{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:a4d830f6-0da7-571d-9c9e-661b410e780d",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/io.netty/netty-testsuite-osgi@4.1.73.Final-tuxcare.3",
      "type": "library",
      "group": "io.netty",
      "name": "netty-testsuite-osgi",
      "version": "4.1.73.Final-tuxcare.3",
      "purl": "pkg:maven/io.netty/netty-testsuite-osgi@4.1.73.Final-tuxcare.3"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:1ebfbfec-d2b6-522f-98fb-1c92b2a382d0",
      "id": "CVE-2022-24823",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-24823 is fixed in version 4.1.73.Final-tuxcare.3 of io.netty:netty-testsuite-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-osgi@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b7e5bf57-7ff0-54b4-b3ba-298ae683701b",
      "id": "CVE-2022-41881",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-41881 is fixed in version 4.1.73.Final-tuxcare.3 of io.netty:netty-testsuite-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-osgi@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ef67deb0-2dd5-5f28-a496-c81659fed1de",
      "id": "CVE-2022-41915",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-41915 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-testsuite-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-osgi@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f38a2f24-a6cc-5afb-b446-652bd8d30ffc",
      "id": "CVE-2023-34462",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-34462 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-testsuite-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-osgi@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:37b37e24-5d00-5126-b176-5bfa7b8fe7bf",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-44487 is fixed in version 4.1.73.Final-tuxcare.3 of io.netty:netty-testsuite-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-osgi@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1c767483-e2a8-5864-a64e-8cdfa672bf13",
      "id": "CVE-2023-4586",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2023-4586 is a false positive for io.netty:netty-testsuite-osgi 4.1.73.Final-tuxcare.3."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-osgi@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b7cbf619-1fbc-501d-9fea-2d4da597b742",
      "id": "CVE-2024-29025",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-29025 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-testsuite-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-osgi@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a168a90f-d585-5237-bc3d-0fc38dcdbfed",
      "id": "CVE-2024-47535",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-47535 is fixed in version 4.1.73.Final-tuxcare.3 of io.netty:netty-testsuite-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-osgi@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a5d93a5d-81d2-5928-a8cd-24395a9c75c4",
      "id": "CVE-2025-24970",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-24970 is fixed in version 4.1.73.Final-tuxcare.3 of io.netty:netty-testsuite-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-osgi@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0a84c598-7c3a-5bfa-a961-df169b9f6260",
      "id": "CVE-2025-25193",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-25193 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-testsuite-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-osgi@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a2d3f52f-ed1a-50ea-acec-d1c879771217",
      "id": "CVE-2025-55163",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-55163 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-testsuite-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-osgi@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:805f117e-a2aa-5047-9d34-6bad3022acd5",
      "id": "CVE-2025-58056",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58056 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-testsuite-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-osgi@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1146a7a7-8d46-592d-8d4a-b46065afa17c",
      "id": "CVE-2025-58057",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58057 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-testsuite-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-osgi@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2e5ff5f5-750d-5aff-89b2-bf6f712e533f",
      "id": "CVE-2025-59419",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-59419 is fixed in version 4.1.73.Final-tuxcare.3 of io.netty:netty-testsuite-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-osgi@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c3cc5c2e-a1d1-529c-8a5a-a1f040fdefcd",
      "id": "CVE-2025-67735",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-67735 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-testsuite-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-osgi@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fbc6df7d-de08-505b-b665-6e1c85cd9071",
      "id": "CVE-2026-33870",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33870 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-testsuite-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-osgi@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:596cbdc4-8501-5bd5-949a-f202f1d11cef",
      "id": "CVE-2026-33871",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33871 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-testsuite-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-osgi@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dda48797-2685-59ef-9ec3-1be42967c935",
      "id": "CVE-2026-41417",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41417 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-testsuite-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-osgi@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d45eb98a-b61b-5aa6-8543-76777ae268e7",
      "id": "CVE-2026-42577",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42577 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-testsuite-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-osgi@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:89f46129-4bf5-5ca1-ae23-b3492c190c62",
      "id": "CVE-2026-42578",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42578 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-testsuite-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-osgi@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fb74fa1b-b6f5-5f63-9365-90df41894daf",
      "id": "CVE-2026-42579",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42579 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-testsuite-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-osgi@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8f1fb279-8029-5199-8fef-72eda944cfb8",
      "id": "CVE-2026-42580",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42580 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-testsuite-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-osgi@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a613c6b5-7180-5d96-8ffd-2115e14c152a",
      "id": "CVE-2026-42581",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42581 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-testsuite-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-osgi@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2df555f0-820b-5382-a832-b2bc0f3e2090",
      "id": "CVE-2026-42583",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42583 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-testsuite-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-osgi@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:590f4c2c-01a3-51a4-92aa-d2106fa9e8ce",
      "id": "CVE-2026-42584",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42584 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-testsuite-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-osgi@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c32b4e12-62ad-50f8-83ce-4e6d909be41a",
      "id": "CVE-2026-42585",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42585 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-testsuite-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-osgi@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7f63d032-0ec4-5fca-b9a0-4103ad8df35d",
      "id": "CVE-2026-42586",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42586 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-testsuite-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-osgi@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:91f6130a-fdde-565e-8870-53193feec5c4",
      "id": "CVE-2026-42587",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42587 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-testsuite-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-osgi@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:36bf2b9b-ff0c-5c6d-89bf-eced97d39e2d",
      "id": "CVE-2026-44248",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44248 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-testsuite-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-osgi@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6b7c445f-c7ae-5140-9441-05c8c6bfbec0",
      "id": "CVE-2026-44249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44249 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-testsuite-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-osgi@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8c885e57-07c0-5629-9db3-4eaa5df37570",
      "id": "CVE-2026-44250",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44250 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-testsuite-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-osgi@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4c79acfa-6bd9-5f8e-a68d-026d9ef5e2b5",
      "id": "CVE-2026-44890",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.73.Final-tuxcare.3 of io.netty:netty-testsuite-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-osgi@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9c140343-4b80-5265-ae31-63eaf36125a7",
      "id": "CVE-2026-44891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44891 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-testsuite-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-osgi@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ebb39312-0871-55d0-afa8-4d0e31b2835d",
      "id": "CVE-2026-44893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44893 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-testsuite-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-osgi@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:75295052-5465-57c7-881e-d80dcd704225",
      "id": "CVE-2026-45416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45416 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-testsuite-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-osgi@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d77ad847-a706-5a31-83f4-a782d4525e54",
      "id": "CVE-2026-45536",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45536 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-testsuite-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-osgi@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:27a456e9-4d6b-529f-b148-d3600b201841",
      "id": "CVE-2026-45673",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45673 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-testsuite-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-osgi@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b3038ac3-b0ce-52c8-a77c-5b636a09c523",
      "id": "CVE-2026-45674",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45674 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-testsuite-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-osgi@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:933134c9-6c6a-53aa-8f4c-f162efe1b8c6",
      "id": "CVE-2026-46340",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-46340 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-testsuite-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-osgi@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:461f05f5-5a7c-5011-acc5-adbb34a94dc0",
      "id": "CVE-2026-47244",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47244 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-testsuite-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-osgi@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:801fe56b-bca3-54de-a175-7c22f4c3798a",
      "id": "CVE-2026-47691",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47691 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-testsuite-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-osgi@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0a97fa0a-bdb2-57d6-ae78-aaf759807bf6",
      "id": "CVE-2026-48006",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48006 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-testsuite-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-osgi@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:27b647f8-c5a3-534a-9490-50b00c2da9d7",
      "id": "CVE-2026-48043",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-48043 does not affect version 4.1.73.Final-tuxcare.3 of io.netty:netty-testsuite-osgi. not_affected \u2014 Version 4.1.73 is not affected by CVE-2026-48043. The target uses a loop-based architecture with try-finally protection (introduced in 2016) that prevents the buffer leak described in the CVE. The vulnerable ChannelInboundHandlerAdapter pattern that the upstream patch fixes does not exist in this version."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-osgi@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7058b2be-1446-5e87-ae1b-07bb6cd4e0c2",
      "id": "CVE-2026-48059",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48059 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-testsuite-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-osgi@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e8ed6520-0c38-5f0d-b436-db585b16b7cd",
      "id": "CVE-2026-50010",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50010 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-testsuite-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-osgi@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b7c9e60b-6e3a-5232-90f3-e5daac654e66",
      "id": "CVE-2026-50011",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50011 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-testsuite-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-osgi@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:427c7940-c6aa-5b20-9037-c4f25a75523c",
      "id": "CVE-2026-50020",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50020 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-testsuite-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-osgi@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4fc0912f-aa61-5903-921d-911df4215d80",
      "id": "CVE-2026-50560",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.73.Final-tuxcare.3 of io.netty:netty-testsuite-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-osgi@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:123aae93-12dd-501c-b3f1-9f50dbe076ee",
      "id": "CVE-2026-55831",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55831 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-testsuite-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-osgi@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d2ef909c-8d68-524f-9510-683910e3bdbb",
      "id": "CVE-2026-55833",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55833 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-testsuite-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-osgi@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:19f23a34-d2d6-56d6-ad6f-da99bf8389fb",
      "id": "CVE-2026-55851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55851 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-testsuite-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-osgi@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ad2782b5-354b-512b-be1f-29f8bfd4f14d",
      "id": "CVE-2026-56745",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56745 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-testsuite-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-osgi@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3894d81d-c4e3-5f22-b1b3-dfdc90db744f",
      "id": "CVE-2026-56746",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56746 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-testsuite-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-osgi@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:868d4af4-5569-5979-b1e9-ef03352a6ae9",
      "id": "CVE-2026-56817",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56817 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-testsuite-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-osgi@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9c131e51-8b5c-5065-94c2-71b2013e70e8",
      "id": "CVE-2026-56818",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-56818 does not affect version 4.1.73.Final-tuxcare.3 of io.netty:netty-testsuite-osgi. not_affected \u2014 The target version 4.1.73.Final-tuxcare.2 is NOT AFFECTED by CVE-2026-56818. The vulnerable code pattern (configurable `maxElements` limit check without cleanup, contrasting with `maxNestedArrayDepth` limit check WITH cleanup) was introduced in version 4.1.135.Final through commits e51c64c964 and 728c98b8ec (dated 2026-06-01/02). The target version predates these features entirely and does not ..."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-osgi@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:45d45fe6-d6ce-5696-8aff-27360890c662",
      "id": "CVE-2026-56819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56819 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-testsuite-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-osgi@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:53d670ef-1e9d-5d92-b787-0477898502c2",
      "id": "CVE-2026-59898",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59898 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-testsuite-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-osgi@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f55a3be7-0c91-5084-8464-5911fa281f5d",
      "id": "CVE-2026-59899",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59899 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-testsuite-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-osgi@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:78aa1d90-5474-520e-bfa2-0cc581834b11",
      "id": "CVE-2026-59900",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59900 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-testsuite-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-osgi@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:eb5cc61b-15f0-5762-94d6-3effbc4d70bb",
      "id": "CVE-2026-59901",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59901 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-testsuite-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-osgi@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6dacf9b1-c843-50c4-bb21-1b6d9a5282c3",
      "id": "CVE-2026-59919",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59919 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-testsuite-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-osgi@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:23efc71d-4b79-54ef-80e0-5b8c5de3fdd6",
      "id": "CVE-2026-59920",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59920 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-testsuite-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-osgi@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:af4349d7-5499-54b0-b91a-cceb0e3a468b",
      "id": "CVE-2026-59921",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59921 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-testsuite-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-osgi@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8e13e075-ba2f-5b36-af31-fd27ffcae6a5",
      "id": "CVE-2026-73507",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-73507 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-testsuite-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-osgi@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3d475935-22df-5d0f-a279-a10df86a5b1c",
      "id": "CVE-2026-73508",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-73508 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-testsuite-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-osgi@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:abdaea12-463e-54f2-b8b4-c2fa591d968e",
      "id": "GHSA-mfg7-5gfp-c4w3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-testsuite-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-osgi@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b332944b-b2b4-55c6-97ad-d77c2147cd48",
      "id": "GHSA-v74w-7mr3-4qg3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-testsuite-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-osgi@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:acc084c6-f0f5-5571-b9cc-d25e096ed7e1",
      "id": "GHSA-xpw8-rcwv-8f8p",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-xpw8-rcwv-8f8p affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-testsuite-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-osgi@4.1.73.Final-tuxcare.3"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.netty/netty-testsuite-osgi@4.1.73.Final-tuxcare.3"
    }
  ]
}