{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:6c2145a7-a11c-5846-9da2-0c9d881a93ef",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.73.Final-tuxcare.3",
      "type": "library",
      "group": "io.netty",
      "name": "netty-transport-classes-epoll",
      "version": "4.1.73.Final-tuxcare.3",
      "purl": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.73.Final-tuxcare.3"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:37ab0f5d-1238-59d4-b296-0085cd700317",
      "id": "CVE-2022-24823",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-24823 is fixed in version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-classes-epoll."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ec2fbff9-a7de-5d96-9441-85a9fe922aa6",
      "id": "CVE-2022-41881",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-41881 is fixed in version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-classes-epoll."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8cde9e70-66e0-5340-a804-851c76f931e0",
      "id": "CVE-2022-41915",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-41915 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-classes-epoll."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d2ec7a65-1cf4-5a38-8c61-50f3a901c749",
      "id": "CVE-2023-34462",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-34462 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-classes-epoll."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d7260f75-0ad4-550e-87a6-459d2c9acfd6",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-44487 is fixed in version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-classes-epoll."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:51dbddad-9297-555d-81d8-f193fb310648",
      "id": "CVE-2023-4586",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2023-4586 is a false positive for io.netty:netty-transport-classes-epoll 4.1.73.Final-tuxcare.3."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c3caa8cf-dd24-52c6-9ef8-3f9bc77ccd7d",
      "id": "CVE-2024-29025",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-29025 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-classes-epoll."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:20144583-9e9f-59ad-82dc-6ef890465e80",
      "id": "CVE-2024-47535",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-47535 is fixed in version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-classes-epoll."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fc27bad8-e31b-5c38-a028-16d914f4927c",
      "id": "CVE-2025-24970",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-24970 is fixed in version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-classes-epoll."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ecbf0fe2-c65c-5c33-bac7-bd04574b12db",
      "id": "CVE-2025-25193",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-25193 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-classes-epoll."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6817e34c-8a8b-5e33-9c4f-d4f609170435",
      "id": "CVE-2025-55163",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-55163 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-classes-epoll."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8ac57a4d-e320-50ee-a035-e0af26408a23",
      "id": "CVE-2025-58056",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58056 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-classes-epoll."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7b7c10c5-99c6-59d5-b9b0-c24f9f018743",
      "id": "CVE-2025-58057",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58057 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-classes-epoll."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:13bed828-6ab0-5a40-9742-e06a7971ec0a",
      "id": "CVE-2025-59419",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-59419 is fixed in version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-classes-epoll."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:796f2e58-d14b-557f-b78f-ad487476b333",
      "id": "CVE-2025-67735",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-67735 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-classes-epoll."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4858f56e-a255-5f01-b649-7a238bea2bb9",
      "id": "CVE-2026-33870",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33870 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-classes-epoll."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b4e44d95-77bf-5dd5-896e-87ea117abe22",
      "id": "CVE-2026-33871",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33871 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-classes-epoll."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:408d4769-bceb-503f-af1a-eb75aed954ad",
      "id": "CVE-2026-41417",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41417 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-classes-epoll."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:63c7cdab-a93b-5a22-8e3d-f46df5996f29",
      "id": "CVE-2026-42577",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42577 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-classes-epoll."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:eed7e7ab-3ab4-5e36-9f8a-d43d5e60d9f0",
      "id": "CVE-2026-42578",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42578 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-classes-epoll."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4ac63519-bfd2-564c-a9d3-8e3532828620",
      "id": "CVE-2026-42579",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42579 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-classes-epoll."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c52f5c33-e00c-566a-9808-880749d6ecc4",
      "id": "CVE-2026-42580",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42580 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-classes-epoll."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8581b29d-349e-53ec-a68c-0e3521610c03",
      "id": "CVE-2026-42581",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42581 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-classes-epoll."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:152803db-d568-5908-b17d-8ebae7b3d8b3",
      "id": "CVE-2026-42583",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42583 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-classes-epoll."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:13fb8957-c485-5e36-8e30-c0f9bbe979be",
      "id": "CVE-2026-42584",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42584 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-classes-epoll."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:610374b6-a8d2-5e42-9257-478a69ce60d2",
      "id": "CVE-2026-42585",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42585 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-classes-epoll."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:960f9c9a-31b1-5cea-b643-1db9cc958f01",
      "id": "CVE-2026-42586",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42586 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-classes-epoll."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b959af2c-1388-54ad-b82d-112f1987eb4f",
      "id": "CVE-2026-42587",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42587 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-classes-epoll."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dd6221fc-46d1-5666-85a7-bb44eef72b10",
      "id": "CVE-2026-44248",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44248 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-classes-epoll."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ea440fb5-5aba-5044-8191-cb4a36cfc287",
      "id": "CVE-2026-44249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44249 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-classes-epoll."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0918e4e6-c890-5e5e-bfc8-b158686ea860",
      "id": "CVE-2026-44250",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44250 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-classes-epoll."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8941a8d2-9ca1-5867-af86-21f2b2444979",
      "id": "CVE-2026-44890",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-classes-epoll."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2c3c1a94-e311-5e4c-8959-55c815bec236",
      "id": "CVE-2026-44891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44891 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-classes-epoll."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7f8709f2-4fc5-5613-b75b-61f083688985",
      "id": "CVE-2026-44893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44893 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-classes-epoll."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:65f7f45a-176c-51bc-a51f-f7dba1a93fa8",
      "id": "CVE-2026-45416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45416 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-classes-epoll."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:62e9b0a4-634c-5000-9ba2-21e6762b9d76",
      "id": "CVE-2026-45536",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45536 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-classes-epoll."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fbee9fc5-7184-507c-a8a4-d7223487962e",
      "id": "CVE-2026-45673",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45673 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-classes-epoll."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:61550c34-0ea3-5499-a80d-2eb82bf4ee4b",
      "id": "CVE-2026-45674",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45674 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-classes-epoll."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:df416dfc-02df-523c-8cce-22958d50f6d2",
      "id": "CVE-2026-46340",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-46340 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-classes-epoll."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:26c3e901-d88b-5f9a-9552-5cca9284a4b2",
      "id": "CVE-2026-47244",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47244 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-classes-epoll."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:78de91b7-ce94-5c91-9995-b754e3e31c4a",
      "id": "CVE-2026-47691",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47691 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-classes-epoll."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e751ecb3-274a-5672-962a-c5b98ca1bd90",
      "id": "CVE-2026-48006",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48006 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-classes-epoll."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5dd3c52e-3a1b-53f2-a252-524110757f41",
      "id": "CVE-2026-48043",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-48043 does not affect version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-classes-epoll. not_affected \u2014 Version 4.1.73 is not affected by CVE-2026-48043. The target uses a loop-based architecture with try-finally protection (introduced in 2016) that prevents the buffer leak described in the CVE. The vulnerable ChannelInboundHandlerAdapter pattern that the upstream patch fixes does not exist in this version."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e8149da4-443f-5af3-a8a3-5cd97130a267",
      "id": "CVE-2026-48059",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48059 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-classes-epoll."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9fd5d479-2a42-5d2a-8efd-6ebea30366a5",
      "id": "CVE-2026-50010",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50010 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-classes-epoll."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:71360537-e05c-56c2-808a-d735971ca4b6",
      "id": "CVE-2026-50011",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50011 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-classes-epoll."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b6147364-8fce-5555-8837-b4e49989defe",
      "id": "CVE-2026-50020",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50020 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-classes-epoll."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c7f30d93-d3c7-53ed-bb29-fcfd95cfa0d7",
      "id": "CVE-2026-50560",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-classes-epoll."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:82d89834-7f6e-5a6c-9f6e-f58f81605ea9",
      "id": "CVE-2026-55831",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55831 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-classes-epoll."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fce7be83-ba46-5788-ae12-7542205f1687",
      "id": "CVE-2026-55833",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55833 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-classes-epoll."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e7c2c0f8-06df-59b0-8e54-59f3596e70bc",
      "id": "CVE-2026-55851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55851 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-classes-epoll."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:04551d64-b1b7-5979-aaf3-ac548adbf855",
      "id": "CVE-2026-56745",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56745 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-classes-epoll."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d9051478-e1c8-5b9c-a423-5e039477c701",
      "id": "CVE-2026-56746",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56746 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-classes-epoll."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:379887b6-f8af-5361-a921-3077e137f605",
      "id": "CVE-2026-56817",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56817 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-classes-epoll."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c515d3bc-9af6-5ca9-aa94-def294f09e6c",
      "id": "CVE-2026-56818",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-56818 does not affect version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-classes-epoll. not_affected \u2014 The target version 4.1.73.Final-tuxcare.2 is NOT AFFECTED by CVE-2026-56818. The vulnerable code pattern (configurable `maxElements` limit check without cleanup, contrasting with `maxNestedArrayDepth` limit check WITH cleanup) was introduced in version 4.1.135.Final through commits e51c64c964 and 728c98b8ec (dated 2026-06-01/02). The target version predates these features entirely and does not ..."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b1beb03c-b4fb-5445-a9a1-84f73e2d5e6b",
      "id": "CVE-2026-56819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56819 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-classes-epoll."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dab60e56-1424-577a-bbf3-341cdeaf379b",
      "id": "CVE-2026-59898",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59898 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-classes-epoll."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2784c5c0-8eba-5f7b-be6b-19f2f1f928c4",
      "id": "CVE-2026-59899",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59899 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-classes-epoll."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:92a97424-b890-58f8-99e8-9cd13fc40555",
      "id": "CVE-2026-59900",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59900 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-classes-epoll."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:27425910-3eb9-5bc3-8821-db5f3a6ff209",
      "id": "CVE-2026-59901",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59901 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-classes-epoll."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c2c1c057-59ee-5084-8a12-e4b6ea21e7ff",
      "id": "CVE-2026-59919",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59919 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-classes-epoll."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6e969f0c-1f96-5216-a6d1-afc03021f55e",
      "id": "CVE-2026-59920",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59920 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-classes-epoll."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2108117a-d9e3-5714-acb6-54e9ee27c410",
      "id": "CVE-2026-59921",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59921 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-classes-epoll."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:724c92ce-bc78-552a-9f62-792709bd8a8e",
      "id": "CVE-2026-73507",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-73507 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-classes-epoll."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6b5be6eb-50e5-56d3-86ab-eecffe913b95",
      "id": "CVE-2026-73508",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-73508 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-classes-epoll."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:38a42bbd-ba7d-50fc-90ee-211fe34a3bd8",
      "id": "GHSA-mfg7-5gfp-c4w3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-classes-epoll."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d9272310-cf84-5dc7-b6a8-e8f208fa075f",
      "id": "GHSA-v74w-7mr3-4qg3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-classes-epoll."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:687e067b-e1bb-59b3-a1d3-244a0d30e124",
      "id": "GHSA-xpw8-rcwv-8f8p",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-xpw8-rcwv-8f8p affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-classes-epoll."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.73.Final-tuxcare.3"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.73.Final-tuxcare.3"
    }
  ]
}