{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:b40ec6e2-a972-581a-bdf7-8523214717e3",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.75.Final-tuxcare.4",
      "type": "library",
      "group": "io.netty",
      "name": "netty-testsuite-native-image-client-runtime-init",
      "version": "4.1.75.Final-tuxcare.4",
      "purl": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.75.Final-tuxcare.4"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:d133ae2a-0856-5c71-9814-feeb6f4a5cd5",
      "id": "CVE-2022-24823",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-24823 is fixed in version 4.1.75.Final-tuxcare.4 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b76b83b5-2995-5596-bcc5-ceb6da67403a",
      "id": "CVE-2022-41881",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-41881 is fixed in version 4.1.75.Final-tuxcare.4 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:afc03ddc-d2e7-5080-a9fd-0d4b8c650644",
      "id": "CVE-2022-41915",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-41915 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7e2fd735-db61-5a30-9abd-68a1a92b9f4d",
      "id": "CVE-2023-34462",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-34462 is fixed in version 4.1.75.Final-tuxcare.4 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:25ef6292-a37d-55ed-bea7-3718e6e12444",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-44487 is fixed in version 4.1.75.Final-tuxcare.4 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4f5d2ea9-6d08-5785-9682-ea75b3bb16a3",
      "id": "CVE-2023-4586",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2023-4586 is a false positive for io.netty:netty-testsuite-native-image-client-runtime-init 4.1.75.Final-tuxcare.4."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:36b69a79-c269-5ec9-8934-fd430695130a",
      "id": "CVE-2024-29025",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-29025 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:76a077dc-a14d-5fdc-88b0-9942dac8c703",
      "id": "CVE-2024-47535",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-47535 is fixed in version 4.1.75.Final-tuxcare.4 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2a7f5504-751f-5783-9c77-fdb6c7d6392b",
      "id": "CVE-2025-24970",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-24970 is fixed in version 4.1.75.Final-tuxcare.4 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a27d83e4-a102-5ba7-9e6b-5c48e85bb5de",
      "id": "CVE-2025-25193",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-25193 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fa55c593-3c2d-5200-a72f-34a89555727b",
      "id": "CVE-2025-55163",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-55163 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c66f02fe-7de0-5e41-8d72-76c82a22707b",
      "id": "CVE-2025-58056",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-58056 is fixed in version 4.1.75.Final-tuxcare.4 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:87ec6371-be96-56a0-8b3b-74c19fecca71",
      "id": "CVE-2025-58057",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58057 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f406b889-3e56-53cb-82a9-e2449fa6103b",
      "id": "CVE-2025-59419",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-59419 is fixed in version 4.1.75.Final-tuxcare.4 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c0376ae8-d6eb-51f5-bf9a-eb6b640564e5",
      "id": "CVE-2025-67735",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-67735 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0abbbaaa-3cb4-5c62-ae32-e7692f45fa44",
      "id": "CVE-2026-33870",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33870 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cf8b0591-36ad-5678-a738-12bb46fc21e4",
      "id": "CVE-2026-33871",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33871 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:63b7427d-c09e-57d3-a933-698a3899a58b",
      "id": "CVE-2026-41417",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41417 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:aae9d368-feae-57bc-94ac-be6a3b875ab5",
      "id": "CVE-2026-42577",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42577 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:08dfc488-d09e-5c69-96f4-783fd4c3b949",
      "id": "CVE-2026-42578",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42578 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5ee04c33-b9fd-5929-afb6-1eae926be2a1",
      "id": "CVE-2026-42579",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42579 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8db04165-2a02-573e-9b21-cb7d8eca7da2",
      "id": "CVE-2026-42580",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42580 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:05abe865-afd3-5367-b868-4230ba550278",
      "id": "CVE-2026-42581",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42581 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9ca7421a-2f05-5b82-bf76-b46be0095449",
      "id": "CVE-2026-42583",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42583 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7b6bd164-8de0-541c-aeb5-e4aaa85eed57",
      "id": "CVE-2026-42584",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42584 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:95f30fcd-958f-52f1-a1d4-dff7dfa32637",
      "id": "CVE-2026-42585",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42585 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8d9803d9-2b58-5dbb-87fa-78152b8b020c",
      "id": "CVE-2026-42586",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42586 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:489d203e-243c-521d-81b9-496d2c27b9e1",
      "id": "CVE-2026-42587",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42587 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9fb68f5e-7c19-52cb-9fca-ffa6814b5ec3",
      "id": "CVE-2026-44248",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44248 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a8eceda9-fdc4-5d6e-9f23-0985006c3a49",
      "id": "CVE-2026-44249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44249 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:03086a74-11c1-5f2b-ab5b-623e3c64fc9c",
      "id": "CVE-2026-44250",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44250 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b9676086-9f45-5e2f-9efd-09a41661790a",
      "id": "CVE-2026-44890",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.75.Final-tuxcare.4 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bcc74d37-a147-5a7e-a83e-6dc1558703e3",
      "id": "CVE-2026-44891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44891 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:df84e278-7f9d-5594-bedd-1fcaa3018b62",
      "id": "CVE-2026-44893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44893 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:58a42846-0670-51f1-8365-a1c384cfd3d0",
      "id": "CVE-2026-45416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45416 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e5f41e67-d20c-573b-be3d-ddffe0c9ea86",
      "id": "CVE-2026-45536",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45536 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f6f0b34a-b52e-5ea4-aa2a-33df63f4e32f",
      "id": "CVE-2026-45673",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45673 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7e451d5c-0cb4-5517-a0e4-0769b4b074da",
      "id": "CVE-2026-45674",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45674 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e8491827-3ca9-5da4-80b5-c8fd73a8315c",
      "id": "CVE-2026-46340",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-46340 is fixed in version 4.1.75.Final-tuxcare.4 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4cdee81c-e7ba-52d6-ba98-35e72c64931e",
      "id": "CVE-2026-47244",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47244 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:96a04bf4-fcf7-5d58-8dc8-b753087adf12",
      "id": "CVE-2026-47691",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47691 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7098dac1-bec3-58e9-b254-085f00bc2771",
      "id": "CVE-2026-48006",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48006 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a46e42a2-c23b-588d-a337-3a6d556d46ef",
      "id": "CVE-2026-48043",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-48043 does not affect version 4.1.75.Final-tuxcare.4 of io.netty:netty-testsuite-native-image-client-runtime-init. already_fixed \u2014 The target repository (Netty 4.1.75.Final-tuxcare.1) already contains equivalent protection against CVE-2026-48043. While the upstream patch targets a newer architecture with a ChannelInboundHandlerAdapter tail handler (introduced in CVE-2025-58057 refactoring), the target's older architecture implements the same defensive pattern: a try-finally block ensuring ByteBuf.release() is called uncond..."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0fae754c-42b0-5988-b6b4-ef21c4957a6e",
      "id": "CVE-2026-48059",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48059 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d54e56e6-23b6-5bee-868d-e48ab1c69eca",
      "id": "CVE-2026-50010",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50010 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:91955816-03f1-50eb-9963-f05331424048",
      "id": "CVE-2026-50011",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50011 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1286387f-78fb-518e-a883-557c5979aa9d",
      "id": "CVE-2026-50020",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50020 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5a802afc-c57e-53bc-8e5c-fad12b6f13f1",
      "id": "CVE-2026-50560",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.75.Final-tuxcare.4 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d484de62-96d5-5637-a39c-e0d13f202dea",
      "id": "CVE-2026-55831",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55831 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d4c6bbfb-ce39-5b87-88b6-a7f79bbd5ef5",
      "id": "CVE-2026-55833",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55833 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:34c10d80-cca2-58e7-af38-87375849180a",
      "id": "CVE-2026-55851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55851 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f6c791f7-9ab1-5374-b572-ef38045d9153",
      "id": "CVE-2026-56745",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56745 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:52ab5a6e-1685-5734-b822-b26b0df470dd",
      "id": "CVE-2026-56746",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56746 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3a62af47-2975-5b28-9ca1-fc160bd4e3ea",
      "id": "CVE-2026-56817",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56817 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:eb1ea738-2116-59db-9ac9-750df4b20a0c",
      "id": "CVE-2026-56818",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-56818 does not affect version 4.1.75.Final-tuxcare.4 of io.netty:netty-testsuite-native-image-client-runtime-init. not_affected \u2014 The target version 4.1.75.Final (released March 2022) predates the introduction of the vulnerable feature by over 4 years. CVE-2026-56818 describes incomplete cleanup when the `maxElements` limit is exceeded in RedisArrayAggregator. However, the `maxElements` configuration parameter and associated exception handling were introduced in June 2026 (commits e51c64c964 and 728c98b8ec), neither of wh..."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8242981e-f922-57f4-93ec-c7f849da7699",
      "id": "CVE-2026-56819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56819 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5fee0724-cf10-5e4d-b42d-c57bd8c015fe",
      "id": "CVE-2026-59898",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59898 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4c6462c5-fb0d-522a-95e0-0c3169e97a8a",
      "id": "CVE-2026-59899",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59899 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cba73ee3-0314-5b05-9c54-213a92691bb9",
      "id": "CVE-2026-59900",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59900 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:416def55-777f-5c86-a543-a2eaf5401e5e",
      "id": "CVE-2026-59901",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59901 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:34ca7a88-1cbe-5165-b74b-2dadf2a67045",
      "id": "CVE-2026-59919",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59919 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c3a5c764-42de-5548-af7b-3397f671d279",
      "id": "CVE-2026-59920",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59920 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7b44d0c5-9334-5226-937d-9ae7eb629361",
      "id": "CVE-2026-59921",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59921 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ebbf066f-1e4e-5e5d-b510-f9319abb02f8",
      "id": "GHSA-mfg7-5gfp-c4w3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3e2e89d4-7679-5136-8f66-045bed7acd95",
      "id": "GHSA-v74w-7mr3-4qg3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2bfbca96-56fa-54c2-a720-c289d38c180f",
      "id": "GHSA-xpw8-rcwv-8f8p",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-xpw8-rcwv-8f8p is fixed in version 4.1.75.Final-tuxcare.4 of io.netty:netty-testsuite-native-image-client-runtime-init."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.75.Final-tuxcare.4"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init@4.1.75.Final-tuxcare.4"
    }
  ]
}