{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:86614cf1-fc33-5197-a497-766c72e1a6a7",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.63.Final-tuxcare.4",
      "type": "library",
      "group": "io.netty",
      "name": "netty-testsuite-native-image-client-runtime-init",
      "version": "4.1.63.Final-tuxcare.4",
      "purl": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.63.Final-tuxcare.4"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:5c340154-0345-5ec7-8745-220813bca615",
      "id": "CVE-2021-37136",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-37136 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:157ade7e-b871-58ac-adb5-5cb694a0787d",
      "id": "CVE-2021-37137",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-37137 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:089e84ad-697c-5f26-be71-58858144aea3",
      "id": "CVE-2021-43797",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-43797 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d43c5b78-532d-5736-a939-001f421cc38c",
      "id": "CVE-2022-24823",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-24823 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d556d960-36f2-5eb1-8b31-479b5569aae7",
      "id": "CVE-2022-41881",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-41881 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:07eb71cf-1011-5767-a926-c649ec71f386",
      "id": "CVE-2022-41915",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-41915 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b5f19475-91a4-5352-985a-35e273ded290",
      "id": "CVE-2023-34462",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-34462 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8535e406-673b-5e35-a87c-f36eb66eb4a7",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-44487 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:778b5af9-9524-528f-89e5-a53b135eaa5d",
      "id": "CVE-2023-4586",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2023-4586 is a false positive for io.netty:netty-testsuite-native-image-client-runtime-init 4.1.63.Final-tuxcare.4."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9dfdcdd4-442c-53eb-b575-60082ea1d2f8",
      "id": "CVE-2024-29025",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-29025 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dfb92b5f-47d7-5586-8d92-0168fc1b1c30",
      "id": "CVE-2024-47535",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-47535 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:99f120ed-1c3e-5dcb-a947-50fea027ca68",
      "id": "CVE-2025-24970",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-24970 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a219ea34-0858-5cfa-8ff1-502abbb16016",
      "id": "CVE-2025-25193",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-25193 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5a058f17-1e36-51a3-bc40-19c2783c63ec",
      "id": "CVE-2025-55163",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55163 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2452639f-4123-54f4-ba84-132995b9b58b",
      "id": "CVE-2025-58056",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58056 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c31fbf90-47f9-5fa5-903e-bb0546826174",
      "id": "CVE-2025-58057",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-58057 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fc358f8d-a37b-57e6-95e6-7f3577cac4ba",
      "id": "CVE-2025-59419",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-59419 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4846122a-c67e-5ac9-a253-0f9973029d10",
      "id": "CVE-2025-67735",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-67735 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:09b863f7-121a-5af9-bead-de7b2ed1a494",
      "id": "CVE-2026-33870",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33870 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bba2cb9f-57be-5972-b28d-85399fccdef4",
      "id": "CVE-2026-33871",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33871 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2651a9b6-e367-5f60-9f59-e733f0d0a920",
      "id": "CVE-2026-41417",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41417 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2fb29bc7-d56c-5231-b4c8-7d9e520900b6",
      "id": "CVE-2026-42577",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42577 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:460ee4b1-6f99-5e0e-b8a4-c89951365187",
      "id": "CVE-2026-42578",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42578 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f898dd7d-9ca3-5052-a04b-f29e870951a7",
      "id": "CVE-2026-42579",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42579 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:50843f3f-44c5-59de-bcdc-b3b30ab72428",
      "id": "CVE-2026-42580",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42580 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6a800692-048e-522f-a990-4c9a3eaaf818",
      "id": "CVE-2026-42581",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42581 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cb17f868-5cf5-5c50-ac28-2f72a1561861",
      "id": "CVE-2026-42583",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42583 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a26213ff-2f11-5203-8ba3-1786862e974c",
      "id": "CVE-2026-42584",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42584 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:479f12ae-0b12-5ee5-92d3-f385312d3a34",
      "id": "CVE-2026-42585",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42585 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0dca73aa-773e-5f82-8b6f-f50a3b271f30",
      "id": "CVE-2026-42586",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42586 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:47885359-1104-58fd-99d4-68f0a59ab84b",
      "id": "CVE-2026-42587",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42587 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d9132c1f-6cb3-5633-9915-a3111adcaa08",
      "id": "CVE-2026-44248",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44248 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4508427a-a7bf-5ef7-9754-a587941926eb",
      "id": "CVE-2026-44249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44249 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0a2ccbb7-d021-53b0-8f74-0721059685dc",
      "id": "CVE-2026-44250",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44250 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:72211756-fb4d-5750-8b68-e0105b146821",
      "id": "CVE-2026-44890",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:baaac208-29a3-5272-9c94-cbf84e9a4f91",
      "id": "CVE-2026-44891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44891 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5560f8b2-9a21-55a0-90d9-4c52bc23872c",
      "id": "CVE-2026-44893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44893 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ffeea245-1752-5cbd-bca3-b4e863691694",
      "id": "CVE-2026-45416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45416 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5e9d3856-d97b-5968-b26d-63447dffc221",
      "id": "CVE-2026-45536",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45536 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f3984093-5f77-5fc9-951c-c2bd67578a3b",
      "id": "CVE-2026-45673",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45673 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a969a3eb-4350-57b0-9584-4cc643e66c5f",
      "id": "CVE-2026-45674",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45674 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:26fa3111-0494-5d58-9151-12bc6795cfc9",
      "id": "CVE-2026-46340",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-46340 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:15ac8b6a-e220-503b-b39b-eb88d9b4a6c0",
      "id": "CVE-2026-47244",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47244 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5f9397ad-cb03-56b1-b959-1ae16ed7bb20",
      "id": "CVE-2026-47691",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47691 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c9e6c32e-16c7-50d0-8086-e87e83db7c81",
      "id": "CVE-2026-48006",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48006 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3395c5de-55b4-5ceb-af96-7e666a8a6912",
      "id": "CVE-2026-48043",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-48043 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a471608e-f7ba-5b2f-b079-cc09d9c37061",
      "id": "CVE-2026-48059",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48059 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fe7b3792-c249-5b6e-93fc-4913d3309ecf",
      "id": "CVE-2026-50010",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50010 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dfb9f38f-2f4c-55f6-8383-cd17222ac4a2",
      "id": "CVE-2026-50011",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50011 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2e37d019-7982-522e-b12c-54ce69cf224d",
      "id": "CVE-2026-50020",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50020 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:00edf112-c54c-5e46-9ac3-144716a8ef68",
      "id": "CVE-2026-50560",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5f20e950-fccf-5edc-9c52-34e084f01bc0",
      "id": "CVE-2026-55831",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55831 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4982f0b1-f8cc-5693-8032-28acab8134ef",
      "id": "CVE-2026-55833",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55833 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6316cafc-10f6-5e5d-981b-922ab878964a",
      "id": "CVE-2026-55851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55851 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:80df63e1-415b-5234-a229-f1e236237c4b",
      "id": "CVE-2026-56745",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56745 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5c55f90c-798a-5ad8-af93-4fbb7a774a80",
      "id": "CVE-2026-56746",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56746 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:70bf5c26-2462-5832-a43a-d1c7c2051d6d",
      "id": "CVE-2026-56817",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-56817 does not affect version 4.1.63.Final-tuxcare.4 of io.netty:netty-testsuite-native-image-client-runtime-init. not_affected \u2014 The Netty codec-xml module contains XmlDecoder, which instantiates an Aalto XML parser without security configuration (line 38: new InputFactoryImpl() with no XXE protection). However, this is a library component that Netty itself does not use in its own production code. The vulnerability only manifests when downstream applications explicitly add XmlDecoder to their Netty channel pipelines. Per..."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5a920561-20a3-57ad-8588-0e7707a7abdf",
      "id": "CVE-2026-56818",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56818 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9b5b1161-3b1b-563f-92aa-bc970afc4ed9",
      "id": "CVE-2026-56819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56819 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5444ebf1-bc2a-53a7-945a-8655651fc9f9",
      "id": "CVE-2026-59898",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59898 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b448a240-164d-51f8-8179-9b2adad0e7a1",
      "id": "CVE-2026-59899",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59899 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3549cd8a-0896-5687-a205-b070cf7d969f",
      "id": "CVE-2026-59900",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59900 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e47485cb-3242-5d86-8596-058cbccda4a4",
      "id": "CVE-2026-59901",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59901 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b318f528-2a3a-5a8a-aa6c-52864492aa2b",
      "id": "CVE-2026-59919",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59919 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4217ee9a-7467-582f-bf80-b21603dc0872",
      "id": "CVE-2026-59920",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59920 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:19438c5a-0bf8-55ed-ba93-2396819882ac",
      "id": "CVE-2026-59921",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59921 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:11514172-32ca-58f4-892c-e71e02fea604",
      "id": "GHSA-mfg7-5gfp-c4w3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9652064f-2af0-59df-9758-e15877277318",
      "id": "GHSA-v74w-7mr3-4qg3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1e39a8ec-d0e4-507f-bb26-fa034739a294",
      "id": "GHSA-xpw8-rcwv-8f8p",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-xpw8-rcwv-8f8p affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.63.Final-tuxcare.4"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.63.Final-tuxcare.4"
    }
  ]
}