{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:8ab1be2b-a3b1-519d-a543-a9cc70706b58",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.4",
      "type": "library",
      "group": "io.netty",
      "name": "netty-example",
      "version": "4.1.63.Final-tuxcare.4",
      "purl": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.4"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:b505b477-0a0d-5ebf-896e-3f1e7b416d67",
      "id": "CVE-2021-37136",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-37136 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c210bb71-5e9e-5bd2-8d92-42ad18b6b7c2",
      "id": "CVE-2021-37137",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-37137 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b255ea83-c894-58c2-ac3d-28b7ea76c0c2",
      "id": "CVE-2021-43797",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-43797 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c09b4831-a97c-5273-8304-727e3e209873",
      "id": "CVE-2022-24823",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-24823 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1489335b-bbc3-5139-b0a3-f676c84b7059",
      "id": "CVE-2022-41881",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-41881 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e171eb3b-e61d-5005-86b5-403424428e48",
      "id": "CVE-2022-41915",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-41915 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bf362197-0fd8-5a1e-8f64-7271e73acd06",
      "id": "CVE-2023-34462",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-34462 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d30329c0-61fa-5d77-b8ae-58b4d40f7e4b",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-44487 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d4ae81e3-1fdd-5468-b4ad-f86b48f5b557",
      "id": "CVE-2023-4586",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2023-4586 is a false positive for io.netty:netty-example 4.1.63.Final-tuxcare.4."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fdc4b54a-879f-52dc-8e26-9a221d7016eb",
      "id": "CVE-2024-29025",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-29025 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ea8c8ebe-c50a-56e0-8dda-41fca616b452",
      "id": "CVE-2024-47535",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-47535 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9222759e-2536-54db-88fa-f3afd90c237b",
      "id": "CVE-2025-24970",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-24970 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7f1814ed-e0d2-5d45-b941-62a330b64768",
      "id": "CVE-2025-25193",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-25193 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:94ba60fd-5a31-5d5f-9d08-8001b5684f68",
      "id": "CVE-2025-55163",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55163 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c41a3336-823a-5f31-a0f7-40d743512f2b",
      "id": "CVE-2025-58056",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58056 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2fc6ef7a-b04c-5912-8251-15e6d67925d0",
      "id": "CVE-2025-58057",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-58057 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f6be905f-cbaa-537b-9fa6-3bd1b75b6bc3",
      "id": "CVE-2025-59419",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-59419 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4fb7ed62-4f04-5493-8501-7a49f0300187",
      "id": "CVE-2025-67735",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-67735 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:875ba1c3-3380-521b-b507-daf110020ebc",
      "id": "CVE-2026-33870",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33870 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8e83a76a-eeb1-560a-a202-a52188d4ecd3",
      "id": "CVE-2026-33871",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33871 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:48d5ded7-8e51-598b-ba37-1c7aa1e7b0c3",
      "id": "CVE-2026-41417",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41417 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2bcfca89-ab98-5032-952d-ed8da1b200bb",
      "id": "CVE-2026-42577",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42577 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bab6fff9-9a13-5150-acaf-e037c13d0001",
      "id": "CVE-2026-42578",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42578 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a15729d8-bd73-572f-a749-6257d2e74313",
      "id": "CVE-2026-42579",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42579 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4a087c55-97d4-5404-ad85-e8dc4a14f964",
      "id": "CVE-2026-42580",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42580 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:59280313-034c-5053-81b9-e1773aa4a09f",
      "id": "CVE-2026-42581",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42581 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:54132923-6aeb-5481-a8e7-47f9f6bc0036",
      "id": "CVE-2026-42583",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42583 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:94ba1fec-bad6-5bd1-9b3d-88053375aed2",
      "id": "CVE-2026-42584",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42584 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a937dfde-48b1-5b87-9677-d1d989fc761e",
      "id": "CVE-2026-42585",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42585 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:def0f125-4dec-5ef4-b60f-0e7eb79e906e",
      "id": "CVE-2026-42586",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42586 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a96b68f1-ab4e-515c-b237-3360c762be7c",
      "id": "CVE-2026-42587",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42587 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ac41d8f5-31df-53a7-9a03-b4be2f7ddb10",
      "id": "CVE-2026-44248",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44248 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7a3590ae-a92f-5923-9964-6fd84d63c690",
      "id": "CVE-2026-44249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44249 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:93fe57f0-d34b-5bc6-a1e5-1a1e995b32ba",
      "id": "CVE-2026-44250",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44250 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:789948fc-b2e1-5b1a-bd4d-52e254ca886c",
      "id": "CVE-2026-44890",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5d4e1021-be2c-5995-b93d-c8be725ea73f",
      "id": "CVE-2026-44891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44891 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7d10c50d-abed-5f6a-a165-52185406e7a6",
      "id": "CVE-2026-44893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44893 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0c26f787-0928-51e2-a5e1-20c09edd9f25",
      "id": "CVE-2026-45416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45416 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:890135e3-7667-58d0-bb9d-6b38401018b6",
      "id": "CVE-2026-45536",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45536 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:aa0ac3b6-b215-5c44-9bf4-985b1b01c550",
      "id": "CVE-2026-45673",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45673 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ba2681b6-abe8-5dc6-ba92-47c87b66be3a",
      "id": "CVE-2026-45674",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45674 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3f7bca74-f513-5b71-93d3-c66961632202",
      "id": "CVE-2026-46340",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-46340 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4e8e6c6b-693a-5880-b314-5257d63063ff",
      "id": "CVE-2026-47244",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47244 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d60cf23b-1ae5-5a11-9b91-c414fe2df46c",
      "id": "CVE-2026-47691",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47691 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:12a48c55-39fa-5969-bf8c-fea08145b653",
      "id": "CVE-2026-48006",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48006 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:354c0269-2ef5-5404-9950-05142c4c8954",
      "id": "CVE-2026-48043",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-48043 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:836e0fc5-520f-5914-954c-092422ff7711",
      "id": "CVE-2026-48059",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48059 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4db20325-fc42-5204-bb47-7f37234600ad",
      "id": "CVE-2026-50010",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50010 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:799d1b56-adb5-5a33-a42a-0cfbb5a44384",
      "id": "CVE-2026-50011",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50011 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:73823f15-01bc-5a6c-b482-cf7582e6be00",
      "id": "CVE-2026-50020",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50020 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:98f67946-eb54-5548-9620-86c1ecaf651c",
      "id": "CVE-2026-50560",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2d7603fa-4568-59e0-9e05-4429484cba67",
      "id": "CVE-2026-55831",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55831 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:846876a7-14d0-5dc2-b373-20f32ea6ff0f",
      "id": "CVE-2026-55833",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55833 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4a92e72c-1fbd-5eb3-9faf-5bb6d1255cb6",
      "id": "CVE-2026-55851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55851 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f3e8137a-86e2-5800-852e-caeb97599d89",
      "id": "CVE-2026-56745",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56745 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:06e17b70-d26a-55d2-973d-44fa9c004e8f",
      "id": "CVE-2026-56746",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56746 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:865666b3-6758-5a1f-91f2-8b4996295c38",
      "id": "CVE-2026-56817",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-56817 does not affect version 4.1.63.Final-tuxcare.4 of io.netty:netty-example. not_affected \u2014 The Netty codec-xml module contains XmlDecoder, which instantiates an Aalto XML parser without security configuration (line 38: new InputFactoryImpl() with no XXE protection). However, this is a library component that Netty itself does not use in its own production code. The vulnerability only manifests when downstream applications explicitly add XmlDecoder to their Netty channel pipelines. Per..."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:05e69905-0521-596c-93bd-cda477589dba",
      "id": "CVE-2026-56818",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56818 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:026382b6-9090-5785-ae23-5dfc248691bf",
      "id": "CVE-2026-56819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56819 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fec7553b-6634-5222-8206-2c64838b5844",
      "id": "CVE-2026-59898",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59898 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b5b39fd5-9059-5f23-bad3-480749c48949",
      "id": "CVE-2026-59899",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59899 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:433663c7-5654-58a6-9533-ec1e4bcd9b51",
      "id": "CVE-2026-59900",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59900 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8424f656-aa41-5f5e-bdab-178128801697",
      "id": "CVE-2026-59901",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59901 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ca8957bc-44f9-56a7-af56-93be51811cf7",
      "id": "CVE-2026-59919",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59919 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:50029a01-e4b9-5679-add2-ae9e390cc259",
      "id": "CVE-2026-59920",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59920 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c6ffcd8f-b1cb-5c6f-8802-c4d1d7be4e54",
      "id": "CVE-2026-59921",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59921 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5ac574f7-1c15-5947-ade7-168fdcf83804",
      "id": "CVE-2026-73507",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-73507 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7cdfe6d3-95ff-597e-ae79-7f3cbcf11cf9",
      "id": "CVE-2026-73508",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-73508 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4ba4c517-859e-5cbe-a72a-0b3e87ca7fac",
      "id": "GHSA-mfg7-5gfp-c4w3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8f76d920-9ed9-5330-820a-e0a6cbf7e49e",
      "id": "GHSA-v74w-7mr3-4qg3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e59d6ffc-8ac6-5372-b66d-5b08028991ff",
      "id": "GHSA-xpw8-rcwv-8f8p",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-xpw8-rcwv-8f8p affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.4"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.4"
    }
  ]
}