{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:b51914b5-a075-5ec9-b4f7-917bf8bb3ee2",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/io.netty/netty-microbench@4.1.75.Final-tuxcare.4",
      "type": "library",
      "group": "io.netty",
      "name": "netty-microbench",
      "version": "4.1.75.Final-tuxcare.4",
      "purl": "pkg:maven/io.netty/netty-microbench@4.1.75.Final-tuxcare.4"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:d07010fe-a9f3-583a-9a25-388b276cc727",
      "id": "CVE-2022-24823",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-24823 is fixed in version 4.1.75.Final-tuxcare.4 of io.netty:netty-microbench."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-microbench@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:20c24a76-3905-5178-9bfa-a67b4bbbc7c1",
      "id": "CVE-2022-41881",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-41881 is fixed in version 4.1.75.Final-tuxcare.4 of io.netty:netty-microbench."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-microbench@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8bf53aa3-1182-50d8-a378-c9a3ceb69599",
      "id": "CVE-2022-41915",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-41915 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-microbench."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-microbench@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:916c3997-b3c0-53f3-9ac8-2c62a501eb6e",
      "id": "CVE-2023-34462",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-34462 is fixed in version 4.1.75.Final-tuxcare.4 of io.netty:netty-microbench."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-microbench@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f8571360-03a4-5796-80b1-05519a99ac5e",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-44487 is fixed in version 4.1.75.Final-tuxcare.4 of io.netty:netty-microbench."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-microbench@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:daa79a60-bc8d-5b20-8214-a21222680f92",
      "id": "CVE-2023-4586",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2023-4586 is a false positive for io.netty:netty-microbench 4.1.75.Final-tuxcare.4."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-microbench@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5ee92c2d-c03c-5db7-a29c-0ed67abb6b7e",
      "id": "CVE-2024-29025",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-29025 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-microbench."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-microbench@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cd92df51-0f09-5e6e-b73e-29bd827ce64a",
      "id": "CVE-2024-47535",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-47535 is fixed in version 4.1.75.Final-tuxcare.4 of io.netty:netty-microbench."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-microbench@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:59980440-0b1f-55f8-95e1-d73c9431faa7",
      "id": "CVE-2025-24970",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-24970 is fixed in version 4.1.75.Final-tuxcare.4 of io.netty:netty-microbench."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-microbench@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7e51cb57-aa3a-5cda-999a-e3e8a82e6261",
      "id": "CVE-2025-25193",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-25193 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-microbench."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-microbench@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6dd680fe-68bf-5b97-8233-8674760f445a",
      "id": "CVE-2025-55163",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-55163 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-microbench."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-microbench@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cdb79161-5212-5f2f-b8f0-2ec92e3b7c27",
      "id": "CVE-2025-58056",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-58056 is fixed in version 4.1.75.Final-tuxcare.4 of io.netty:netty-microbench."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-microbench@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:137af392-a309-599f-a858-7099163d8eaa",
      "id": "CVE-2025-58057",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58057 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-microbench."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-microbench@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6c7244bc-2484-5591-9c26-91466bf08ac2",
      "id": "CVE-2025-59419",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-59419 is fixed in version 4.1.75.Final-tuxcare.4 of io.netty:netty-microbench."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-microbench@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:807fca36-e6fd-5730-8a8d-989416f55eb3",
      "id": "CVE-2025-67735",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-67735 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-microbench."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-microbench@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cf3fc335-1347-5fb8-be32-123b448d4a0f",
      "id": "CVE-2026-33870",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33870 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-microbench."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-microbench@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f3e3ddfa-b00f-5c26-b453-9d907e49e354",
      "id": "CVE-2026-33871",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33871 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-microbench."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-microbench@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2ac45637-2092-5545-a426-57aaeb697a11",
      "id": "CVE-2026-41417",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41417 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-microbench."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-microbench@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1f4db7d8-5603-544b-b7ba-f5b35ecfc3cd",
      "id": "CVE-2026-42577",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42577 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-microbench."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-microbench@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:41fb6577-1ac9-5825-a1d7-0242a1e9eb00",
      "id": "CVE-2026-42578",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42578 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-microbench."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-microbench@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5fa3245d-e345-5a5b-8e6e-76382c5fd4d8",
      "id": "CVE-2026-42579",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42579 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-microbench."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-microbench@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1d23205b-678b-5391-90e9-92a80cda3bec",
      "id": "CVE-2026-42580",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42580 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-microbench."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-microbench@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ea0950ea-285e-5743-9e36-cc2082be7490",
      "id": "CVE-2026-42581",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42581 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-microbench."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-microbench@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d3092d06-b36b-552a-a2ba-2f5f96517a2c",
      "id": "CVE-2026-42583",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42583 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-microbench."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-microbench@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c2fb4b18-523d-50af-bda6-a2a99b05d526",
      "id": "CVE-2026-42584",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42584 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-microbench."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-microbench@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f74f267e-f448-517c-8194-1c3219ceff7e",
      "id": "CVE-2026-42585",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42585 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-microbench."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-microbench@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a7dcb484-b480-5f79-84a9-c2022c176ecc",
      "id": "CVE-2026-42586",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42586 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-microbench."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-microbench@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7646967c-57b7-56c2-a9a7-a8807e0042c6",
      "id": "CVE-2026-42587",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42587 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-microbench."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-microbench@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f974c669-6d99-5e12-8548-6a712ea96397",
      "id": "CVE-2026-44248",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44248 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-microbench."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-microbench@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2ff1bedc-c8f5-5241-8604-73363f328055",
      "id": "CVE-2026-44249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44249 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-microbench."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-microbench@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:74541fdc-b65b-50bb-877b-803e6d26f9f9",
      "id": "CVE-2026-44250",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44250 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-microbench."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-microbench@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:736cf9d0-abbc-5f6d-96bd-6c7fa002af7a",
      "id": "CVE-2026-44890",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.75.Final-tuxcare.4 of io.netty:netty-microbench."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-microbench@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a6472082-8861-53ec-ae56-64ec81461b0b",
      "id": "CVE-2026-44891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44891 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-microbench."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-microbench@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:92728205-33ea-5867-8167-23be4751ee65",
      "id": "CVE-2026-44893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44893 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-microbench."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-microbench@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3f3ee05b-2e4e-5ada-8771-e37601df5f83",
      "id": "CVE-2026-45416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45416 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-microbench."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-microbench@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:613a7ce2-bfdf-5530-a7a0-405884c44a27",
      "id": "CVE-2026-45536",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45536 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-microbench."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-microbench@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f6cfb6b2-3b0e-53e1-aa96-f2b8431a403c",
      "id": "CVE-2026-45673",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45673 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-microbench."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-microbench@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e0ba24ec-b081-5dea-b4ac-8c3bd66669f9",
      "id": "CVE-2026-45674",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45674 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-microbench."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-microbench@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:205ab3d7-b231-57e7-840a-6e17a0c7c03f",
      "id": "CVE-2026-46340",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-46340 is fixed in version 4.1.75.Final-tuxcare.4 of io.netty:netty-microbench."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-microbench@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1a65f0b6-cfcd-5995-9308-f1b089cbc779",
      "id": "CVE-2026-47244",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47244 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-microbench."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-microbench@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b1c9d733-a7d2-51ac-8bc8-a97d5befeef9",
      "id": "CVE-2026-47691",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47691 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-microbench."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-microbench@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d211a809-fca1-57cb-bc87-e8f7473dcdf2",
      "id": "CVE-2026-48006",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48006 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-microbench."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-microbench@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:59ac770e-9c32-552b-8b43-dfd7fae82405",
      "id": "CVE-2026-48043",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-48043 does not affect version 4.1.75.Final-tuxcare.4 of io.netty:netty-microbench. already_fixed \u2014 The target repository (Netty 4.1.75.Final-tuxcare.1) already contains equivalent protection against CVE-2026-48043. While the upstream patch targets a newer architecture with a ChannelInboundHandlerAdapter tail handler (introduced in CVE-2025-58057 refactoring), the target's older architecture implements the same defensive pattern: a try-finally block ensuring ByteBuf.release() is called uncond..."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-microbench@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:34aefe62-3919-51c9-a8e2-b02f440db90a",
      "id": "CVE-2026-48059",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48059 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-microbench."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-microbench@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b8270316-7d38-5135-84fb-608c0c971ecd",
      "id": "CVE-2026-50010",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50010 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-microbench."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-microbench@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:88551c4b-6a37-56f6-91e9-cfb3f78845e6",
      "id": "CVE-2026-50011",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50011 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-microbench."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-microbench@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cab688d2-8d5f-51ac-93ea-21aeb4c29d59",
      "id": "CVE-2026-50020",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50020 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-microbench."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-microbench@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:04544108-bf02-5789-b44d-6bad148d62db",
      "id": "CVE-2026-50560",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.75.Final-tuxcare.4 of io.netty:netty-microbench."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-microbench@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3323dc42-99fe-5552-a38b-5af7cc0724b7",
      "id": "CVE-2026-55831",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55831 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-microbench."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-microbench@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e4cc646c-1e0e-5ac0-97f0-c969950912e5",
      "id": "CVE-2026-55833",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55833 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-microbench."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-microbench@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3d2d677e-13de-5fa2-959d-50f250838843",
      "id": "CVE-2026-55851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55851 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-microbench."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-microbench@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:99ad9f0e-1162-5a1f-b421-5e3e06fe78e5",
      "id": "CVE-2026-56745",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56745 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-microbench."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-microbench@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:64acfa76-adcf-5895-968a-29fa330ffba7",
      "id": "CVE-2026-56746",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56746 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-microbench."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-microbench@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5f925b1d-5fd2-5616-85f2-18fca2821cee",
      "id": "CVE-2026-56817",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56817 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-microbench."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-microbench@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:04eaa071-2262-5c50-9527-8c6ebeae7c82",
      "id": "CVE-2026-56818",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-56818 does not affect version 4.1.75.Final-tuxcare.4 of io.netty:netty-microbench. not_affected \u2014 The target version 4.1.75.Final (released March 2022) predates the introduction of the vulnerable feature by over 4 years. CVE-2026-56818 describes incomplete cleanup when the `maxElements` limit is exceeded in RedisArrayAggregator. However, the `maxElements` configuration parameter and associated exception handling were introduced in June 2026 (commits e51c64c964 and 728c98b8ec), neither of wh..."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-microbench@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ef277151-dfad-573a-9e1e-32ede291eb1e",
      "id": "CVE-2026-56819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56819 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-microbench."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-microbench@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b9ca117e-2fd9-5234-897a-255d01664cd2",
      "id": "CVE-2026-59898",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59898 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-microbench."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-microbench@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a3681ae1-5268-5ba5-aae5-e8e433f96bda",
      "id": "CVE-2026-59899",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59899 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-microbench."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-microbench@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7457b941-6352-547d-9331-6400b88dc778",
      "id": "CVE-2026-59900",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59900 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-microbench."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-microbench@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:991d0cf4-cef8-5d41-ae1d-6352bc93706d",
      "id": "CVE-2026-59901",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59901 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-microbench."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-microbench@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5e6476ce-6b21-5843-a944-49ed6b54dfce",
      "id": "CVE-2026-59919",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59919 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-microbench."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-microbench@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f6613aca-11b6-5a90-bdba-4b9c0e04e106",
      "id": "CVE-2026-59920",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59920 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-microbench."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-microbench@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a49db654-85af-5db6-9241-895211fb9f3f",
      "id": "CVE-2026-59921",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59921 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-microbench."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-microbench@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f05ad010-f8c6-5380-96f1-5a4d925648a5",
      "id": "CVE-2026-73507",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-73507 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-microbench."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-microbench@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:acc76f99-cbb7-5e5b-9019-626b29ff13ab",
      "id": "CVE-2026-73508",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-73508 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-microbench."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-microbench@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d00409b1-3e0f-5997-95e5-3cb288ccd4e8",
      "id": "GHSA-mfg7-5gfp-c4w3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-microbench."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-microbench@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f2bb6e96-3902-5324-a32d-fbfff01b95c5",
      "id": "GHSA-v74w-7mr3-4qg3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-microbench."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-microbench@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5310a45e-a38a-52fd-9372-618a56f1d25e",
      "id": "GHSA-xpw8-rcwv-8f8p",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-xpw8-rcwv-8f8p is fixed in version 4.1.75.Final-tuxcare.4 of io.netty:netty-microbench."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-microbench@4.1.75.Final-tuxcare.4"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.netty/netty-microbench@4.1.75.Final-tuxcare.4"
    }
  ]
}