{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:0f7c0cca-3f25-5611-b9c1-89e578b4c876",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/io.netty/netty-handler@4.1.63.Final-tuxcare.4",
      "type": "library",
      "group": "io.netty",
      "name": "netty-handler",
      "version": "4.1.63.Final-tuxcare.4",
      "purl": "pkg:maven/io.netty/netty-handler@4.1.63.Final-tuxcare.4"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:2e6fe637-13c9-538a-89cd-755d82b6ba5a",
      "id": "CVE-2021-37136",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-37136 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0eadca76-9d06-599f-bd62-b4318f05ed8e",
      "id": "CVE-2021-37137",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-37137 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:41bb1c46-78b0-555b-87c4-0cba5110f593",
      "id": "CVE-2021-43797",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-43797 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f1798668-0fb1-5f0d-8b47-578ed993dc85",
      "id": "CVE-2022-24823",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-24823 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1b3ae887-358a-5450-86ff-82e8f857d39e",
      "id": "CVE-2022-41881",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-41881 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0192e723-4991-50f2-aa21-c69c502a0706",
      "id": "CVE-2022-41915",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-41915 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:eb967953-e4a6-5399-a394-144b66496eda",
      "id": "CVE-2023-34462",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-34462 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:44e242f8-3cee-52b6-8f99-a9c2cb6a8454",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-44487 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ac62bb9b-dc6d-5f94-a809-0504807f7cf0",
      "id": "CVE-2023-4586",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2023-4586 is a false positive for io.netty:netty-handler 4.1.63.Final-tuxcare.4."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e58a4b28-aad1-5dc4-83b4-25786abd27e2",
      "id": "CVE-2024-29025",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-29025 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1d02ef6f-8c9b-50a2-ab4d-c932c0db4a47",
      "id": "CVE-2024-47535",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-47535 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9d07fea5-5efc-5ff6-a92e-9c91eca9f777",
      "id": "CVE-2025-24970",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-24970 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:70f6ae35-5844-53c8-802c-060622bb9293",
      "id": "CVE-2025-25193",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-25193 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9aeace38-f8b3-5017-bd25-562975d1d9f1",
      "id": "CVE-2025-55163",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55163 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:28308132-f8a6-5a6c-8058-05ed43eb68b8",
      "id": "CVE-2025-58056",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58056 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7514a42e-cf70-5d63-b160-319f63726c99",
      "id": "CVE-2025-58057",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-58057 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:346dfb21-fdf4-58e5-b6dc-aaad4b1984ec",
      "id": "CVE-2025-59419",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-59419 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:661f770b-1fb7-59b0-9dd4-bc4970b162e0",
      "id": "CVE-2025-67735",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-67735 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:18edd19a-c9c8-57ae-9a17-902a9fff84ce",
      "id": "CVE-2026-33870",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33870 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3b2c19ed-ecc0-589b-82df-c4546dbbdd40",
      "id": "CVE-2026-33871",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33871 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8ae85452-f3d4-56e9-a7a8-880292e971d1",
      "id": "CVE-2026-41417",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41417 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:95d57cbf-44d1-5cfc-9a8e-3b662ed29a87",
      "id": "CVE-2026-42577",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42577 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4ea2ad61-cd8f-5af5-a6f0-fc15daa84bbe",
      "id": "CVE-2026-42578",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42578 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ae8f86ee-c69c-5c53-bfdd-87b2acd37a95",
      "id": "CVE-2026-42579",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42579 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f830d893-5aa6-5e6c-81ce-db610c70cebf",
      "id": "CVE-2026-42580",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42580 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:198a6af0-6e3c-5d6d-a57b-279f3bed097b",
      "id": "CVE-2026-42581",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42581 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f6028b83-f44a-5c62-b14b-c004d3d73713",
      "id": "CVE-2026-42583",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42583 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:48e2807f-230d-528a-97c1-8b3aa2790798",
      "id": "CVE-2026-42584",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42584 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:38463918-db64-5725-b259-f3d1316a438a",
      "id": "CVE-2026-42585",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42585 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7f5e6fd2-439c-58a6-b072-a22d208a7606",
      "id": "CVE-2026-42586",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42586 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6cab6a3f-0413-50f9-9c01-16778bb8cc8f",
      "id": "CVE-2026-42587",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42587 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:68c913ed-d4d0-5eff-9b0c-65f2315cd8bf",
      "id": "CVE-2026-44248",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44248 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:460d56be-26eb-5341-8347-fb9868fcc9ef",
      "id": "CVE-2026-44249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44249 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:65f74eef-0fb1-52d4-a0d7-90874dd53ace",
      "id": "CVE-2026-44250",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44250 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a102eb6d-edf1-5189-a360-21c29b52948c",
      "id": "CVE-2026-44890",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6412aa9c-5fb5-5a4e-9f79-936a6d9746fe",
      "id": "CVE-2026-44891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44891 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:72f1e658-8b3d-54f8-ab69-54212ffcda0c",
      "id": "CVE-2026-44893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44893 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8915ceed-a6e2-5a4c-963c-54b565dfe043",
      "id": "CVE-2026-45416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45416 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3f475714-949d-5923-b1f5-3f9370626c8e",
      "id": "CVE-2026-45536",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45536 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4fdd52ba-cf82-5eaa-9720-0b0a23cc31a3",
      "id": "CVE-2026-45673",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45673 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b33394e8-e7e5-522f-951e-eba1b72d38cd",
      "id": "CVE-2026-45674",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45674 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:899bd2b2-e891-5cb4-974e-db6905197497",
      "id": "CVE-2026-46340",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-46340 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1794e237-8d4d-5126-ac46-cb77d4204a61",
      "id": "CVE-2026-47244",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47244 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:147870d3-ac44-5c52-8d3a-4258320b6a5c",
      "id": "CVE-2026-47691",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47691 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d3dba16d-5e94-5c2f-9b6e-226d32aa6429",
      "id": "CVE-2026-48006",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48006 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:90ba9f73-7245-5b4c-b83f-27f8d62435e3",
      "id": "CVE-2026-48043",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-48043 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:75c8801c-df18-5ea2-8ac7-839a956bcfee",
      "id": "CVE-2026-48059",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48059 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8191e9b0-8e96-5958-93ea-c8c4ae7a3ca8",
      "id": "CVE-2026-50010",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50010 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:12a211af-15fc-5f15-a83e-0eeda8d7aea1",
      "id": "CVE-2026-50011",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50011 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fff6110f-864a-5537-9c61-47c16e945762",
      "id": "CVE-2026-50020",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50020 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b3a6710f-c71e-5e6b-9c42-b6ef3c721a2e",
      "id": "CVE-2026-50560",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5de9f21d-5d6c-579e-9cdc-17e1c74e1c72",
      "id": "CVE-2026-55831",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55831 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:429c855e-47cd-52a0-80e4-8b876842dad9",
      "id": "CVE-2026-55833",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55833 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f8c08ae5-35a7-5046-8a8f-2dec03b2822e",
      "id": "CVE-2026-55851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55851 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9c9e5582-3ab5-5036-a47d-d38839935311",
      "id": "CVE-2026-56745",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56745 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:734fc04f-9247-55e7-b6ee-ef0c406a0b76",
      "id": "CVE-2026-56746",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56746 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6c75c46d-a063-521a-8cc8-c5f089ffdb35",
      "id": "CVE-2026-56817",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-56817 does not affect version 4.1.63.Final-tuxcare.4 of io.netty:netty-handler. not_affected \u2014 The Netty codec-xml module contains XmlDecoder, which instantiates an Aalto XML parser without security configuration (line 38: new InputFactoryImpl() with no XXE protection). However, this is a library component that Netty itself does not use in its own production code. The vulnerability only manifests when downstream applications explicitly add XmlDecoder to their Netty channel pipelines. Per..."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:18db2705-3187-52db-b5f1-d288fdb1a365",
      "id": "CVE-2026-56818",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56818 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:799bad25-35bd-5033-833f-b7a20cc4f776",
      "id": "CVE-2026-56819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56819 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d4bc1539-c0e8-5402-bd45-ab183d7cec77",
      "id": "CVE-2026-59898",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59898 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b16f5c64-3564-5da6-9449-29e775784d13",
      "id": "CVE-2026-59899",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59899 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d0b96685-605c-5b54-a1ad-430c21144276",
      "id": "CVE-2026-59900",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59900 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:299c7325-a8fb-5937-b060-5eafa090a111",
      "id": "CVE-2026-59901",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59901 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:df35d712-f9d5-5611-b2cb-bcf21330341d",
      "id": "CVE-2026-59919",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59919 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f55a2744-0d80-52af-a3c1-571be7e071f3",
      "id": "CVE-2026-59920",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59920 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:723e4bf8-82b1-5979-9d4b-e27d59a84abc",
      "id": "CVE-2026-59921",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59921 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:58d04e65-1649-5fb2-b8c5-a24c06c1cc15",
      "id": "GHSA-mfg7-5gfp-c4w3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:88662458-e9f4-5984-ac6a-b4520a353fb5",
      "id": "GHSA-v74w-7mr3-4qg3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f67e47df-3739-55c0-a12c-9084728b6127",
      "id": "GHSA-xpw8-rcwv-8f8p",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-xpw8-rcwv-8f8p affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.63.Final-tuxcare.4"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.netty/netty-handler@4.1.63.Final-tuxcare.4"
    }
  ]
}