{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:cc15bfa9-3b2e-5d22-902b-27c0f0c0dd97",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.73.Final-tuxcare.3",
      "type": "library",
      "group": "io.netty",
      "name": "netty-resolver-dns",
      "version": "4.1.73.Final-tuxcare.3",
      "purl": "pkg:maven/io.netty/netty-resolver-dns@4.1.73.Final-tuxcare.3"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:15cbfbdb-a7da-5ecf-aca5-dce4ad05cb26",
      "id": "CVE-2022-24823",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-24823 is fixed in version 4.1.73.Final-tuxcare.3 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:74d2d0ac-7005-5871-86a9-24b3ff8c99fd",
      "id": "CVE-2022-41881",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-41881 is fixed in version 4.1.73.Final-tuxcare.3 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f5b3c581-cf9f-5938-a053-6b120a89cd5e",
      "id": "CVE-2022-41915",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-41915 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0580e6c6-50c3-5d40-b91d-f487de243a11",
      "id": "CVE-2023-34462",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-34462 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a9daea19-173e-5e53-b1b3-65e3ab8f937d",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-44487 is fixed in version 4.1.73.Final-tuxcare.3 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:efcdb15d-4eed-5fde-aa27-36bbf08621a2",
      "id": "CVE-2023-4586",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2023-4586 is a false positive for io.netty:netty-resolver-dns 4.1.73.Final-tuxcare.3."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:24908cda-0b76-586e-a881-0443f62b2b88",
      "id": "CVE-2024-29025",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-29025 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c30b7f8d-21af-508a-b86a-a4e67caa172d",
      "id": "CVE-2024-47535",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-47535 is fixed in version 4.1.73.Final-tuxcare.3 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8cedaff4-206d-501e-bf5a-a666ca64d572",
      "id": "CVE-2025-24970",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-24970 is fixed in version 4.1.73.Final-tuxcare.3 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4665a003-b7ec-5a9c-b5b3-18458f1489b5",
      "id": "CVE-2025-25193",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-25193 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e8bdbed2-3cd9-5453-94ea-073c8631e66f",
      "id": "CVE-2025-55163",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-55163 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:aa762cf6-27a0-530d-bfee-44f85f095ccf",
      "id": "CVE-2025-58056",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58056 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cd23ead7-fe37-50bc-b3c0-528c7b3e2022",
      "id": "CVE-2025-58057",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58057 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1fd509ec-e9bc-5de5-a64e-827ed851ddf6",
      "id": "CVE-2025-59419",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-59419 is fixed in version 4.1.73.Final-tuxcare.3 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5a4ebaf1-347c-56d3-9d58-576c1971494d",
      "id": "CVE-2025-67735",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-67735 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ad52c846-ae40-50a2-a477-e8d96f385c4a",
      "id": "CVE-2026-33870",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33870 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ae1a8271-2bcb-5c3d-9623-643813d47c96",
      "id": "CVE-2026-33871",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33871 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:011d7372-9d92-546c-85ca-581798ff0c77",
      "id": "CVE-2026-41417",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41417 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:903f320c-b903-5ebe-b0fa-eaef6e882b0e",
      "id": "CVE-2026-42577",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42577 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8dd1082d-af7a-5e41-98ce-e2c5f1014d37",
      "id": "CVE-2026-42578",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42578 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2206a2c0-b9a8-5e32-8a65-43defa8c154f",
      "id": "CVE-2026-42579",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42579 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2e443a9b-e938-5e40-a3e7-716a1d6b6b5d",
      "id": "CVE-2026-42580",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42580 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5967ae1d-7cb7-554a-bdf7-e3d449f2b515",
      "id": "CVE-2026-42581",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42581 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:035658f7-9410-563e-9ba0-c82b1983c9ca",
      "id": "CVE-2026-42583",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42583 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:088b7ae2-fc6b-5fe3-aafd-c1af5dc76efb",
      "id": "CVE-2026-42584",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42584 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:10c4745f-22e9-5e44-a9af-127d94ae36b6",
      "id": "CVE-2026-42585",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42585 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c9cab8e2-ffea-5582-8f43-3e6701f8063d",
      "id": "CVE-2026-42586",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42586 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f4f04a3b-6d0f-5b54-b79d-d2bffa775d84",
      "id": "CVE-2026-42587",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42587 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:213ebaf4-4594-50df-a64f-e6a721392091",
      "id": "CVE-2026-44248",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44248 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:674299b3-30c3-5413-a50b-0977e5627d47",
      "id": "CVE-2026-44249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44249 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8e8a02de-1a81-5c9b-8718-3a93d7f0d6a3",
      "id": "CVE-2026-44250",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44250 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b085d9cb-61d6-522e-b849-e4330640919d",
      "id": "CVE-2026-44890",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.73.Final-tuxcare.3 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d0851a2a-c572-5e47-9bac-57933b8699a2",
      "id": "CVE-2026-44891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44891 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6876f688-aed9-50c7-b461-6785d8f0874e",
      "id": "CVE-2026-44893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44893 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fa86f455-8f33-5c9b-a797-6dbed811d608",
      "id": "CVE-2026-45416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45416 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:483f4c6a-bbd0-57b9-a014-bf36ddef92ef",
      "id": "CVE-2026-45536",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45536 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4b9baaf2-c1a1-538d-a3a1-5987d50f73cc",
      "id": "CVE-2026-45673",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45673 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:47bcf43d-0955-521f-b8ec-e1d08defd64f",
      "id": "CVE-2026-45674",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45674 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:937b6965-dd07-5ee8-9b12-c0fd12000fec",
      "id": "CVE-2026-46340",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-46340 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6de08de1-bf9e-54f4-b990-a0f883dfe356",
      "id": "CVE-2026-47244",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47244 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a080a357-6e24-5e16-a534-711eb981be43",
      "id": "CVE-2026-47691",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47691 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:32fdf063-04d6-5d30-9824-eb52f47605ea",
      "id": "CVE-2026-48006",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48006 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:52e31e5f-452b-5637-9a08-c128939059a4",
      "id": "CVE-2026-48043",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-48043 does not affect version 4.1.73.Final-tuxcare.3 of io.netty:netty-resolver-dns. not_affected \u2014 Version 4.1.73 is not affected by CVE-2026-48043. The target uses a loop-based architecture with try-finally protection (introduced in 2016) that prevents the buffer leak described in the CVE. The vulnerable ChannelInboundHandlerAdapter pattern that the upstream patch fixes does not exist in this version."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2ce5ab97-df47-5d46-9d22-82c2904bd114",
      "id": "CVE-2026-48059",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48059 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:201d1ebc-21cb-5ffa-9164-e01845543c7c",
      "id": "CVE-2026-50010",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50010 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9724cd76-be51-5a9b-a99d-1f5ca40ab01a",
      "id": "CVE-2026-50011",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50011 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:96a08ca6-c6f0-5c80-99ae-a84359892852",
      "id": "CVE-2026-50020",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50020 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:18e1bc67-9aca-5793-b8ee-53067b33c960",
      "id": "CVE-2026-50560",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.73.Final-tuxcare.3 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f05c278e-ba96-5f02-a255-23ba7898663b",
      "id": "CVE-2026-55831",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55831 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f61db893-4934-5876-bc8e-bf838d377040",
      "id": "CVE-2026-55833",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55833 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7bd97875-8945-536c-907b-df981f1ee39f",
      "id": "CVE-2026-55851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55851 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4f8b5977-518e-5083-b69c-0650836768c0",
      "id": "CVE-2026-56745",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56745 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7311b8ea-e521-5096-88b7-c66b33169ff7",
      "id": "CVE-2026-56746",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56746 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:80f1d2cb-422b-54ab-9027-ce83d87ab345",
      "id": "CVE-2026-56817",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56817 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b19feaa2-071e-5d5a-ad76-8ff82cd312af",
      "id": "CVE-2026-56818",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-56818 does not affect version 4.1.73.Final-tuxcare.3 of io.netty:netty-resolver-dns. not_affected \u2014 The target version 4.1.73.Final-tuxcare.2 is NOT AFFECTED by CVE-2026-56818. The vulnerable code pattern (configurable `maxElements` limit check without cleanup, contrasting with `maxNestedArrayDepth` limit check WITH cleanup) was introduced in version 4.1.135.Final through commits e51c64c964 and 728c98b8ec (dated 2026-06-01/02). The target version predates these features entirely and does not ..."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:47f58d8f-8eca-5f7b-944e-1427d14657e7",
      "id": "CVE-2026-56819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56819 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3083d8f7-56e8-5f67-868a-b57114f769cd",
      "id": "CVE-2026-59898",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59898 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:791add59-aa21-5538-b5dd-26e947f63e04",
      "id": "CVE-2026-59899",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59899 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:08524a10-0c39-5787-8da0-57236031a2c3",
      "id": "CVE-2026-59900",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59900 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:44f04987-fea5-5af5-81ed-73f3cbe4ed31",
      "id": "CVE-2026-59901",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59901 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c528bf23-c072-5520-8fd8-ae09a6225889",
      "id": "CVE-2026-59919",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59919 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5fb2943d-7df6-5f09-8174-50841a6e6b71",
      "id": "CVE-2026-59920",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59920 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a3b719f4-32ef-5044-8cc8-145e93523fbc",
      "id": "CVE-2026-59921",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59921 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fe79cf93-dbf1-53af-b44d-4241ad4d3d89",
      "id": "CVE-2026-73507",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-73507 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:12dbff50-b32e-5557-af3c-2c31abf30b8b",
      "id": "CVE-2026-73508",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-73508 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:49f9ecae-7962-5e8f-9933-86dab168b1e2",
      "id": "GHSA-mfg7-5gfp-c4w3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6950ec32-e29d-5563-bb00-e20a4ed96927",
      "id": "GHSA-v74w-7mr3-4qg3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1536e0a7-95d3-554b-8dfe-e49aee58cec3",
      "id": "GHSA-xpw8-rcwv-8f8p",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-xpw8-rcwv-8f8p affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.73.Final-tuxcare.3"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.73.Final-tuxcare.3"
    }
  ]
}