{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:1f3ad6e5-7305-5876-a28b-91b6e1abfcf2",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/io.netty/netty-handler-proxy@4.1.63.Final-tuxcare.4",
      "type": "library",
      "group": "io.netty",
      "name": "netty-handler-proxy",
      "version": "4.1.63.Final-tuxcare.4",
      "purl": "pkg:maven/io.netty/netty-handler-proxy@4.1.63.Final-tuxcare.4"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:0cbf1945-ad10-5060-ad4b-47e74baa236f",
      "id": "CVE-2021-37136",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-37136 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-handler-proxy."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-proxy@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3bef2cd2-62dd-58bf-984c-cd3c33d73c78",
      "id": "CVE-2021-37137",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-37137 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-handler-proxy."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-proxy@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:850056bb-4b30-5f29-ae07-eabb171fadb0",
      "id": "CVE-2021-43797",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-43797 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-handler-proxy."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-proxy@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6377e874-693f-5143-adba-242e9138bb5d",
      "id": "CVE-2022-24823",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-24823 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-handler-proxy."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-proxy@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:612a610d-e2bb-5e47-85fe-14d91218db02",
      "id": "CVE-2022-41881",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-41881 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-handler-proxy."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-proxy@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8acd6306-a17c-5a44-b12a-5397e8dfc6b9",
      "id": "CVE-2022-41915",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-41915 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-handler-proxy."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-proxy@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d2da9697-d60e-5e67-88aa-ae3b8dd78290",
      "id": "CVE-2023-34462",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-34462 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-handler-proxy."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-proxy@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:53cecf15-1a0a-5c2b-9cb3-7441508a82d0",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-44487 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-handler-proxy."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-proxy@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5d22f9cb-60f6-5bfc-bd2d-f044bac899e5",
      "id": "CVE-2023-4586",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2023-4586 is a false positive for io.netty:netty-handler-proxy 4.1.63.Final-tuxcare.4."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-proxy@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6e50d68d-9bae-5e4f-a008-6a3af79d6f82",
      "id": "CVE-2024-29025",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-29025 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-handler-proxy."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-proxy@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8765943c-22b9-5537-a86e-55f0160af5df",
      "id": "CVE-2024-47535",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-47535 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-handler-proxy."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-proxy@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e585d888-7189-5140-98b8-12046a48215a",
      "id": "CVE-2025-24970",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-24970 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-handler-proxy."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-proxy@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5b99775a-79bb-5295-ab38-6f9b241d9b99",
      "id": "CVE-2025-25193",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-25193 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-handler-proxy."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-proxy@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1e1aebdb-2c17-577f-b4d3-c0a612760c02",
      "id": "CVE-2025-55163",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55163 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-handler-proxy."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-proxy@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6788b808-4b8a-52e1-bb42-4075d3c22caf",
      "id": "CVE-2025-58056",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58056 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-handler-proxy."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-proxy@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:36ae3539-afbc-53ea-9915-b583ccfefe3b",
      "id": "CVE-2025-58057",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-58057 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-handler-proxy."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-proxy@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:645e4825-dd31-5d78-9ba5-04cb04234928",
      "id": "CVE-2025-59419",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-59419 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-handler-proxy."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-proxy@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fece9e64-d34f-57b5-96bd-73739acb603c",
      "id": "CVE-2025-67735",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-67735 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-handler-proxy."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-proxy@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3257e302-0770-5d81-ba60-898d9a0192de",
      "id": "CVE-2026-33870",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33870 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-handler-proxy."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-proxy@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ddf023a3-801f-5722-99eb-5b90a0f40c69",
      "id": "CVE-2026-33871",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33871 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-handler-proxy."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-proxy@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:06251200-f7e3-5660-9e11-85c27be2e9e4",
      "id": "CVE-2026-41417",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41417 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-handler-proxy."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-proxy@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:89e8bc40-8449-50f2-aae5-28d9ea288f5d",
      "id": "CVE-2026-42577",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42577 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-handler-proxy."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-proxy@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0d7e6f38-32fb-595f-8de4-af6d23593012",
      "id": "CVE-2026-42578",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42578 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-handler-proxy."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-proxy@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:982de48a-8633-599c-9f84-1bb4f05c8605",
      "id": "CVE-2026-42579",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42579 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-handler-proxy."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-proxy@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:eeae9340-cfef-5fcb-932a-7ff0a03c61fe",
      "id": "CVE-2026-42580",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42580 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-handler-proxy."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-proxy@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:66aa9ae6-72cc-5ecd-825c-7507fc92badc",
      "id": "CVE-2026-42581",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42581 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-handler-proxy."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-proxy@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e5bcbecc-a0d4-58c0-a252-1049c7bc1453",
      "id": "CVE-2026-42583",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42583 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-handler-proxy."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-proxy@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7aeb87bd-5f23-5b31-8d0c-d5049cfac648",
      "id": "CVE-2026-42584",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42584 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-handler-proxy."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-proxy@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5268fe77-900e-598a-adfa-7ea027b20e8b",
      "id": "CVE-2026-42585",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42585 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-handler-proxy."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-proxy@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2b0b30e3-8ec2-5fcb-882e-1368121933a1",
      "id": "CVE-2026-42586",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42586 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-handler-proxy."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-proxy@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ebdd6813-9bac-5549-9e51-d5506018f2ff",
      "id": "CVE-2026-42587",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42587 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-handler-proxy."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-proxy@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:72b01696-0588-56b6-9c4a-feb1d0e0daac",
      "id": "CVE-2026-44248",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44248 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-handler-proxy."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-proxy@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e7d34d74-4aad-52fb-8b61-76f660ad28ba",
      "id": "CVE-2026-44249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44249 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-handler-proxy."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-proxy@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:774a7371-1c97-5edb-9f82-0ba5a3746af1",
      "id": "CVE-2026-44250",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44250 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-handler-proxy."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-proxy@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2d423cdc-8441-57ca-94e3-bc27eb93c5d7",
      "id": "CVE-2026-44890",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-handler-proxy."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-proxy@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:997584be-7a41-522a-a603-bd9339f25d57",
      "id": "CVE-2026-44891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44891 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-handler-proxy."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-proxy@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bcf6eeb7-f9da-5c03-a887-c71a27180650",
      "id": "CVE-2026-44893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44893 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-handler-proxy."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-proxy@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dbc01f96-45ac-5030-8427-25f583a1ce36",
      "id": "CVE-2026-45416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45416 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-handler-proxy."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-proxy@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c28e897c-4a90-5965-a3ce-1d73f8078378",
      "id": "CVE-2026-45536",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45536 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-handler-proxy."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-proxy@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:064ada76-490d-5f15-bc0a-812f1380cc66",
      "id": "CVE-2026-45673",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45673 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-handler-proxy."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-proxy@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c99da20e-f3ce-5b96-9178-130efae352d0",
      "id": "CVE-2026-45674",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45674 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-handler-proxy."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-proxy@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c1370769-6b02-5bd3-8d14-9e0e47e9dc73",
      "id": "CVE-2026-46340",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-46340 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-handler-proxy."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-proxy@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:479d94cb-b0de-57bf-aa4b-09a6ef559687",
      "id": "CVE-2026-47244",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47244 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-handler-proxy."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-proxy@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fa5bf552-fdca-5359-ac8e-601a02bda333",
      "id": "CVE-2026-47691",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47691 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-handler-proxy."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-proxy@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5edd1555-131b-5c04-89a2-9723f557f8ac",
      "id": "CVE-2026-48006",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48006 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-handler-proxy."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-proxy@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:479cf127-13bd-59f9-bf96-1dcf33e6a0d2",
      "id": "CVE-2026-48043",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-48043 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-handler-proxy."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-proxy@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:95d3ed4a-839e-5ab7-9a22-731ece0259b3",
      "id": "CVE-2026-48059",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48059 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-handler-proxy."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-proxy@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4cd59040-0908-55ea-b4b3-90ddc0bfe1ad",
      "id": "CVE-2026-50010",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50010 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-handler-proxy."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-proxy@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b2857539-30bb-5980-b098-0bd5cfa2dc49",
      "id": "CVE-2026-50011",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50011 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-handler-proxy."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-proxy@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0ced3e9f-0e18-5dfd-815b-20a65f41fe5c",
      "id": "CVE-2026-50020",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50020 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-handler-proxy."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-proxy@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4d89552e-052b-5f24-83d7-aa840f83c63e",
      "id": "CVE-2026-50560",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-handler-proxy."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-proxy@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4c33592a-2a67-57c1-a77d-a7d529252e04",
      "id": "CVE-2026-55831",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55831 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-handler-proxy."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-proxy@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2440494c-e030-5ae9-992c-db4a151d2a0c",
      "id": "CVE-2026-55833",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55833 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-handler-proxy."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-proxy@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bf5ca291-a4f8-5882-99c1-a6dc223c42b5",
      "id": "CVE-2026-55851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55851 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-handler-proxy."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-proxy@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f463f7e9-ec11-5d20-9303-21afcf83e9be",
      "id": "CVE-2026-56745",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56745 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-handler-proxy."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-proxy@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8d795a66-d1d2-5c51-971a-2193a0517ff7",
      "id": "CVE-2026-56746",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56746 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-handler-proxy."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-proxy@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ea2a9289-4cfa-5d74-9aab-2a22f54589c3",
      "id": "CVE-2026-56817",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-56817 does not affect version 4.1.63.Final-tuxcare.4 of io.netty:netty-handler-proxy. not_affected \u2014 The Netty codec-xml module contains XmlDecoder, which instantiates an Aalto XML parser without security configuration (line 38: new InputFactoryImpl() with no XXE protection). However, this is a library component that Netty itself does not use in its own production code. The vulnerability only manifests when downstream applications explicitly add XmlDecoder to their Netty channel pipelines. Per..."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-proxy@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d13a22e0-10fd-50a7-b462-a733ce75401c",
      "id": "CVE-2026-56818",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56818 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-handler-proxy."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-proxy@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:879ddf36-cbd8-5049-874c-7cbd5d483c83",
      "id": "CVE-2026-56819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56819 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-handler-proxy."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-proxy@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b2eafc1e-85f5-50a4-8d03-d842081e6250",
      "id": "CVE-2026-59898",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59898 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-handler-proxy."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-proxy@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:67c91c0a-b7fb-5b5d-8d42-ed85e4c1a8f5",
      "id": "CVE-2026-59899",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59899 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-handler-proxy."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-proxy@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:18e24741-0f44-5d73-b4eb-d08333ceb38a",
      "id": "CVE-2026-59900",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59900 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-handler-proxy."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-proxy@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:498cab9e-8501-5cae-8233-abb6f34ab38f",
      "id": "CVE-2026-59901",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59901 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-handler-proxy."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-proxy@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:547c2d94-c24f-5043-a426-32778f848d46",
      "id": "CVE-2026-59919",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59919 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-handler-proxy."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-proxy@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:60a35a77-5896-5578-b5ed-1b95f7fac8b5",
      "id": "CVE-2026-59920",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59920 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-handler-proxy."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-proxy@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b75216da-2b9d-5341-b05a-7f81cbed9b10",
      "id": "CVE-2026-59921",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59921 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-handler-proxy."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-proxy@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:48390d9c-14c0-5b4c-bca9-d6a10db27811",
      "id": "GHSA-mfg7-5gfp-c4w3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-handler-proxy."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-proxy@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9286fae9-a75a-5c3c-ac5a-2f17c340de05",
      "id": "GHSA-v74w-7mr3-4qg3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-handler-proxy."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-proxy@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:372fbc47-b240-5659-9a46-216e8f23ce8c",
      "id": "GHSA-xpw8-rcwv-8f8p",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-xpw8-rcwv-8f8p affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-handler-proxy."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-proxy@4.1.63.Final-tuxcare.4"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.netty/netty-handler-proxy@4.1.63.Final-tuxcare.4"
    }
  ]
}