{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:f769a2d0-11f1-5662-930b-20e696f327dc",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/io.netty/netty-testsuite@4.1.63.Final-tuxcare.4",
      "type": "library",
      "group": "io.netty",
      "name": "netty-testsuite",
      "version": "4.1.63.Final-tuxcare.4",
      "purl": "pkg:maven/io.netty/netty-testsuite@4.1.63.Final-tuxcare.4"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:6ad3b5c0-c799-5db8-92fe-b443b3fb58a8",
      "id": "CVE-2021-37136",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-37136 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-testsuite."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ea517d7c-a160-5b59-96bd-7f8707e3308e",
      "id": "CVE-2021-37137",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-37137 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-testsuite."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3307b39e-e61f-58c7-a017-b4366baebdf3",
      "id": "CVE-2021-43797",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-43797 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-testsuite."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e14ce9ad-f95d-5727-9f68-cc065571a3c5",
      "id": "CVE-2022-24823",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-24823 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-testsuite."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:42d62b3f-a770-5548-bbf7-e99d246130c6",
      "id": "CVE-2022-41881",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-41881 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-testsuite."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2b7cc5c8-b8f7-5360-9b18-26b505898666",
      "id": "CVE-2022-41915",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-41915 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-testsuite."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:22be30aa-c5fd-5a0d-ba29-9c8ec45438f9",
      "id": "CVE-2023-34462",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-34462 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-testsuite."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ac295c88-5353-507b-9bf2-355bdaea5f71",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-44487 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-testsuite."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:50d5f487-fc80-5a93-b9ce-a4acdbe91a01",
      "id": "CVE-2023-4586",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2023-4586 is a false positive for io.netty:netty-testsuite 4.1.63.Final-tuxcare.4."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:53fd5f0a-7bf0-5726-8fe2-0b321d16cdcb",
      "id": "CVE-2024-29025",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-29025 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-testsuite."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bfb60942-2478-5428-a24a-1e9e2376c012",
      "id": "CVE-2024-47535",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-47535 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-testsuite."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ed433c77-cdb0-5690-b41d-5a30a5bcef34",
      "id": "CVE-2025-24970",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-24970 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-testsuite."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a4265b36-c283-574f-90da-119d374999eb",
      "id": "CVE-2025-25193",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-25193 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-testsuite."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3d886d0b-d35e-53d5-b7b9-a75c7ca8a423",
      "id": "CVE-2025-55163",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55163 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-testsuite."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d40f8767-d70b-52ec-9064-459eebe90d26",
      "id": "CVE-2025-58056",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58056 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-testsuite."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9bd83a55-ae5c-5091-a9e1-030608f085aa",
      "id": "CVE-2025-58057",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-58057 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-testsuite."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:76cd3b7d-b331-5172-b46f-6a38dfe0bf05",
      "id": "CVE-2025-59419",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-59419 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-testsuite."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b07e6b74-8a1f-5245-99e5-54e7d9f1eabb",
      "id": "CVE-2025-67735",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-67735 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-testsuite."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8b8bded5-67e5-55c4-8e50-33b2957bedd7",
      "id": "CVE-2026-33870",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33870 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-testsuite."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:64532f0d-52de-5a9b-b839-3fa04b0f4138",
      "id": "CVE-2026-33871",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33871 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-testsuite."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:df74e7cc-7443-574d-af1a-935ad3f9360f",
      "id": "CVE-2026-41417",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41417 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-testsuite."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3e983339-7a99-54f2-b588-a8317aed3e50",
      "id": "CVE-2026-42577",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42577 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-testsuite."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a7078512-77c0-5363-81b4-1816205b973b",
      "id": "CVE-2026-42578",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42578 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-testsuite."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cfe4cb1c-7e1b-5063-8811-453ab46dc072",
      "id": "CVE-2026-42579",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42579 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-testsuite."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:562a7d76-b2ae-54e6-8f0c-16c4264f389c",
      "id": "CVE-2026-42580",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42580 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-testsuite."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3bf2d095-fea6-5c24-a0a7-b64f89cc425c",
      "id": "CVE-2026-42581",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42581 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-testsuite."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:87053852-3dc8-56ed-a15b-4511ddd93210",
      "id": "CVE-2026-42583",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42583 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-testsuite."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ebf50bdc-fd3e-5c1a-a48e-d85837662f9d",
      "id": "CVE-2026-42584",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42584 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-testsuite."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6e34c0fb-b936-5b9d-b454-ac33ace5c5c0",
      "id": "CVE-2026-42585",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42585 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-testsuite."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:40a6183e-f526-515e-9a4f-2f76998c88c7",
      "id": "CVE-2026-42586",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42586 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-testsuite."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f90df5be-b674-54db-b0a6-58f4adbf88c8",
      "id": "CVE-2026-42587",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42587 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-testsuite."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2a6dcf80-5d9b-584d-a36b-cae52bbe1037",
      "id": "CVE-2026-44248",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44248 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-testsuite."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cc6a04fe-b9ff-5e4a-af3d-5882c28eda17",
      "id": "CVE-2026-44249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44249 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-testsuite."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1d9c645d-6ebf-5f22-8f2e-4de9c8444a05",
      "id": "CVE-2026-44250",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44250 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-testsuite."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a50a8121-d81d-59c2-b8d8-e67cf884184d",
      "id": "CVE-2026-44890",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-testsuite."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a9d209ee-8d14-5676-9285-a1241345f495",
      "id": "CVE-2026-44891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44891 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-testsuite."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9a9399ec-7680-592b-b0b1-d8040df69a8b",
      "id": "CVE-2026-44893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44893 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-testsuite."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:faa9b8c8-9d9e-5140-b1ea-de1597968126",
      "id": "CVE-2026-45416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45416 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-testsuite."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8bf3619c-9790-5b5e-b768-564c8d7020e0",
      "id": "CVE-2026-45536",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45536 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-testsuite."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c113da7d-97f7-5034-84e3-e34c97e2cd21",
      "id": "CVE-2026-45673",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45673 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-testsuite."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c72ea7fe-3579-5d08-b385-831cc36e7d6b",
      "id": "CVE-2026-45674",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45674 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-testsuite."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b22b6499-2eac-5b31-b830-0d7af23daf62",
      "id": "CVE-2026-46340",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-46340 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-testsuite."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:84598274-b716-5c1c-9f85-f06eb6d511d8",
      "id": "CVE-2026-47244",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47244 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-testsuite."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:104f293c-665e-54c4-91d8-b9f934956673",
      "id": "CVE-2026-47691",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47691 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-testsuite."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b2df0545-a105-5ed8-a7f4-94179ab6f90d",
      "id": "CVE-2026-48006",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48006 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-testsuite."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d41513c5-cb99-5759-a24d-c0d4b3fde936",
      "id": "CVE-2026-48043",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-48043 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-testsuite."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6a0a66fc-2985-5296-a241-d5a90ca82458",
      "id": "CVE-2026-48059",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48059 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-testsuite."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7af18d01-6150-57b6-b319-eb9fafdda4bc",
      "id": "CVE-2026-50010",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50010 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-testsuite."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:14ee0a49-e122-5d3a-bee6-35fbe386b356",
      "id": "CVE-2026-50011",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50011 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-testsuite."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:51abcf87-575f-5956-abb9-c0413ea65789",
      "id": "CVE-2026-50020",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50020 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-testsuite."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:be729d8d-ddd1-5b12-8da8-093996bf9de1",
      "id": "CVE-2026-50560",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-testsuite."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a8f6638c-55b3-5a77-86bb-66408a5793d9",
      "id": "CVE-2026-55831",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55831 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-testsuite."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:103e4484-7593-5e0a-9417-ceb21dcead0a",
      "id": "CVE-2026-55833",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55833 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-testsuite."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a60bb0fd-5879-58f7-a610-cdcbfe6d0f7f",
      "id": "CVE-2026-55851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55851 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-testsuite."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7d1b3151-8f9b-5c5f-84cf-5533c5e28dc2",
      "id": "CVE-2026-56745",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56745 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-testsuite."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:feb2efaa-1fe4-509b-b9a8-35e1645c4eb5",
      "id": "CVE-2026-56746",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56746 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-testsuite."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8866f1ab-3dd3-5398-9f86-a50d607721f0",
      "id": "CVE-2026-56817",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-56817 does not affect version 4.1.63.Final-tuxcare.4 of io.netty:netty-testsuite. not_affected \u2014 The Netty codec-xml module contains XmlDecoder, which instantiates an Aalto XML parser without security configuration (line 38: new InputFactoryImpl() with no XXE protection). However, this is a library component that Netty itself does not use in its own production code. The vulnerability only manifests when downstream applications explicitly add XmlDecoder to their Netty channel pipelines. Per..."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:93b5d3f9-9d81-5eb6-83ee-e9d73e3e8192",
      "id": "CVE-2026-56818",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56818 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-testsuite."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8f501e22-c1ee-59f8-a22f-4b11733a6597",
      "id": "CVE-2026-56819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56819 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-testsuite."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5433a3e7-a0b3-5d07-9a4c-0fbc65642cb0",
      "id": "CVE-2026-59898",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59898 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-testsuite."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:528b8481-e23f-5936-af3c-846bcdb34450",
      "id": "CVE-2026-59899",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59899 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-testsuite."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3a9e848d-502c-564e-8950-93d4e226b1a7",
      "id": "CVE-2026-59900",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59900 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-testsuite."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:94ad2dfd-dbd8-51e2-9c1a-eb61a2342b9f",
      "id": "CVE-2026-59901",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59901 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-testsuite."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a6aed97b-0dc3-500d-9882-14ddc1349894",
      "id": "CVE-2026-59919",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59919 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-testsuite."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e4596a30-d863-5f24-83ce-0a2368f8eb84",
      "id": "CVE-2026-59920",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59920 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-testsuite."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:04ab1541-f57d-5dd7-ac2f-53dbd8157093",
      "id": "CVE-2026-59921",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59921 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-testsuite."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2adfdefe-b6c3-58d2-b75a-d80c20413e6b",
      "id": "CVE-2026-73507",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-73507 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-testsuite."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dc9bab00-da03-5993-bb53-3e167d95807f",
      "id": "CVE-2026-73508",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-73508 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-testsuite."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f980ef01-4053-5e5c-affc-5c61340a470c",
      "id": "GHSA-mfg7-5gfp-c4w3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-testsuite."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:22c8b085-fe85-5152-bf31-b7ad90cfe89b",
      "id": "GHSA-v74w-7mr3-4qg3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-testsuite."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:82aeec30-8258-5c1e-acf8-0284a1f0fe2a",
      "id": "GHSA-xpw8-rcwv-8f8p",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-xpw8-rcwv-8f8p affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-testsuite."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite@4.1.63.Final-tuxcare.4"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.netty/netty-testsuite@4.1.63.Final-tuxcare.4"
    }
  ]
}