{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:91594fc7-2c14-5b17-b01b-84852c6b2681",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.75.Final-tuxcare.4",
      "type": "library",
      "group": "io.netty",
      "name": "netty-resolver-dns",
      "version": "4.1.75.Final-tuxcare.4",
      "purl": "pkg:maven/io.netty/netty-resolver-dns@4.1.75.Final-tuxcare.4"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:9321e856-dfb4-5894-96f6-966261e3f1d9",
      "id": "CVE-2022-24823",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-24823 is fixed in version 4.1.75.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d6487ce3-799b-5103-823a-ef51968e5ed8",
      "id": "CVE-2022-41881",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-41881 is fixed in version 4.1.75.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:56db8a58-995f-5316-90bf-04b9b2fead80",
      "id": "CVE-2022-41915",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-41915 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4033540d-547e-56e7-b191-3ec73ec5e6d1",
      "id": "CVE-2023-34462",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-34462 is fixed in version 4.1.75.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:27807c06-a7e7-546f-87e6-e7c3c1bdb6ce",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-44487 is fixed in version 4.1.75.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c7f87c4e-30c6-5c67-8ba1-e8c75c145c01",
      "id": "CVE-2023-4586",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2023-4586 is a false positive for io.netty:netty-resolver-dns 4.1.75.Final-tuxcare.4."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4fe68203-fc5a-5e8a-9f3c-ecad7e35ece3",
      "id": "CVE-2024-29025",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-29025 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:439bec87-65ea-56bd-8f4c-70f2029acceb",
      "id": "CVE-2024-47535",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-47535 is fixed in version 4.1.75.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:33fe67b7-24be-538c-ad7f-f98ec28437e0",
      "id": "CVE-2025-24970",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-24970 is fixed in version 4.1.75.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:718d2e0f-9281-58e7-9a67-4e47872b49f4",
      "id": "CVE-2025-25193",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-25193 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a65db525-646e-5be5-afc9-e7ec9a37b3e1",
      "id": "CVE-2025-55163",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-55163 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:746d5bfd-c6fa-5e96-966f-6caacb84089b",
      "id": "CVE-2025-58056",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-58056 is fixed in version 4.1.75.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c5d1d598-2a60-562f-a19a-9d992e900573",
      "id": "CVE-2025-58057",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58057 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9c859e43-25fb-5d98-a721-2fc43c10c111",
      "id": "CVE-2025-59419",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-59419 is fixed in version 4.1.75.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0b54a8ba-5053-51f2-a9f9-c97300843b04",
      "id": "CVE-2025-67735",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-67735 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:87b14249-4798-5f25-97cc-33b687c219b7",
      "id": "CVE-2026-33870",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33870 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3c42551f-0eba-5d37-8f2b-c654fedeafd0",
      "id": "CVE-2026-33871",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33871 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:aa75979e-b323-5dd9-b5aa-9f4d2fd6d7cf",
      "id": "CVE-2026-41417",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41417 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b45b0f57-a856-586e-b3b1-bba93a5484b0",
      "id": "CVE-2026-42577",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42577 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0e65b6b7-ec69-5419-b02e-1035dfb3f37d",
      "id": "CVE-2026-42578",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42578 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c892af64-335b-52d7-a2c7-17adc8e7d67e",
      "id": "CVE-2026-42579",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42579 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:353a810f-45d0-5d63-8c74-5fb3a4e1cb1e",
      "id": "CVE-2026-42580",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42580 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c1a918a0-671f-5a18-86c0-533ea944d173",
      "id": "CVE-2026-42581",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42581 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:14d50640-6954-5cc3-8fa9-c7495ce67a8e",
      "id": "CVE-2026-42583",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42583 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:07007111-b005-5bf6-a73e-1c399393523f",
      "id": "CVE-2026-42584",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42584 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:42cfa3d1-8f64-5593-b612-101717c33ad5",
      "id": "CVE-2026-42585",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42585 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e7598762-8a5d-5509-80cf-90d6d2e68bf9",
      "id": "CVE-2026-42586",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42586 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:58ea6c52-5399-5421-af36-41fb55860feb",
      "id": "CVE-2026-42587",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42587 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ef0cb1f8-3e61-5f51-b15e-e14462968f24",
      "id": "CVE-2026-44248",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44248 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:42dcc0b0-5118-53ef-a003-799e092bae63",
      "id": "CVE-2026-44249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44249 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4941778a-84ea-5efc-aaff-24153a689d21",
      "id": "CVE-2026-44250",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44250 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:757f2298-d0de-50e6-bf0a-4d17ae0bd596",
      "id": "CVE-2026-44890",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.75.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:467c1fe3-d729-5dbe-a8c1-f648d0a89e7f",
      "id": "CVE-2026-44891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44891 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e5dfa6dd-5780-5b2c-9199-1854b5d1c9f1",
      "id": "CVE-2026-44893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44893 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2698fc4a-f928-5a09-9ea7-7bc04d4b69b2",
      "id": "CVE-2026-45416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45416 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:462d1e3a-b5d6-5cc0-a940-3f092ad12e44",
      "id": "CVE-2026-45536",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45536 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c51bcbb8-2497-5031-877f-8f3e96d560dc",
      "id": "CVE-2026-45673",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45673 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2b25a66c-6578-5f58-adf8-b0fd334fabe9",
      "id": "CVE-2026-45674",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45674 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:895f6162-d229-5d1a-9caa-9d0bdc53771c",
      "id": "CVE-2026-46340",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-46340 is fixed in version 4.1.75.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a2a07597-8069-56c6-a492-8f086bc98848",
      "id": "CVE-2026-47244",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47244 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:38d725f9-a777-5eb2-a6e2-aff6c5d48048",
      "id": "CVE-2026-47691",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47691 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0efa1776-e54f-57e6-9ac7-ba9b19250bdd",
      "id": "CVE-2026-48006",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48006 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2d3261a2-59f2-5cf1-8103-dc9a4d5bf02c",
      "id": "CVE-2026-48043",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-48043 does not affect version 4.1.75.Final-tuxcare.4 of io.netty:netty-resolver-dns. already_fixed \u2014 The target repository (Netty 4.1.75.Final-tuxcare.1) already contains equivalent protection against CVE-2026-48043. While the upstream patch targets a newer architecture with a ChannelInboundHandlerAdapter tail handler (introduced in CVE-2025-58057 refactoring), the target's older architecture implements the same defensive pattern: a try-finally block ensuring ByteBuf.release() is called uncond..."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:38f406e4-4ce1-571c-a24c-f683df32cb7f",
      "id": "CVE-2026-48059",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48059 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3264f263-629d-5a59-83f6-f9e8c9dd3d11",
      "id": "CVE-2026-50010",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50010 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:674285e2-64d4-50a8-8de2-d4d70af911fa",
      "id": "CVE-2026-50011",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50011 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f7500411-d35d-5839-a711-4b8892aec7ff",
      "id": "CVE-2026-50020",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50020 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:44a20d32-3255-5752-bd58-c5cb3fc08ab4",
      "id": "CVE-2026-50560",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.75.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4c89736c-2779-5146-9a36-b09e895e3a9b",
      "id": "CVE-2026-55831",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55831 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5a21a047-82e9-57ee-b9e3-b226bc234fcb",
      "id": "CVE-2026-55833",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55833 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2e5ad7d4-1d28-5a8c-82cb-bb5116fa5777",
      "id": "CVE-2026-55851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55851 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ef4352a3-e688-5bdc-9f78-c6ffa0ff4124",
      "id": "CVE-2026-56745",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56745 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:170c27f7-4878-5d2e-972e-dba218390647",
      "id": "CVE-2026-56746",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56746 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5fe92df6-f280-5e57-827b-9a06567a2372",
      "id": "CVE-2026-56817",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56817 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:58637bd3-5d9f-5c03-a487-4f2595371b31",
      "id": "CVE-2026-56818",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-56818 does not affect version 4.1.75.Final-tuxcare.4 of io.netty:netty-resolver-dns. not_affected \u2014 The target version 4.1.75.Final (released March 2022) predates the introduction of the vulnerable feature by over 4 years. CVE-2026-56818 describes incomplete cleanup when the `maxElements` limit is exceeded in RedisArrayAggregator. However, the `maxElements` configuration parameter and associated exception handling were introduced in June 2026 (commits e51c64c964 and 728c98b8ec), neither of wh..."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e44c3d0d-93d3-5f60-bc8a-7f3d255c4c4b",
      "id": "CVE-2026-56819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56819 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:60d28494-4b4f-5037-bcfc-33bbd1bb12b3",
      "id": "CVE-2026-59898",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59898 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ad47299e-d7a4-55aa-b6f6-6689b4ace189",
      "id": "CVE-2026-59899",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59899 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:37bbb4cb-20e3-5335-ad18-68b1786f1ac2",
      "id": "CVE-2026-59900",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59900 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9fc241a8-5375-52d6-90de-bbb1853eecbd",
      "id": "CVE-2026-59901",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59901 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:014cce41-7172-5371-8b1b-f7914934ec4a",
      "id": "CVE-2026-59919",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59919 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:07b091f6-3c66-5357-b3fd-d865dd245767",
      "id": "CVE-2026-59920",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59920 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:75385e6f-6c2d-5a99-b069-c1fc37656e8d",
      "id": "CVE-2026-59921",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59921 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c9684f91-6245-54ff-a1b9-82759b3a17e2",
      "id": "CVE-2026-73507",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-73507 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1d226b8a-fb41-5a8b-b2ad-ffdf24b7d4ee",
      "id": "CVE-2026-73508",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-73508 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:156018b2-3df0-5673-9a9b-227aa947447b",
      "id": "GHSA-mfg7-5gfp-c4w3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4e5e25de-9f4a-5cbd-bc68-33349a09274e",
      "id": "GHSA-v74w-7mr3-4qg3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f5340d48-2865-5313-bb81-0c545262e089",
      "id": "GHSA-xpw8-rcwv-8f8p",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-xpw8-rcwv-8f8p is fixed in version 4.1.75.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.75.Final-tuxcare.4"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.75.Final-tuxcare.4"
    }
  ]
}