{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:236b0775-6406-5c9c-89f2-a49fb9c40581",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/io.netty/netty-resolver@4.1.73.Final-tuxcare.3",
      "type": "library",
      "group": "io.netty",
      "name": "netty-resolver",
      "version": "4.1.73.Final-tuxcare.3",
      "purl": "pkg:maven/io.netty/netty-resolver@4.1.73.Final-tuxcare.3"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:6267112c-1889-52a8-bc1c-b4feb21ba8e0",
      "id": "CVE-2022-24823",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-24823 is fixed in version 4.1.73.Final-tuxcare.3 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e54f893c-c922-5f10-a0f2-d09f3f927cfb",
      "id": "CVE-2022-41881",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-41881 is fixed in version 4.1.73.Final-tuxcare.3 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b05ecc94-b7e7-53b6-80c7-09e2c48f4cb1",
      "id": "CVE-2022-41915",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-41915 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7289de5b-024e-5e50-a8b3-6e58043ac2a0",
      "id": "CVE-2023-34462",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-34462 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:89081787-6880-5057-aeb8-06602a7f65b8",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-44487 is fixed in version 4.1.73.Final-tuxcare.3 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e1ac0e2b-f932-5687-a2e1-60263851e8d0",
      "id": "CVE-2023-4586",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2023-4586 is a false positive for io.netty:netty-resolver 4.1.73.Final-tuxcare.3."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1da19a8e-4032-583f-b1f1-e1583b5289fe",
      "id": "CVE-2024-29025",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-29025 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:607d2eec-fcca-528e-9f50-ad0c6cd2f3d8",
      "id": "CVE-2024-47535",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-47535 is fixed in version 4.1.73.Final-tuxcare.3 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1ebadbf5-dbd8-53f2-874b-4d3bd2460f99",
      "id": "CVE-2025-24970",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-24970 is fixed in version 4.1.73.Final-tuxcare.3 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:55777241-3864-546e-9e56-dacff5025e0b",
      "id": "CVE-2025-25193",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-25193 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e7f93533-5d2b-52fc-9082-2309aa82e7bd",
      "id": "CVE-2025-55163",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-55163 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0a6c7ada-9262-50e8-a172-c383573891fa",
      "id": "CVE-2025-58056",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58056 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e8d867fa-bddc-5607-b98b-252c01a22d20",
      "id": "CVE-2025-58057",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58057 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b6a04059-fde7-5b80-811f-4c8d3d3bc1eb",
      "id": "CVE-2025-59419",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-59419 is fixed in version 4.1.73.Final-tuxcare.3 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f1a4a467-5db7-5544-a6fc-a800ff1e1762",
      "id": "CVE-2025-67735",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-67735 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:199df195-4340-5068-b06f-d2f35bca750c",
      "id": "CVE-2026-33870",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33870 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2c0b3dcd-813f-5069-8d06-67fa20585591",
      "id": "CVE-2026-33871",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33871 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ce3c6ff3-3a38-5f52-8d59-0085ce86294f",
      "id": "CVE-2026-41417",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41417 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e926a983-22ea-59a3-8009-1524ba000d7c",
      "id": "CVE-2026-42577",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42577 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4b6fd9c1-7854-5dee-8a5e-d12e1834fac2",
      "id": "CVE-2026-42578",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42578 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d0d464d8-fc66-5bf3-b91f-ffd5dd725f65",
      "id": "CVE-2026-42579",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42579 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e48e8c09-e3d7-5f6d-a66b-83fa774b5e8a",
      "id": "CVE-2026-42580",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42580 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d35e03b3-5258-563d-88da-dabfc8dd4361",
      "id": "CVE-2026-42581",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42581 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7a822210-2544-5b9e-a22e-08b84c77f2d2",
      "id": "CVE-2026-42583",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42583 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:411ea04e-8bb5-5ace-810f-26f4a8ac0637",
      "id": "CVE-2026-42584",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42584 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3e513d28-2698-57be-a24f-ef0a9409707e",
      "id": "CVE-2026-42585",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42585 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ae8130cd-b1f1-5ac8-8cac-f9d230d794a1",
      "id": "CVE-2026-42586",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42586 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:61baf85e-6fcd-5555-b8d8-94a54c49d682",
      "id": "CVE-2026-42587",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42587 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:50dac338-ed52-5231-95cd-71909bf3269d",
      "id": "CVE-2026-44248",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44248 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9c20237b-5820-5c83-b64f-f90f54e9c6f7",
      "id": "CVE-2026-44249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44249 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7d55b44d-478e-56dc-ab68-c4bd56bbe43f",
      "id": "CVE-2026-44250",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44250 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cb94105f-75f8-525b-a1cd-c40d04a5985a",
      "id": "CVE-2026-44890",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.73.Final-tuxcare.3 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:86d19575-5620-5fa7-bb93-dd644761437b",
      "id": "CVE-2026-44891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44891 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:732b5917-514d-5c9f-86bf-2e5dfd18668b",
      "id": "CVE-2026-44893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44893 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:71273a15-d72b-587c-9c6f-aab8c796cbf6",
      "id": "CVE-2026-45416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45416 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c305ecc7-4b8e-547b-a6c3-c9d2b8dc561f",
      "id": "CVE-2026-45536",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45536 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ab01fb0b-0b37-56db-97e2-8128e07642ec",
      "id": "CVE-2026-45673",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45673 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:528eca28-a9d2-5f69-841f-c1783baa71b9",
      "id": "CVE-2026-45674",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45674 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c532f0fa-1dae-54f3-addf-45bcb9f9ebaa",
      "id": "CVE-2026-46340",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-46340 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d661225a-a220-580f-bdd3-a62045afdc49",
      "id": "CVE-2026-47244",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47244 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7b101eb7-d6c3-5150-9ae6-bca00e53137e",
      "id": "CVE-2026-47691",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47691 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1b15bd19-d6f6-53c9-8447-a192af6e8834",
      "id": "CVE-2026-48006",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48006 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f3dc7e5a-5db9-575c-a157-2ae4163ff179",
      "id": "CVE-2026-48043",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-48043 does not affect version 4.1.73.Final-tuxcare.3 of io.netty:netty-resolver. not_affected \u2014 Version 4.1.73 is not affected by CVE-2026-48043. The target uses a loop-based architecture with try-finally protection (introduced in 2016) that prevents the buffer leak described in the CVE. The vulnerable ChannelInboundHandlerAdapter pattern that the upstream patch fixes does not exist in this version."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4deb3d50-5843-5713-8213-4635e3ecb2bd",
      "id": "CVE-2026-48059",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48059 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bb9bf2af-5f8d-5eb8-b2d8-f6c44ee25539",
      "id": "CVE-2026-50010",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50010 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6b2e5831-3849-5d81-a2f7-7f74faf0f41d",
      "id": "CVE-2026-50011",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50011 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0e9ad68a-c268-52a2-809d-03558c8ec9ad",
      "id": "CVE-2026-50020",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50020 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f725b8b6-0b8d-50dd-9a55-c37405cead28",
      "id": "CVE-2026-50560",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.73.Final-tuxcare.3 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d734dd4e-54a1-5aea-9e89-3e0428a9d2d6",
      "id": "CVE-2026-55831",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55831 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1c7101cb-0b75-5e15-b92e-ef51f6cb6b14",
      "id": "CVE-2026-55833",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55833 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b0f10faa-9720-57b2-a526-d6d83ead5b45",
      "id": "CVE-2026-55851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55851 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c2cbf8f1-dbe6-5514-ad54-83c538ce4d54",
      "id": "CVE-2026-56745",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56745 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4c718366-13cd-582d-9225-ff275821c87a",
      "id": "CVE-2026-56746",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56746 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:709b1238-27d3-5275-a730-1f61c5034beb",
      "id": "CVE-2026-56817",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56817 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:09a3ac90-d1c3-5123-a536-a80f6853798c",
      "id": "CVE-2026-56818",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-56818 does not affect version 4.1.73.Final-tuxcare.3 of io.netty:netty-resolver. not_affected \u2014 The target version 4.1.73.Final-tuxcare.2 is NOT AFFECTED by CVE-2026-56818. The vulnerable code pattern (configurable `maxElements` limit check without cleanup, contrasting with `maxNestedArrayDepth` limit check WITH cleanup) was introduced in version 4.1.135.Final through commits e51c64c964 and 728c98b8ec (dated 2026-06-01/02). The target version predates these features entirely and does not ..."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0b84803c-749f-5381-9feb-a48ebcc27f7a",
      "id": "CVE-2026-56819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56819 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e1119313-ef56-54b3-a6a2-a6f72e637d68",
      "id": "CVE-2026-59898",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59898 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:acd1e3f1-ccb1-593f-bd17-392a4d7b5b15",
      "id": "CVE-2026-59899",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59899 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:148b173a-dc30-5a4d-a750-d0669adb407e",
      "id": "CVE-2026-59900",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59900 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0a88eed5-d2d4-54c4-a808-69192eaaa50b",
      "id": "CVE-2026-59901",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59901 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1c58e69a-2d91-5878-be0c-672a04159af5",
      "id": "CVE-2026-59919",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59919 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cb676959-11eb-5180-9acf-6214506cb1a0",
      "id": "CVE-2026-59920",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59920 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7a9deeb4-707c-54a5-b251-e2fed0ee6953",
      "id": "CVE-2026-59921",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59921 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cc838f6f-74e9-5e92-98ce-d2449f8667c4",
      "id": "GHSA-mfg7-5gfp-c4w3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8a4438ca-a8c9-52cf-b90f-47d328387186",
      "id": "GHSA-v74w-7mr3-4qg3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ffa4ab03-a006-5d92-9d52-3728a8bd8f66",
      "id": "GHSA-xpw8-rcwv-8f8p",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-xpw8-rcwv-8f8p affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.73.Final-tuxcare.3"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.netty/netty-resolver@4.1.73.Final-tuxcare.3"
    }
  ]
}