300-8b37-dfee87586078",
      "id": "CVE-2026-42587",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42587 affects version 4.1.82.Final-tuxcare.6 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5b16819c-db3c-5d8d-8cf2-f493db2c6693",
      "id": "CVE-2026-44248",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44248 affects version 4.1.82.Final-tuxcare.6 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6ce517d4-f2b5-5b0f-91ca-31adb8345ef3",
      "id": "CVE-2026-44249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44249 affects version 4.1.82.Final-tuxcare.6 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5afcf6be-58e6-5491-9151-a2ac866488be",
      "id": "CVE-2026-44250",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44250 affects version 4.1.82.Final-tuxcare.6 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:418955b3-6484-588e-b815-af7f862e4910",
      "id": "CVE-2026-44890",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.82.Final-tuxcare.6 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:56040518-77a9-5d7a-9677-faf52a51b424",
      "id": "CVE-2026-44891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44891 affects version 4.1.82.Final-tuxcare.6 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:04ca4416-a6c9-59a9-9c90-88110f3f9b9c",
      "id": "CVE-2026-44893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44893 affects version 4.1.82.Final-tuxcare.6 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:235951b7-e236-5cae-9d07-60a14163b22e",
      "id": "CVE-2026-45416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45416 affects version 4.1.82.Final-tuxcare.6 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:eebc6a71-67d6-50e6-8806-8db197e8d2be",
      "id": "CVE-2026-45536",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45536 affects version 4.1.82.Final-tuxcare.6 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0921e35f-e3c3-59b5-9ce2-4daf7d4989d5",
      "id": "CVE-2026-45673",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45673 affects version 4.1.82.Final-tuxcare.6 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:24d15610-f801-5c81-b173-207857b3c385",
      "id": "CVE-2026-45674",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45674 affects version 4.1.82.Final-tuxcare.6 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f28d6fed-6a2e-5939-a8f4-26068cc5aae6",
      "id": "CVE-2026-46340",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-46340 is fixed in version 4.1.82.Final-tuxcare.6 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5559ceb5-9ddd-59ef-8bcb-7b858070732a",
      "id": "CVE-2026-47244",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47244 affects version 4.1.82.Final-tuxcare.6 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:087d6879-20dc-5d3d-93b4-c0b65e7892cf",
      "id": "CVE-2026-47691",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47691 affects version 4.1.82.Final-tuxcare.6 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6f4be059-f333-57ec-a450-8f346667f363",
      "id": "CVE-2026-48006",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48006 affects version 4.1.82.Final-tuxcare.6 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6b7df23e-1c8d-5aae-a5cb-45afbac4ce7a",
      "id": "CVE-2026-48043",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-48043 is fixed in version 4.1.82.Final-tuxcare.6 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d9d6fee9-6fa4-55f6-9104-7035a5a65cc7",
      "id": "CVE-2026-48059",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48059 affects version 4.1.82.Final-tuxcare.6 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8026c259-1f68-5ecd-929a-f3eb18f3ba9b",
      "id": "CVE-2026-50010",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50010 affects version 4.1.82.Final-tuxcare.6 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0d4753e1-837b-5073-9c35-0687cafbf9c3",
      "id": "CVE-2026-50011",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50011 affects version 4.1.82.Final-tuxcare.6 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8f221d84-7362-5b81-823a-dc604950d9f9",
      "id": "CVE-2026-50020",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50020 affects version 4.1.82.Final-tuxcare.6 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a2ad0351-89cf-528e-8013-fe05434b6838",
      "id": "CVE-2026-50560",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.82.Final-tuxcare.6 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d77dcc96-215f-570d-8b8e-79f98cf78889",
      "id": "CVE-2026-55831",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55831 affects version 4.1.82.Final-tuxcare.6 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:034ab657-1d0b-5f01-842a-2a93d1b0e712",
      "id": "CVE-2026-55833",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55833 affects version 4.1.82.Final-tuxcare.6 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:298f57eb-5c85-5199-8892-c1f92b6421a5",
      "id": "CVE-2026-55851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55851 affects version 4.1.82.Final-tuxcare.6 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ae1fd5c6-d508-55ba-a3d7-77cc8d2d5f34",
      "id": "CVE-2026-56745",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56745 affects version 4.1.82.Final-tuxcare.6 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c640bc8e-788a-5727-ba12-30f6cd873e80",
      "id": "CVE-2026-56746",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56746 affects version 4.1.82.Final-tuxcare.6 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:325daa57-e43e-58d4-a0e3-97eeb8fee88a",
      "id": "CVE-2026-56817",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56817 affects version 4.1.82.Final-tuxcare.6 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a5a42942-24cc-5843-9706-7b41c418b337",
      "id": "CVE-2026-56818",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-56818 does not affect version 4.1.82.Final-tuxcare.6 of io.netty:netty-codec-xml. not_affected \u2014 Version 4.1.82.Final is not affected by CVE-2026-56818. The vulnerability exists in the maxElements limit check that was introduced in version 4.1.135.Final (commit e51c64c964). Version 4.1.82.Final predates this security feature entirely - it has no maxElements configuration, no maxElements validation check, and therefore cannot exhibit the vulnerable pattern described in the CVE (throwing wit..."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a69b3ff3-bf2b-510f-8add-80ed64369d58",
      "id": "CVE-2026-56819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56819 affects version 4.1.82.Final-tuxcare.6 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8aa904c0-0d07-57d6-bab9-7f8fef7531fb",
      "id": "CVE-2026-59898",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59898 affects version 4.1.82.Final-tuxcare.6 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7339138a-b01a-5c2d-8dad-44deba742c76",
      "id": "CVE-2026-59899",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59899 affects version 4.1.82.Final-tuxcare.6 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8f9ed39e-68a2-5034-9aa9-34b6ae991d31",
      "id": "CVE-2026-59900",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59900 affects version 4.1.82.Final-tuxcare.6 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5a6a71f6-0f77-5004-b747-0dbf7d2ef3f9",
      "id": "CVE-2026-59901",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59901 affects version 4.1.82.Final-tuxcare.6 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fbf25a5f-3691-5fc8-8d06-3b0762d0941a",
      "id": "CVE-2026-59919",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59919 affects version 4.1.82.Final-tuxcare.6 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5650578a-4558-517c-a657-88f53cdd4b6b",
      "id": "CVE-2026-59920",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59920 affects version 4.1.82.Final-tuxcare.6 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bde6a52d-042e-5c16-9b57-bcdc3f4a4c53",
      "id": "CVE-2026-59921",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59921 affects version 4.1.82.Final-tuxcare.6 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:aa481de5-af86-5389-a057-0b43ac41cd60",
      "id": "GHSA-mfg7-5gfp-c4w3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.82.Final-tuxcare.6 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fd2edc5f-af34-5c09-9122-de318697a0c0",
      "id": "GHSA-v74w-7mr3-4qg3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.82.Final-tuxcare.6 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cb734678-0ceb-5dbd-ba60-7f3d936e6b6e",
      "id": "GHSA-xpw8-rcwv-8f8p",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-xpw8-rcwv-8f8p is fixed in version 4.1.82.Final-tuxcare.6 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.6"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.6"
    }
  ]
}