{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:402b3ac0-1503-5b3a-8e3c-3f6a18b14c70",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/io.netty/netty-resolver@4.1.75.Final-tuxcare.4",
      "type": "library",
      "group": "io.netty",
      "name": "netty-resolver",
      "version": "4.1.75.Final-tuxcare.4",
      "purl": "pkg:maven/io.netty/netty-resolver@4.1.75.Final-tuxcare.4"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:e13e43ec-7dd7-5719-aef7-15d8eca2db8f",
      "id": "CVE-2022-24823",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-24823 is fixed in version 4.1.75.Final-tuxcare.4 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:67eec446-ec81-52cb-b6d0-7a5134df78df",
      "id": "CVE-2022-41881",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-41881 is fixed in version 4.1.75.Final-tuxcare.4 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:95cda7bf-5745-5de9-8f2a-5cae20e905f8",
      "id": "CVE-2022-41915",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-41915 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e488ea01-d6c8-5336-86b1-ecf75b789d9c",
      "id": "CVE-2023-34462",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-34462 is fixed in version 4.1.75.Final-tuxcare.4 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d13d8c6d-c8b0-5aad-80dc-16642469e81b",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-44487 is fixed in version 4.1.75.Final-tuxcare.4 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d15aa0dc-d11b-5138-8657-0d2ed39012f6",
      "id": "CVE-2023-4586",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2023-4586 is a false positive for io.netty:netty-resolver 4.1.75.Final-tuxcare.4."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:78db76be-c42b-5945-a1e5-f38ffbc8dcbf",
      "id": "CVE-2024-29025",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-29025 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:824fa43d-8985-5f64-b192-e573e7f91dd3",
      "id": "CVE-2024-47535",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-47535 is fixed in version 4.1.75.Final-tuxcare.4 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8ba1e549-399c-55ef-96a8-148ca6030955",
      "id": "CVE-2025-24970",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-24970 is fixed in version 4.1.75.Final-tuxcare.4 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0d937040-7ac6-5beb-ba6a-932597b14357",
      "id": "CVE-2025-25193",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-25193 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4311423a-695d-5a1a-a998-d2ec19187a2d",
      "id": "CVE-2025-55163",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-55163 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9c353663-c69a-58b5-8f84-4e4a3b82b3d8",
      "id": "CVE-2025-58056",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-58056 is fixed in version 4.1.75.Final-tuxcare.4 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a67a5b9f-9fa8-55ce-b3af-2dcb2df2046d",
      "id": "CVE-2025-58057",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58057 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d5bdc30e-5f0b-5700-83c5-36a8af64cd7f",
      "id": "CVE-2025-59419",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-59419 is fixed in version 4.1.75.Final-tuxcare.4 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5de47b16-8073-5894-91d6-4eaeca126b43",
      "id": "CVE-2025-67735",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-67735 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:165309fd-3b6a-5c86-aa7a-d52f956dd5ec",
      "id": "CVE-2026-33870",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33870 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:32502e76-bbf8-5243-85da-a3dc8fa7f627",
      "id": "CVE-2026-33871",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33871 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f0916203-105a-55cb-8aa3-2053d9fd3823",
      "id": "CVE-2026-41417",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41417 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d8d405d5-23d4-5ce5-901c-87074464354e",
      "id": "CVE-2026-42577",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42577 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c565c454-5a48-5ecc-9c29-6348710c6d8d",
      "id": "CVE-2026-42578",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42578 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1b63abc7-d073-5d2e-9455-702eb338509b",
      "id": "CVE-2026-42579",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42579 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:78032316-93d2-5fc5-9682-7ab8196cabe6",
      "id": "CVE-2026-42580",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42580 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4b80fbb5-e251-5919-932e-c82b71e2aade",
      "id": "CVE-2026-42581",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42581 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fa44bf94-0380-5f17-bd0b-fede7fb9ae54",
      "id": "CVE-2026-42583",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42583 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fa61ad72-0fb9-5bd9-ba0a-eb36c3ab45a3",
      "id": "CVE-2026-42584",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42584 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ee9e4347-068c-5cad-a214-29e8c99f706c",
      "id": "CVE-2026-42585",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42585 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:79ba586d-7f43-5233-bd98-fea4a2f768e3",
      "id": "CVE-2026-42586",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42586 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:04782ac0-5549-5c98-a5a5-8568f5f82bc7",
      "id": "CVE-2026-42587",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42587 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0ff04d16-0c5e-5982-8950-fff255b4f55c",
      "id": "CVE-2026-44248",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44248 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8c691fbf-5257-5a34-bf9f-7899bfdec787",
      "id": "CVE-2026-44249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44249 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d193bfc3-9d79-55b0-b38a-e6dbd6808ea2",
      "id": "CVE-2026-44250",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44250 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:64cb68db-6095-56a6-89d2-5a444d219604",
      "id": "CVE-2026-44890",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.75.Final-tuxcare.4 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:95cf7093-2cbf-583a-9f83-b0f9caa8582a",
      "id": "CVE-2026-44891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44891 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d03046de-fbdf-5537-85d0-c6dae4d223cc",
      "id": "CVE-2026-44893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44893 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9460b854-7b81-58e7-afdd-885f23f13a0c",
      "id": "CVE-2026-45416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45416 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4673f333-63fb-5f61-836e-a06b269c6479",
      "id": "CVE-2026-45536",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45536 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:df9f3ba6-1e65-534d-b4d8-dcd3a37fc83d",
      "id": "CVE-2026-45673",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45673 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ad990372-2dd5-51fc-9185-0b9dd6c99380",
      "id": "CVE-2026-45674",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45674 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1808763f-40f1-54a6-aecc-b79990026d15",
      "id": "CVE-2026-46340",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-46340 is fixed in version 4.1.75.Final-tuxcare.4 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:79a86b5e-d094-5f3e-be4b-9da16270ec8d",
      "id": "CVE-2026-47244",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47244 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:300b5ac4-0570-58c3-82eb-b909d815798f",
      "id": "CVE-2026-47691",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47691 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:68d2e3ce-a8c4-55ba-b709-029164d9d69f",
      "id": "CVE-2026-48006",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48006 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4c93d7d1-04b2-5b18-a0bc-469c3e8dae53",
      "id": "CVE-2026-48043",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-48043 does not affect version 4.1.75.Final-tuxcare.4 of io.netty:netty-resolver. already_fixed \u2014 The target repository (Netty 4.1.75.Final-tuxcare.1) already contains equivalent protection against CVE-2026-48043. While the upstream patch targets a newer architecture with a ChannelInboundHandlerAdapter tail handler (introduced in CVE-2025-58057 refactoring), the target's older architecture implements the same defensive pattern: a try-finally block ensuring ByteBuf.release() is called uncond..."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:879965f3-240f-5d50-acde-b10f7efd07e9",
      "id": "CVE-2026-48059",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48059 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:de17241a-22fc-573e-8f1d-6e56b80009e4",
      "id": "CVE-2026-50010",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50010 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2d477ea0-97e1-5d0e-b894-0d7e44580ad6",
      "id": "CVE-2026-50011",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50011 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e6b28d04-af9b-517a-9331-188a55bd6cde",
      "id": "CVE-2026-50020",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50020 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2ba89dbd-bc9d-518a-af6c-c8b745b0d660",
      "id": "CVE-2026-50560",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.75.Final-tuxcare.4 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:de1aed9e-8aea-5ac0-a6d4-86448e5810cd",
      "id": "CVE-2026-55831",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55831 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9abc2e45-5e24-5030-b3ce-98dde5201a3d",
      "id": "CVE-2026-55833",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55833 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0470dbcf-6010-509e-8806-3fac8288f9a8",
      "id": "CVE-2026-55851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55851 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ccc3d1dc-6007-5201-85d9-76a4a44f87e2",
      "id": "CVE-2026-56745",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56745 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4ad584fb-0935-5868-b65f-af6c4895dbb3",
      "id": "CVE-2026-56746",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56746 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9ef439f3-1007-5641-8739-97d7450595c6",
      "id": "CVE-2026-56817",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56817 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:813d94b8-0da0-579d-a749-1361a8cf760e",
      "id": "CVE-2026-56818",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-56818 does not affect version 4.1.75.Final-tuxcare.4 of io.netty:netty-resolver. not_affected \u2014 The target version 4.1.75.Final (released March 2022) predates the introduction of the vulnerable feature by over 4 years. CVE-2026-56818 describes incomplete cleanup when the `maxElements` limit is exceeded in RedisArrayAggregator. However, the `maxElements` configuration parameter and associated exception handling were introduced in June 2026 (commits e51c64c964 and 728c98b8ec), neither of wh..."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9fe3d864-6d6b-5037-bd46-f3e6014c6a12",
      "id": "CVE-2026-56819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56819 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e3265348-5f0a-5c45-abf5-a0c065e8a3a5",
      "id": "CVE-2026-59898",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59898 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4c2f0ab6-66c5-5696-8aec-76b025e4dbb1",
      "id": "CVE-2026-59899",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59899 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2eaae5e0-5a45-54c2-94e2-a553ca3ab8d6",
      "id": "CVE-2026-59900",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59900 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5b8e4f4b-f6da-54bf-aba4-f7f6191bfe42",
      "id": "CVE-2026-59901",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59901 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8053e8dd-5303-5846-adc8-34bac196d0af",
      "id": "CVE-2026-59919",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59919 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:36528c81-376f-53a2-ab68-b0ce3bf565e3",
      "id": "CVE-2026-59920",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59920 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:83b7bc4b-a67a-5c40-8290-6b329d3b7349",
      "id": "CVE-2026-59921",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59921 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7f216e04-d8c4-5e2a-b871-b6c8b569fadb",
      "id": "CVE-2026-73507",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-73507 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:177f34f6-346d-5fd2-abae-9596629ea1ac",
      "id": "CVE-2026-73508",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-73508 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:db5ded0d-abc8-5a20-b5e9-500861a345e1",
      "id": "GHSA-mfg7-5gfp-c4w3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:933ff9ce-2aef-50b3-b6a1-30c814a3d206",
      "id": "GHSA-v74w-7mr3-4qg3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ad3862d2-6feb-5691-8b1d-16c238a6de5d",
      "id": "GHSA-xpw8-rcwv-8f8p",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-xpw8-rcwv-8f8p is fixed in version 4.1.75.Final-tuxcare.4 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.75.Final-tuxcare.4"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.netty/netty-resolver@4.1.75.Final-tuxcare.4"
    }
  ]
}