{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:631a5d0e-ccb7-5680-98d1-a79bdad0ca28",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.63.Final-tuxcare.4",
      "type": "library",
      "group": "io.netty",
      "name": "netty-resolver-dns",
      "version": "4.1.63.Final-tuxcare.4",
      "purl": "pkg:maven/io.netty/netty-resolver-dns@4.1.63.Final-tuxcare.4"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:b0c12836-d487-5c79-859c-4e6c2a0f4c62",
      "id": "CVE-2021-37136",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-37136 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0415dfad-24b5-53a5-bb94-cf5f808e13e8",
      "id": "CVE-2021-37137",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-37137 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c7f8f3fa-4d92-589c-80c1-dc7523962480",
      "id": "CVE-2021-43797",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-43797 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:90dae4c7-8cd6-59fe-9761-95a4dd636bb7",
      "id": "CVE-2022-24823",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-24823 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2d450e05-f133-5994-8fdd-5e85047b1fd8",
      "id": "CVE-2022-41881",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-41881 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:39353292-fff0-5402-8e16-8c45799c85fe",
      "id": "CVE-2022-41915",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-41915 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1fed44b4-f02e-5ca3-9341-b74994e8675c",
      "id": "CVE-2023-34462",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-34462 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a192f34c-adbd-58cd-a99d-c2d4fab322d7",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-44487 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b0ea20a1-c4ea-543f-8374-7c40ec9abd8b",
      "id": "CVE-2023-4586",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2023-4586 is a false positive for io.netty:netty-resolver-dns 4.1.63.Final-tuxcare.4."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bd37b59a-3211-52b8-8ccf-862ad93aa005",
      "id": "CVE-2024-29025",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-29025 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:904bd405-1e47-55f5-80e6-13b99942c687",
      "id": "CVE-2024-47535",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-47535 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a1e32614-cd42-568f-8204-56af69df5dda",
      "id": "CVE-2025-24970",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-24970 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0db29722-a96d-5d40-b332-2c9ad89e0114",
      "id": "CVE-2025-25193",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-25193 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8be6e734-5a7b-5d7c-8280-3a0bd7484f7a",
      "id": "CVE-2025-55163",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55163 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:53c66a86-baf0-5815-a41f-0af8e70698e4",
      "id": "CVE-2025-58056",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58056 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7110989f-7100-5f0b-9cdb-57e1e11f174c",
      "id": "CVE-2025-58057",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-58057 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:118c656f-68d6-577e-9707-1eed589dfbd5",
      "id": "CVE-2025-59419",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-59419 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8cd67793-0243-516f-bdff-08b2ba8ab0eb",
      "id": "CVE-2025-67735",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-67735 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0f031fa4-7dda-5066-b2d8-35a9ffd089ce",
      "id": "CVE-2026-33870",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33870 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c5c70358-dd05-56f3-b7ff-82cc116ac775",
      "id": "CVE-2026-33871",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33871 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bd20be9b-b362-53c3-90b7-1bd3d7cb1b20",
      "id": "CVE-2026-41417",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41417 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9d46049c-e501-597d-afa7-e6633d240a66",
      "id": "CVE-2026-42577",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42577 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:21ba9ddf-ff6e-5ac4-afd8-fc99421fdd92",
      "id": "CVE-2026-42578",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42578 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:25c023a1-bd1f-59e2-88cd-ad5c85a88c71",
      "id": "CVE-2026-42579",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42579 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b92a4f35-238b-5382-8eb1-ce1d72a937d1",
      "id": "CVE-2026-42580",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42580 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:13a18acd-6614-597b-9564-7d968be5d347",
      "id": "CVE-2026-42581",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42581 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b41c45a1-106e-55a2-ae02-c4148693f1ff",
      "id": "CVE-2026-42583",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42583 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:03388019-8989-569e-ad4a-4a489815abd0",
      "id": "CVE-2026-42584",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42584 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2507db46-84a1-5164-8c62-c437086f0d38",
      "id": "CVE-2026-42585",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42585 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1633b6a7-1f5e-51f7-b596-e5799a0a3fdf",
      "id": "CVE-2026-42586",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42586 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0de02358-17d5-5a61-9c54-5f1429a70ae0",
      "id": "CVE-2026-42587",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42587 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b4d90d95-68b5-5703-bd31-f75239e9fc3c",
      "id": "CVE-2026-44248",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44248 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b2f25032-4796-5f1c-9d1d-b5c24c0b3bec",
      "id": "CVE-2026-44249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44249 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4e653fdd-0417-542a-8be8-38a27337706f",
      "id": "CVE-2026-44250",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44250 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8e47fab2-5416-5ebf-a7d8-ecc14b9992dc",
      "id": "CVE-2026-44890",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:53427c04-9328-5d59-a3c9-c7b70e021869",
      "id": "CVE-2026-44891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44891 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b1c92519-c679-5344-aa6f-ff47a13c7f67",
      "id": "CVE-2026-44893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44893 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d058893b-adf4-5798-8e4a-2c433a68944f",
      "id": "CVE-2026-45416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45416 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2886e26f-9809-5602-b847-d1d4aade13bc",
      "id": "CVE-2026-45536",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45536 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c5943426-6f2c-5978-8785-bfe21f30bc3b",
      "id": "CVE-2026-45673",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45673 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0dd64fb9-00f4-5f00-9e7d-6aed66e82e3d",
      "id": "CVE-2026-45674",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45674 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:43873ef1-7829-55f0-993e-02065e10ceb9",
      "id": "CVE-2026-46340",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-46340 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7e900a30-5fd0-559e-a8ed-5fb92d614884",
      "id": "CVE-2026-47244",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47244 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:677740ee-1ce6-5406-9472-16d7af296aba",
      "id": "CVE-2026-47691",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47691 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bf1018e4-d56b-54f7-887a-2e3b991c9f1d",
      "id": "CVE-2026-48006",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48006 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7b8b3b64-8723-55a1-882e-002b45a9c100",
      "id": "CVE-2026-48043",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-48043 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cfb42a88-75bc-5eb6-b5ed-512b250c8bce",
      "id": "CVE-2026-48059",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48059 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c4b77a93-2e3b-56ce-afb0-985d2f3133eb",
      "id": "CVE-2026-50010",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50010 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:51c97614-11f3-5919-8432-21d090fee890",
      "id": "CVE-2026-50011",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50011 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:85d92633-df13-5b25-bf38-e471ecdf2543",
      "id": "CVE-2026-50020",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50020 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9775e302-e660-5352-b96d-797c9c0a92d0",
      "id": "CVE-2026-50560",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ba166315-ce0f-5c56-8701-283b71afacc5",
      "id": "CVE-2026-55831",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55831 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:df39ddd8-56d8-542b-ac5c-edbffcebaa47",
      "id": "CVE-2026-55833",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55833 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:94b1ef00-027b-5dd2-af2d-daee0b29687b",
      "id": "CVE-2026-55851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55851 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d53a05bc-bc06-5f94-8b4b-190ac89ea18b",
      "id": "CVE-2026-56745",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56745 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2b580dfe-529d-52b1-bf78-180aa5437917",
      "id": "CVE-2026-56746",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56746 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:99b26ff1-440d-54d6-9a19-49572e751be8",
      "id": "CVE-2026-56817",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-56817 does not affect version 4.1.63.Final-tuxcare.4 of io.netty:netty-resolver-dns. not_affected \u2014 The Netty codec-xml module contains XmlDecoder, which instantiates an Aalto XML parser without security configuration (line 38: new InputFactoryImpl() with no XXE protection). However, this is a library component that Netty itself does not use in its own production code. The vulnerability only manifests when downstream applications explicitly add XmlDecoder to their Netty channel pipelines. Per..."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:00510f77-5c87-5cd5-866e-f74e975a39f2",
      "id": "CVE-2026-56818",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56818 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f9be96e4-3c0e-5e4e-9137-b1ac1358ff59",
      "id": "CVE-2026-56819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56819 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5598eb7a-7212-58e2-8cb1-be90734b9a72",
      "id": "CVE-2026-59898",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59898 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7af052cc-4455-5a8b-82f0-39d558ae996d",
      "id": "CVE-2026-59899",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59899 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fb4f8ae2-a883-5817-8f69-5649b29cb716",
      "id": "CVE-2026-59900",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59900 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:eb6bfe04-8879-57b4-8a07-eec2875edec3",
      "id": "CVE-2026-59901",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59901 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:aa57f65e-bfe0-56dd-b150-c4e83a88e4e4",
      "id": "CVE-2026-59919",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59919 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dcbd680e-f4de-5114-8535-5599cd1af80e",
      "id": "CVE-2026-59920",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59920 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c97d4272-02ea-5b63-ae2a-ded549322d90",
      "id": "CVE-2026-59921",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59921 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b65e218b-ad1f-5fd2-8abe-b31d90af5b7d",
      "id": "CVE-2026-73507",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-73507 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a542aa28-0721-5f3d-9991-d22e0df27a97",
      "id": "CVE-2026-73508",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-73508 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ba253b55-65d1-5b06-9c37-45e371f172d3",
      "id": "GHSA-mfg7-5gfp-c4w3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:044e6c75-f82a-5846-9d85-571172fdf3a7",
      "id": "GHSA-v74w-7mr3-4qg3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3896fb9c-87a0-5393-b6cb-c780dcc07bce",
      "id": "GHSA-xpw8-rcwv-8f8p",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-xpw8-rcwv-8f8p affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.63.Final-tuxcare.4"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.63.Final-tuxcare.4"
    }
  ]
}