{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:b9eaf3ff-8410-5171-ae24-13ee9b59046f",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/io.netty/netty-codec@4.1.63.Final-tuxcare.4",
      "type": "library",
      "group": "io.netty",
      "name": "netty-codec",
      "version": "4.1.63.Final-tuxcare.4",
      "purl": "pkg:maven/io.netty/netty-codec@4.1.63.Final-tuxcare.4"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:49dc1ff0-f6e4-54e8-b0eb-d9ac5673cbc7",
      "id": "CVE-2021-37136",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-37136 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2a6143b9-bc4c-5a01-b2f4-6af694fb6d73",
      "id": "CVE-2021-37137",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-37137 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4765cf1e-9c97-59ca-80cc-49eb67cc0b80",
      "id": "CVE-2021-43797",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-43797 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a2af4713-4984-51f7-8eed-950eaf5aa1a3",
      "id": "CVE-2022-24823",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-24823 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:69005239-3d34-5d71-a436-035d541c6ef6",
      "id": "CVE-2022-41881",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-41881 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ac270071-e0bc-5e3e-ac90-298cf2bf44c4",
      "id": "CVE-2022-41915",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-41915 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1f81af34-588a-5fee-aa75-2af989534d8f",
      "id": "CVE-2023-34462",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-34462 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:027932d7-c2d9-5296-b27a-7ec3fb9289ee",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-44487 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7dedd3bf-41dd-53e4-b18b-79de70fe46a7",
      "id": "CVE-2023-4586",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2023-4586 is a false positive for io.netty:netty-codec 4.1.63.Final-tuxcare.4."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9e278d9d-c280-5a37-b2d3-d6824b63d4b2",
      "id": "CVE-2024-29025",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-29025 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:500aa7ee-a12e-51e4-9a69-1cb95c285e6c",
      "id": "CVE-2024-47535",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-47535 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d276d483-c199-5c79-b650-1b8ab935a84b",
      "id": "CVE-2025-24970",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-24970 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0dae80db-9bdf-5095-bb3b-356c39d196d3",
      "id": "CVE-2025-25193",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-25193 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1569fc82-7fde-5597-8f2b-4aec2c5ab8b1",
      "id": "CVE-2025-55163",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55163 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d823030b-e8d7-5c23-ade6-74ffa936ef73",
      "id": "CVE-2025-58056",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58056 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3638cc9b-e5b8-575b-8eb2-9493b5388985",
      "id": "CVE-2025-58057",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-58057 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f79dc767-c479-574d-afa1-af69b151b503",
      "id": "CVE-2025-59419",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-59419 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ca5f8642-54f2-521c-b7d2-ca2ddc5d075e",
      "id": "CVE-2025-67735",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-67735 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f6a60b31-7db4-5599-bcdc-847f437b9819",
      "id": "CVE-2026-33870",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33870 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ce6d9a0b-8802-535f-a1ea-bfc036bcf6e1",
      "id": "CVE-2026-33871",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33871 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d1380ffc-ec45-5a4f-bd8c-4fe9a89608bd",
      "id": "CVE-2026-41417",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41417 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3f61f0be-9c22-51a6-81e0-fa7deb450753",
      "id": "CVE-2026-42577",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42577 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1d901c91-1145-5b88-8b95-f33b9ea9b195",
      "id": "CVE-2026-42578",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42578 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8e6b1f1e-fd04-5165-8096-028c1d33ce37",
      "id": "CVE-2026-42579",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42579 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:02f4c82c-6315-5549-a21b-44519008148b",
      "id": "CVE-2026-42580",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42580 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f0d2d31b-5d3c-5eba-a901-997b92f253c2",
      "id": "CVE-2026-42581",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42581 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f620e4f4-c1f9-5d2e-a7d7-8c7abf26a975",
      "id": "CVE-2026-42583",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42583 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f82f8452-6c3d-5fe0-8a29-108b54304a09",
      "id": "CVE-2026-42584",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42584 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:036d2ab8-bbf3-52d6-ba77-ef4341735964",
      "id": "CVE-2026-42585",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42585 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9ffefffb-2bee-573d-9aae-5229a4588f9e",
      "id": "CVE-2026-42586",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42586 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f8fd2cfd-ce26-5cae-a351-cf5fc83f528d",
      "id": "CVE-2026-42587",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42587 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0a0f3378-43aa-584e-8946-aa4634a3d948",
      "id": "CVE-2026-44248",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44248 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:04b79b88-ba80-5071-b7e9-b5a19148e748",
      "id": "CVE-2026-44249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44249 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c97c73d4-97dd-5eaa-9f9b-79dab45622b9",
      "id": "CVE-2026-44250",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44250 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:60a1ba04-8878-5f90-bedd-a4920f258ec4",
      "id": "CVE-2026-44890",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3b63813c-008c-56a7-bbac-171c1a3e4ed2",
      "id": "CVE-2026-44891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44891 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b0983df9-c46c-5b9b-9ba6-3fd83f342427",
      "id": "CVE-2026-44893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44893 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d4b83b04-75a6-5ade-992d-1b88aed2830e",
      "id": "CVE-2026-45416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45416 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ad2b5f34-7be3-5ff4-a084-f8d21eb37cde",
      "id": "CVE-2026-45536",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45536 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7351432c-078f-5a83-b8c6-eab7629bc440",
      "id": "CVE-2026-45673",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45673 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bd0b63b7-2217-58e4-a1d5-0e99f30466d6",
      "id": "CVE-2026-45674",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45674 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:82bebc76-7c73-5e30-a0d0-0e208b2f6726",
      "id": "CVE-2026-46340",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-46340 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9c609492-70f9-5565-8d12-5c125397363f",
      "id": "CVE-2026-47244",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47244 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:09c8b394-a298-5595-ac0f-d7533b156929",
      "id": "CVE-2026-47691",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47691 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6f02ea42-802c-5fc4-ba9e-68cd34b09c4b",
      "id": "CVE-2026-48006",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48006 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:25603455-f410-526c-ba20-efa9269ebe8a",
      "id": "CVE-2026-48043",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-48043 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d2756c43-e2e2-5f40-b168-7921dc6b96e1",
      "id": "CVE-2026-48059",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48059 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6258a6a7-f752-5406-8e1b-2baae0c72ded",
      "id": "CVE-2026-50010",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50010 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:93ffac24-f2be-57e4-a8a2-509d3064dba4",
      "id": "CVE-2026-50011",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50011 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ca99621a-1249-5f8f-b588-87ad7b058901",
      "id": "CVE-2026-50020",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50020 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:28cc0f30-1b74-5b81-bfef-2a33ca4d9f12",
      "id": "CVE-2026-50560",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9174f702-b80b-5bdf-b409-0158e5692742",
      "id": "CVE-2026-55831",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55831 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:65ffe710-53a0-5252-86d5-6a6cb817ec05",
      "id": "CVE-2026-55833",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55833 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1a66a5bf-0d61-5d4b-a6cf-be9dee909341",
      "id": "CVE-2026-55851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55851 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b0dea08f-b2f4-58a0-b805-be094e43a574",
      "id": "CVE-2026-56745",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56745 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fc0674a8-64cf-54a0-99ec-822fc879910c",
      "id": "CVE-2026-56746",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56746 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0b587321-abc5-5ec6-9ddb-2805c7021365",
      "id": "CVE-2026-56817",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-56817 does not affect version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec. not_affected \u2014 The Netty codec-xml module contains XmlDecoder, which instantiates an Aalto XML parser without security configuration (line 38: new InputFactoryImpl() with no XXE protection). However, this is a library component that Netty itself does not use in its own production code. The vulnerability only manifests when downstream applications explicitly add XmlDecoder to their Netty channel pipelines. Per..."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6a11c73e-2935-5a20-be9b-aaf7a5a61176",
      "id": "CVE-2026-56818",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56818 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3d1077cf-d2d9-5121-92de-30e228746599",
      "id": "CVE-2026-56819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56819 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bc57b527-3696-57f1-8957-4495f3919a9d",
      "id": "CVE-2026-59898",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59898 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6d1d7e17-a538-5eb1-9fad-325be1f4bab8",
      "id": "CVE-2026-59899",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59899 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7a23f3cb-ca5d-5a34-9b0f-dc9796884376",
      "id": "CVE-2026-59900",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59900 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:22114fd9-a176-5456-a30b-15ecc5223175",
      "id": "CVE-2026-59901",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59901 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9b57096c-3388-5132-afcd-bdd105e762b8",
      "id": "CVE-2026-59919",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59919 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3d795ba2-9ab2-5b57-ae8c-96a94319f6f8",
      "id": "CVE-2026-59920",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59920 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7bed76f6-6532-5be4-a3ed-0f96403e4394",
      "id": "CVE-2026-59921",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59921 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0dca8a0d-8266-5844-bb3d-7ba0f5d075a2",
      "id": "GHSA-mfg7-5gfp-c4w3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7924389c-b65a-51a4-a9da-df0e8e4e2ea9",
      "id": "GHSA-v74w-7mr3-4qg3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:24117215-599e-588a-ba7f-4a6eb10015e6",
      "id": "GHSA-xpw8-rcwv-8f8p",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-xpw8-rcwv-8f8p affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.63.Final-tuxcare.4"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.netty/netty-codec@4.1.63.Final-tuxcare.4"
    }
  ]
}