{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:f28a3868-724b-5a58-8bac-abfcd720a72c",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/io.netty/netty-codec@4.1.82.Final-tuxcare.4",
      "type": "library",
      "group": "io.netty",
      "name": "netty-codec",
      "version": "4.1.82.Final-tuxcare.4",
      "purl": "pkg:maven/io.netty/netty-codec@4.1.82.Final-tuxcare.4"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:74817ad6-c709-5685-921f-3d4d88693a89",
      "id": "CVE-2022-41881",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-41881 is fixed in version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c429dd49-60e7-54d1-8ff8-ee7544d65641",
      "id": "CVE-2022-41915",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-41915 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f05b7d3c-eca4-50b9-91cd-028f3ee5af4a",
      "id": "CVE-2023-34462",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-34462 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d67cc2f9-b039-5ae2-b5cb-78b87ba3978c",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-44487 is fixed in version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2f0ff0e8-320b-55de-8759-5a7707f9a25d",
      "id": "CVE-2023-4586",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2023-4586 is a false positive for io.netty:netty-codec 4.1.82.Final-tuxcare.4."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1324506a-c5cc-5860-8bb6-dc378e6aba57",
      "id": "CVE-2024-29025",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-29025 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fceb0982-9e16-5204-93ac-61e172c5ff19",
      "id": "CVE-2024-47535",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-47535 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d327df8f-fb52-5fa0-8433-d226591c3d59",
      "id": "CVE-2025-24970",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-24970 is fixed in version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:02d26e3a-5b62-51c2-993d-94c8ffb49f7d",
      "id": "CVE-2025-25193",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-25193 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c5b0308a-03d3-560c-813a-3b2f69425f71",
      "id": "CVE-2025-55163",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55163 is fixed in version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:088377dd-d4cb-5630-92c7-f6bcf961cc09",
      "id": "CVE-2025-58056",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58056 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:687175d2-ed93-5c01-b79d-23770393ae4f",
      "id": "CVE-2025-58057",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-58057 is fixed in version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b891dcca-4fec-516a-a7e0-301c88f68ec2",
      "id": "CVE-2025-59419",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-59419 is fixed in version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a12230b7-440f-522f-a38f-1ef234cd8d55",
      "id": "CVE-2025-67735",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-67735 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:08d08aa4-fb37-5411-9e1d-1ac86ed23e55",
      "id": "CVE-2026-33870",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33870 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0261476d-e763-59e2-bc3a-7a1634bc2617",
      "id": "CVE-2026-33871",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33871 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3bcdd35a-5185-5147-979c-8172daf6f2c5",
      "id": "CVE-2026-41417",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41417 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2e2a1076-3630-5b0b-8586-effeee8212ef",
      "id": "CVE-2026-42577",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42577 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9799876f-19c4-54af-96b8-046c82d98339",
      "id": "CVE-2026-42578",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42578 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f56c7ccc-dfa3-5b72-8fe8-51d44675bedb",
      "id": "CVE-2026-42579",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42579 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e1838a16-6b5d-5232-880f-9aa48a489227",
      "id": "CVE-2026-42580",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42580 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cdb09627-90dd-509e-8987-682266c6435f",
      "id": "CVE-2026-42581",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42581 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d840e037-2a58-5865-adea-2477aba10ae2",
      "id": "CVE-2026-42583",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42583 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:573bba2e-2cbc-57a5-a888-32aa56d3e7dd",
      "id": "CVE-2026-42584",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42584 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:89a5e46c-86af-5d88-9786-3ede81b360c3",
      "id": "CVE-2026-42585",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42585 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:038246c5-a079-54cc-bdba-69e9bb5b3c64",
      "id": "CVE-2026-42586",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42586 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bf72de80-1ab8-5f96-9170-6d7f5f5eaf12",
      "id": "CVE-2026-42587",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42587 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:321dca0f-3336-5ca4-b5ae-420f79a758a8",
      "id": "CVE-2026-44248",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44248 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f274b2bc-e022-5aef-8e49-71131095bafd",
      "id": "CVE-2026-44249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44249 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6a4da128-fc31-569e-8a81-32c62c1d7940",
      "id": "CVE-2026-44250",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44250 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1474906a-0d76-5e09-94a2-8de99071e86f",
      "id": "CVE-2026-44890",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:651bc74b-cbbd-562f-896a-69708af3c59d",
      "id": "CVE-2026-44891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44891 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:adc58432-e266-53f0-b229-ae34bea5261b",
      "id": "CVE-2026-44893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44893 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:592f7d5d-e558-580a-98db-1d9d04f37e7c",
      "id": "CVE-2026-45416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45416 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0c541ca9-a6b8-593c-8f48-1362b74ca369",
      "id": "CVE-2026-45536",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45536 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b1e77425-3b73-5eed-9824-d285cb6d63ce",
      "id": "CVE-2026-45673",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45673 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bd7c249b-4d4d-563c-81f9-304627d291bf",
      "id": "CVE-2026-45674",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45674 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5c00d8f9-e6ce-57ee-abe9-9a2d00ee6558",
      "id": "CVE-2026-46340",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-46340 is fixed in version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3c915b1b-9b93-59fa-baf4-a56cd57304cc",
      "id": "CVE-2026-47244",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47244 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6038476e-b907-5f9a-9b3e-a0013b7ada35",
      "id": "CVE-2026-47691",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47691 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5b9e7474-73a9-5fdf-b6a4-875d8a2ccdb0",
      "id": "CVE-2026-48006",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48006 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1276fe90-5635-59bc-9307-55610490e22b",
      "id": "CVE-2026-48043",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48043 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:283e0f33-f88b-581c-a366-7469779c9a13",
      "id": "CVE-2026-48059",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48059 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:796c7654-021b-573d-8bb5-5a48d0773c77",
      "id": "CVE-2026-50010",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50010 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9612abb2-5e13-5828-8c9e-850437b636c9",
      "id": "CVE-2026-50011",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50011 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:00f2b4e4-c4c9-506c-82b9-1bc540e306a1",
      "id": "CVE-2026-50020",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50020 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b094cbfa-aea1-5951-9347-155b6fd67dfa",
      "id": "CVE-2026-50560",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5c8319ee-7153-5387-953a-d67019507eb9",
      "id": "CVE-2026-55831",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55831 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:eddd3c3e-4ab0-5474-9dbe-b462e6ab3e13",
      "id": "CVE-2026-55833",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55833 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7d087796-7f70-5336-bf9e-4d75744ab9a9",
      "id": "CVE-2026-55851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55851 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:441ecc57-b924-5e73-94ea-6321898f6b76",
      "id": "CVE-2026-56745",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56745 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1e07e26d-4b2c-5be8-a99b-a02bca02cef8",
      "id": "CVE-2026-56746",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56746 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e7e999dc-57c6-59fc-a027-952e4bb2ae10",
      "id": "CVE-2026-56817",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56817 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a9d3a52c-2358-543c-8bb5-895d364fa035",
      "id": "CVE-2026-56818",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-56818 does not affect version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec. not_affected \u2014 Version 4.1.82.Final is not affected by CVE-2026-56818. The vulnerability exists in the maxElements limit check that was introduced in version 4.1.135.Final (commit e51c64c964). Version 4.1.82.Final predates this security feature entirely - it has no maxElements configuration, no maxElements validation check, and therefore cannot exhibit the vulnerable pattern described in the CVE (throwing wit..."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8bdd90c4-e580-5366-aebe-36a6678ff163",
      "id": "CVE-2026-56819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56819 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f35b529f-29b5-572b-9648-511f996e9bb8",
      "id": "CVE-2026-59898",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59898 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e6f42ce6-e7ce-585c-9f55-361a5a9edbfa",
      "id": "CVE-2026-59899",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59899 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:91d4a5db-6200-5e6b-9d15-206be802b97d",
      "id": "CVE-2026-59900",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59900 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b0e9b76b-e51f-5a05-8a42-4764a635a663",
      "id": "CVE-2026-59901",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59901 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:41594be2-0f00-5da5-a417-9de4b2d55ad2",
      "id": "CVE-2026-59919",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59919 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8a57e843-1355-5274-8372-a7fe28934621",
      "id": "CVE-2026-59920",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59920 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:39d59831-1d20-5f0f-88b6-a65b3c9491c5",
      "id": "CVE-2026-59921",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59921 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6bbd9612-b964-5b3c-9962-152fd1c98c58",
      "id": "GHSA-mfg7-5gfp-c4w3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:06c4e4cb-f819-5908-8f4d-eb201ae6c80b",
      "id": "GHSA-v74w-7mr3-4qg3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.82.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f264f2ad-d3e3-50e3-8fe1-f75251737010",
      "id": "GHSA-xpw8-rcwv-8f8p",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-xpw8-rcwv-8f8p is fixed in version 4.1.82.Final-tuxcare.4 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.82.Final-tuxcare.4"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.netty/netty-codec@4.1.82.Final-tuxcare.4"
    }
  ]
}