{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:38d150ae-8751-5ee3-ab7f-ada3f7d5ac89",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.73.Final-tuxcare.3",
      "type": "library",
      "group": "io.netty",
      "name": "netty-testsuite-native-image-client-runtime-init",
      "version": "4.1.73.Final-tuxcare.3",
      "purl": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.73.Final-tuxcare.3"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:f5e4007e-86b8-5c7b-b2fc-b93769b3c697",
      "id": "CVE-2022-24823",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-24823 is fixed in version 4.1.73.Final-tuxcare.3 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8ed34991-917b-51bd-99a3-6d50d730acbb",
      "id": "CVE-2022-41881",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-41881 is fixed in version 4.1.73.Final-tuxcare.3 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a4128c4d-6bde-5f9f-8249-bc1e0c5df36f",
      "id": "CVE-2022-41915",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-41915 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:417395fc-ef81-5efd-a5a2-1b96c807a91a",
      "id": "CVE-2023-34462",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-34462 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a5e3b243-06f7-57e6-936e-c6f2b756a186",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-44487 is fixed in version 4.1.73.Final-tuxcare.3 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b9030f32-9829-59af-a0e3-f170f5cd5c9a",
      "id": "CVE-2023-4586",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2023-4586 is a false positive for io.netty:netty-testsuite-native-image-client-runtime-init 4.1.73.Final-tuxcare.3."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9ea3cc9a-721a-5ed5-b0aa-032bedd39049",
      "id": "CVE-2024-29025",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-29025 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:84f7ce85-22b4-5e27-8421-c9bb008de8d0",
      "id": "CVE-2024-47535",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-47535 is fixed in version 4.1.73.Final-tuxcare.3 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f4068d50-a149-5288-9aff-92fd8756c32b",
      "id": "CVE-2025-24970",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-24970 is fixed in version 4.1.73.Final-tuxcare.3 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:997c2ad4-4bed-5091-8da5-86330ecf7517",
      "id": "CVE-2025-25193",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-25193 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:04bdd337-a244-58bc-9b3d-bb6395a4ed36",
      "id": "CVE-2025-55163",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-55163 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d47e789c-ba19-5293-b45a-36833eff132c",
      "id": "CVE-2025-58056",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58056 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0470b378-202b-5c2e-a409-6e486865a4d3",
      "id": "CVE-2025-58057",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58057 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:359a3b76-b847-5897-a915-d75174fb0d1d",
      "id": "CVE-2025-59419",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-59419 is fixed in version 4.1.73.Final-tuxcare.3 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:056a5337-c3e4-5c4c-b512-f3669bb437cb",
      "id": "CVE-2025-67735",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-67735 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d4bf33ea-20e9-5581-9a52-0c1a8c762578",
      "id": "CVE-2026-33870",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33870 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2d8f8be1-7eb8-5975-8548-b7e9e4ce0d71",
      "id": "CVE-2026-33871",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33871 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f863e8e7-f3ed-5190-9e9a-3af4b1f8b2f7",
      "id": "CVE-2026-41417",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41417 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1fe5f10f-edc9-5438-8af5-50c73a8a4eea",
      "id": "CVE-2026-42577",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42577 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:11bf5043-609d-5723-83d6-3274ac14be09",
      "id": "CVE-2026-42578",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42578 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e1461bd0-0f83-5cdc-b5aa-ea76d0d61788",
      "id": "CVE-2026-42579",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42579 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:001dbc52-a9c4-5a03-ace6-5002839f1ce3",
      "id": "CVE-2026-42580",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42580 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cc1c7ac0-3c2c-5bc4-b623-70dae77de07f",
      "id": "CVE-2026-42581",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42581 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0901d001-3e05-5181-9737-90b7c2e56dec",
      "id": "CVE-2026-42583",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42583 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c78bac29-cdd0-5452-8c34-217419b613b9",
      "id": "CVE-2026-42584",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42584 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:84bfa700-79ce-529d-9633-5526de720e49",
      "id": "CVE-2026-42585",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42585 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:18d1389c-9b7c-510e-8823-6475e9bc3ecd",
      "id": "CVE-2026-42586",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42586 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fa510003-e51c-5bb9-ab57-a6b21143a663",
      "id": "CVE-2026-42587",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42587 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:63cad79d-90cf-57fc-accf-61ed940fb423",
      "id": "CVE-2026-44248",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44248 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8a1db2cb-8a3c-5ab1-bcd7-bc5be157d143",
      "id": "CVE-2026-44249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44249 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:eed97859-ec5f-5a1e-b07a-0699cfc2402c",
      "id": "CVE-2026-44250",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44250 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dda0b7df-0b8e-5bc1-b66e-08769799a5e0",
      "id": "CVE-2026-44890",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.73.Final-tuxcare.3 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bdeb651d-ba62-52c4-b781-15af3d09e000",
      "id": "CVE-2026-44891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44891 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:958c537a-3553-5774-9fa8-968952eb79ef",
      "id": "CVE-2026-44893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44893 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e1dd809d-12e3-5568-ac25-461b8dd61cd5",
      "id": "CVE-2026-45416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45416 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:426ccb6e-3223-5a4d-b870-a71bee9c24b5",
      "id": "CVE-2026-45536",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45536 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:29ef7de3-29fa-5b2b-899f-cba891ef930a",
      "id": "CVE-2026-45673",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45673 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:79ae6899-cea7-5656-98a3-56bdfdb3382d",
      "id": "CVE-2026-45674",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45674 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:120a78c9-2cbe-5407-bc2b-126c917af7d5",
      "id": "CVE-2026-46340",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-46340 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:31736705-4b0e-552f-b36a-54d574f6776c",
      "id": "CVE-2026-47244",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47244 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:54157ade-84b4-5bd7-9176-77b0d5673627",
      "id": "CVE-2026-47691",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47691 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:62a8dbc9-a7cc-5c25-bdd3-4c7e21b75a5c",
      "id": "CVE-2026-48006",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48006 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e7d268d7-ca3d-510a-9dac-c853f8e6c91d",
      "id": "CVE-2026-48043",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-48043 does not affect version 4.1.73.Final-tuxcare.3 of io.netty:netty-testsuite-native-image-client-runtime-init. not_affected \u2014 Version 4.1.73 is not affected by CVE-2026-48043. The target uses a loop-based architecture with try-finally protection (introduced in 2016) that prevents the buffer leak described in the CVE. The vulnerable ChannelInboundHandlerAdapter pattern that the upstream patch fixes does not exist in this version."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ee6b03fa-b265-5062-86e7-879ea91a2aff",
      "id": "CVE-2026-48059",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48059 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:30606e4e-51c6-51e2-a681-0ec3ae2730ba",
      "id": "CVE-2026-50010",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50010 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7e631692-3bde-513e-b52f-b4dd3aff54aa",
      "id": "CVE-2026-50011",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50011 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:760ad79e-7ced-5ac7-8ff1-27f3ff9cecb2",
      "id": "CVE-2026-50020",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50020 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5aff7145-49b4-50ec-9630-8e81b4f1dac9",
      "id": "CVE-2026-50560",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.73.Final-tuxcare.3 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:76142466-09fa-54af-9e29-378d0ecf1a69",
      "id": "CVE-2026-55831",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55831 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ca23d5ff-d000-5d63-af2a-2026dbecda5d",
      "id": "CVE-2026-55833",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55833 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f30c468b-7fcd-5158-be57-01d2a98d3b1d",
      "id": "CVE-2026-55851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55851 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6489e8e5-c9f7-5962-9d9a-d922c1d7c8b5",
      "id": "CVE-2026-56745",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56745 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:30d31b4e-2bc1-5691-abd3-4580d3f401e5",
      "id": "CVE-2026-56746",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56746 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:eb2757ce-3149-524f-b561-f8444afa2a17",
      "id": "CVE-2026-56817",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56817 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c21f62d9-3d9d-585b-9061-2639717b4117",
      "id": "CVE-2026-56818",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-56818 does not affect version 4.1.73.Final-tuxcare.3 of io.netty:netty-testsuite-native-image-client-runtime-init. not_affected \u2014 The target version 4.1.73.Final-tuxcare.2 is NOT AFFECTED by CVE-2026-56818. The vulnerable code pattern (configurable `maxElements` limit check without cleanup, contrasting with `maxNestedArrayDepth` limit check WITH cleanup) was introduced in version 4.1.135.Final through commits e51c64c964 and 728c98b8ec (dated 2026-06-01/02). The target version predates these features entirely and does not ..."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:da50e75d-4ead-5719-b1af-036061eafe8f",
      "id": "CVE-2026-56819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56819 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a78f3b52-67d4-52b4-ac92-b6e5c5de9c22",
      "id": "CVE-2026-59898",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59898 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2e9e71d6-e8e9-5710-8d02-7d306290710c",
      "id": "CVE-2026-59899",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59899 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9b179b45-152f-5340-bc19-937a3bca4c50",
      "id": "CVE-2026-59900",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59900 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a103a0c3-1977-5dfb-9639-d59b360852a6",
      "id": "CVE-2026-59901",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59901 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d8876b3f-8be9-5224-a070-f65b83245cc5",
      "id": "CVE-2026-59919",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59919 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:641e28d1-f80b-5040-90a0-62260897481d",
      "id": "CVE-2026-59920",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59920 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8d420f18-faa7-5283-b6a4-1a9cc38d0fdf",
      "id": "CVE-2026-59921",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59921 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:98a9fa4e-da6e-556c-93e9-b13e076fdb0f",
      "id": "CVE-2026-73507",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-73507 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:57835eb3-92b5-5936-9496-205bd0715c1a",
      "id": "CVE-2026-73508",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-73508 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4b7f189b-7a2d-5797-bd99-ea8f99e7f054",
      "id": "GHSA-mfg7-5gfp-c4w3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0d35cb14-83e0-5806-9c77-b57702beee9e",
      "id": "GHSA-v74w-7mr3-4qg3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f9d69360-f0bd-56d2-b760-fa809009612b",
      "id": "GHSA-xpw8-rcwv-8f8p",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-xpw8-rcwv-8f8p affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.73.Final-tuxcare.3"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.73.Final-tuxcare.3"
    }
  ]
}