{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:ac33c46b-79b2-5168-abfc-d7fb0de87918",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.75.Final-tuxcare.4",
      "type": "library",
      "group": "io.netty",
      "name": "netty-transport-classes-epoll",
      "version": "4.1.75.Final-tuxcare.4",
      "purl": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.75.Final-tuxcare.4"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:f54bdea8-9496-5a64-b943-29af66f8055c",
      "id": "CVE-2022-24823",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-24823 is fixed in version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-classes-epoll."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0f82d825-03e8-5641-b546-2f5f454408ad",
      "id": "CVE-2022-41881",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-41881 is fixed in version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-classes-epoll."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:696f5bc1-f711-53bd-acfb-fee9d761dfe1",
      "id": "CVE-2022-41915",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-41915 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-classes-epoll."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a6c680de-bb79-5bba-a145-d200050736ab",
      "id": "CVE-2023-34462",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-34462 is fixed in version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-classes-epoll."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d1928bd8-2952-50f2-913b-77d49bff1fde",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-44487 is fixed in version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-classes-epoll."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cf22335b-5fc5-5c52-9baa-2457370d2b8e",
      "id": "CVE-2023-4586",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2023-4586 is a false positive for io.netty:netty-transport-classes-epoll 4.1.75.Final-tuxcare.4."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:61006431-18db-5d5a-91ee-ca9a9140360c",
      "id": "CVE-2024-29025",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-29025 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-classes-epoll."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:43843baf-8c3b-57aa-a709-d328b76b8ff6",
      "id": "CVE-2024-47535",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-47535 is fixed in version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-classes-epoll."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:22c1ebd2-c93e-5bce-b58d-505f98613f87",
      "id": "CVE-2025-24970",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-24970 is fixed in version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-classes-epoll."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:340f61a1-e600-5084-8be4-223b387097c5",
      "id": "CVE-2025-25193",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-25193 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-classes-epoll."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1d528444-e90f-514b-9f2e-31231bb7fed6",
      "id": "CVE-2025-55163",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-55163 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-classes-epoll."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dd2e34df-7ba2-5c0f-b061-e9d7956396a2",
      "id": "CVE-2025-58056",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-58056 is fixed in version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-classes-epoll."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:76fe07aa-02a1-5188-a9ff-edc9ad249eda",
      "id": "CVE-2025-58057",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58057 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-classes-epoll."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e2c6548a-fe1f-5026-b90d-edd906792b2a",
      "id": "CVE-2025-59419",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-59419 is fixed in version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-classes-epoll."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d1c88871-5c2a-586a-96ee-b5eb7b76791a",
      "id": "CVE-2025-67735",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-67735 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-classes-epoll."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6d2e9c1a-9591-5e31-ade8-f34770cc57bd",
      "id": "CVE-2026-33870",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33870 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-classes-epoll."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:60e41514-8791-582e-92e2-0615b84305ee",
      "id": "CVE-2026-33871",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33871 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-classes-epoll."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c9321f7d-7a26-5f52-a223-2ddc3e2c3346",
      "id": "CVE-2026-41417",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41417 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-classes-epoll."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b4639e80-83de-5f84-97e8-583e506135c7",
      "id": "CVE-2026-42577",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42577 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-classes-epoll."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3cb2a249-94d2-5600-882a-6d5b533c8e81",
      "id": "CVE-2026-42578",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42578 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-classes-epoll."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:572039fc-c6dc-5ea0-9e78-ea65799f283f",
      "id": "CVE-2026-42579",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42579 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-classes-epoll."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c7ba49e7-5277-5f56-b128-9a9268544e9a",
      "id": "CVE-2026-42580",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42580 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-classes-epoll."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9cf1f50a-0008-5f35-9cf4-94ad643fb68d",
      "id": "CVE-2026-42581",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42581 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-classes-epoll."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5b911062-463f-5f5e-8cd7-e1931318eb31",
      "id": "CVE-2026-42583",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42583 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-classes-epoll."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:565f266b-487d-525b-8ecd-c416d878f3aa",
      "id": "CVE-2026-42584",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42584 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-classes-epoll."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b60bba14-5ff3-5c2a-b981-a3e10e0d3cc7",
      "id": "CVE-2026-42585",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42585 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-classes-epoll."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7782ef01-d08d-5d3d-a1a9-a5af4668eafd",
      "id": "CVE-2026-42586",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42586 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-classes-epoll."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c55d697a-1eba-56ce-9f63-80d9653da280",
      "id": "CVE-2026-42587",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42587 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-classes-epoll."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:90e8816b-1bf8-5f05-a550-ea2d71c1d772",
      "id": "CVE-2026-44248",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44248 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-classes-epoll."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b4671268-4e1d-5090-8a08-06baa1df8e4f",
      "id": "CVE-2026-44249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44249 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-classes-epoll."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5c0b0927-f16d-5181-85ab-3f0164eeae53",
      "id": "CVE-2026-44250",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44250 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-classes-epoll."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e35f8820-7e93-5443-b38e-9667ecb3d144",
      "id": "CVE-2026-44890",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-classes-epoll."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:13a8ce34-a395-5099-850c-7c0c7d971110",
      "id": "CVE-2026-44891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44891 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-classes-epoll."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:52e7370b-b6aa-5eb1-99b6-d19465a5a53a",
      "id": "CVE-2026-44893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44893 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-classes-epoll."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9ad61bfd-a5c9-556b-b325-9f284ea50c1a",
      "id": "CVE-2026-45416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45416 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-classes-epoll."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fe7b4af7-af44-50d2-8647-4ef3d2665e23",
      "id": "CVE-2026-45536",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45536 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-classes-epoll."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7c0de1e4-f406-5e82-8c7a-096ffde46a90",
      "id": "CVE-2026-45673",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45673 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-classes-epoll."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1cf97e5a-e32b-5386-9bff-bfd6a120e2a8",
      "id": "CVE-2026-45674",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45674 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-classes-epoll."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d1b9c4f9-437d-544b-9807-b05881754265",
      "id": "CVE-2026-46340",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-46340 is fixed in version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-classes-epoll."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:65c203a7-cba8-5dbd-a818-6e839172a706",
      "id": "CVE-2026-47244",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47244 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-classes-epoll."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f3d75ef7-a9fa-572e-8ab7-67030ef25669",
      "id": "CVE-2026-47691",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47691 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-classes-epoll."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5af4d173-9974-50a3-8824-234e61a5539c",
      "id": "CVE-2026-48006",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48006 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-classes-epoll."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6a950db4-9367-5129-bd3c-abfbbf3ff340",
      "id": "CVE-2026-48043",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-48043 does not affect version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-classes-epoll. already_fixed \u2014 The target repository (Netty 4.1.75.Final-tuxcare.1) already contains equivalent protection against CVE-2026-48043. While the upstream patch targets a newer architecture with a ChannelInboundHandlerAdapter tail handler (introduced in CVE-2025-58057 refactoring), the target's older architecture implements the same defensive pattern: a try-finally block ensuring ByteBuf.release() is called uncond..."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8e070e79-bd8c-5d3e-a230-3025937a41db",
      "id": "CVE-2026-48059",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48059 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-classes-epoll."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e148275e-aa1e-5fae-a784-e94527f5b75c",
      "id": "CVE-2026-50010",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50010 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-classes-epoll."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:43069e9a-bc94-53e5-aee5-a50c65f11816",
      "id": "CVE-2026-50011",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50011 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-classes-epoll."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2d25f8ec-2c87-5ce4-8137-186bfa4e9b05",
      "id": "CVE-2026-50020",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50020 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-classes-epoll."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b2968225-c3a9-57ce-87f7-48c15311ea53",
      "id": "CVE-2026-50560",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-classes-epoll."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a9deb0e1-5412-5041-809d-989eb392b37d",
      "id": "CVE-2026-55831",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55831 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-classes-epoll."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7478b127-ee5b-5baf-95f0-77db413dbd5c",
      "id": "CVE-2026-55833",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55833 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-classes-epoll."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:532c3442-1d55-5679-9ed8-33d3b45dd082",
      "id": "CVE-2026-55851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55851 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-classes-epoll."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:628d2353-71f0-5565-b0c1-2d5448a39817",
      "id": "CVE-2026-56745",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56745 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-classes-epoll."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a7845633-29f4-551b-ae53-92cb85bebb27",
      "id": "CVE-2026-56746",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56746 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-classes-epoll."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4722eb02-d9e0-5189-bb5a-139e5a0413d5",
      "id": "CVE-2026-56817",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56817 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-classes-epoll."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9f7070ed-5a41-526c-8549-98650f3454e7",
      "id": "CVE-2026-56818",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-56818 does not affect version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-classes-epoll. not_affected \u2014 The target version 4.1.75.Final (released March 2022) predates the introduction of the vulnerable feature by over 4 years. CVE-2026-56818 describes incomplete cleanup when the `maxElements` limit is exceeded in RedisArrayAggregator. However, the `maxElements` configuration parameter and associated exception handling were introduced in June 2026 (commits e51c64c964 and 728c98b8ec), neither of wh..."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:df1025b7-e794-5321-bbbf-1b0ed7a2d8be",
      "id": "CVE-2026-56819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56819 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-classes-epoll."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:66585b60-4c57-591e-810b-69d817b77428",
      "id": "CVE-2026-59898",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59898 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-classes-epoll."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:36635eca-e6f5-5ca0-b251-8088096598ee",
      "id": "CVE-2026-59899",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59899 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-classes-epoll."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e917ccc0-4e98-51a5-990d-b01189100ba6",
      "id": "CVE-2026-59900",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59900 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-classes-epoll."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:490acf07-b666-5d0c-b68d-1c4b0457034d",
      "id": "CVE-2026-59901",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59901 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-classes-epoll."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e1941747-65bf-53c1-8e93-146739d615bb",
      "id": "CVE-2026-59919",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59919 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-classes-epoll."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:781efe15-28e7-5f03-bddf-af29dd330c43",
      "id": "CVE-2026-59920",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59920 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-classes-epoll."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:20dc3604-e73a-5402-a6aa-abd601ba76e9",
      "id": "CVE-2026-59921",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59921 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-classes-epoll."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:035cb3b5-2c93-5528-9719-512f5e59eb8b",
      "id": "CVE-2026-73507",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-73507 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-classes-epoll."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:012157cc-df26-5e8d-bde2-59c8e061c884",
      "id": "CVE-2026-73508",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-73508 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-classes-epoll."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7e9414f2-8bfa-5891-a602-4591f1783d94",
      "id": "GHSA-mfg7-5gfp-c4w3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-classes-epoll."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3c6fb3ea-ed46-5aeb-96a1-e963723cfe7b",
      "id": "GHSA-v74w-7mr3-4qg3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-classes-epoll."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:27c3cb80-e326-5be6-b377-7f6be61d604a",
      "id": "GHSA-xpw8-rcwv-8f8p",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-xpw8-rcwv-8f8p is fixed in version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-classes-epoll."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.75.Final-tuxcare.4"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.75.Final-tuxcare.4"
    }
  ]
}