{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:4b7fc42d-4bf6-516c-a2dc-0579be2430a7",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/io.netty/netty-transport-classes-kqueue@4.1.73.Final-tuxcare.3",
      "type": "library",
      "group": "io.netty",
      "name": "netty-transport-classes-kqueue",
      "version": "4.1.73.Final-tuxcare.3",
      "purl": "pkg:maven/io.netty/netty-transport-classes-kqueue@4.1.73.Final-tuxcare.3"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:e1119053-0f23-545c-b7d2-c5e647087265",
      "id": "CVE-2022-24823",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-24823 is fixed in version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-classes-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-kqueue@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ac710485-a439-561b-a106-f9af6f2b9e21",
      "id": "CVE-2022-41881",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-41881 is fixed in version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-classes-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-kqueue@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:18397ff6-86d9-54ff-acf4-63e2e489a93c",
      "id": "CVE-2022-41915",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-41915 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-classes-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-kqueue@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9018306c-236a-5cbd-ba25-66efffbb20c9",
      "id": "CVE-2023-34462",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-34462 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-classes-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-kqueue@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9cf0c2b3-a6c4-5029-9665-d625d4a6ca0c",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-44487 is fixed in version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-classes-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-kqueue@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:92ed5e6c-97b2-5de0-926f-022b4dc17292",
      "id": "CVE-2023-4586",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2023-4586 is a false positive for io.netty:netty-transport-classes-kqueue 4.1.73.Final-tuxcare.3."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-kqueue@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d0bda9cc-610b-540c-b865-218af573c275",
      "id": "CVE-2024-29025",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-29025 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-classes-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-kqueue@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:245771bf-84ad-5e57-b0fe-4b11bb521904",
      "id": "CVE-2024-47535",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-47535 is fixed in version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-classes-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-kqueue@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bad9a7d9-35e3-5ce3-a965-9c39e92da69d",
      "id": "CVE-2025-24970",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-24970 is fixed in version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-classes-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-kqueue@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:18e54d90-6deb-52e6-a511-dde08d87a806",
      "id": "CVE-2025-25193",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-25193 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-classes-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-kqueue@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:02e10e52-dde2-56ac-8f3d-415a20e6d4fd",
      "id": "CVE-2025-55163",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-55163 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-classes-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-kqueue@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:82c8d037-695f-5144-9454-b26a2320c4ba",
      "id": "CVE-2025-58056",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58056 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-classes-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-kqueue@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:17f88d2e-df02-5365-b829-b14dcab70e3e",
      "id": "CVE-2025-58057",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58057 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-classes-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-kqueue@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1dd2b9ce-9bf4-52fa-9f72-00814069d7ed",
      "id": "CVE-2025-59419",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-59419 is fixed in version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-classes-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-kqueue@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4b151157-ac21-5537-bc8e-12f4d63a0303",
      "id": "CVE-2025-67735",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-67735 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-classes-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-kqueue@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0e0826d7-20f9-5f27-bd1a-dc536b6c08b5",
      "id": "CVE-2026-33870",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33870 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-classes-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-kqueue@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a92dbbd3-5e8e-51bd-92fa-854ed68e4023",
      "id": "CVE-2026-33871",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33871 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-classes-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-kqueue@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0d56c3a4-6fad-54e4-b919-085f394fdeef",
      "id": "CVE-2026-41417",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41417 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-classes-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-kqueue@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:74762ab8-d821-587c-ae54-f845c32f540d",
      "id": "CVE-2026-42577",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42577 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-classes-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-kqueue@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:33a994c2-e197-54da-bf03-848af7db9b56",
      "id": "CVE-2026-42578",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42578 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-classes-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-kqueue@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a6f1290e-28d0-527f-afa4-2a2b211ce909",
      "id": "CVE-2026-42579",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42579 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-classes-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-kqueue@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f4d9d412-2900-56bd-b094-3255e6ec0c4e",
      "id": "CVE-2026-42580",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42580 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-classes-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-kqueue@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2c9608c5-c2ea-5f60-9bd6-89c960aba8c0",
      "id": "CVE-2026-42581",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42581 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-classes-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-kqueue@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a761cdfa-ab69-5f6f-9f3c-d3c7523a6a9e",
      "id": "CVE-2026-42583",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42583 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-classes-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-kqueue@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a3b2564b-defd-58b8-a485-565368024761",
      "id": "CVE-2026-42584",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42584 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-classes-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-kqueue@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2d2b4643-2db8-5c1a-94e1-8d7156307581",
      "id": "CVE-2026-42585",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42585 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-classes-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-kqueue@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:308f7544-5255-513d-9843-3ffcbffac634",
      "id": "CVE-2026-42586",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42586 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-classes-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-kqueue@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5201a854-9a23-5a94-b3e2-243e4afa2b6b",
      "id": "CVE-2026-42587",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42587 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-classes-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-kqueue@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:10a32a2f-b1be-5c59-b6f2-85bcae03b04c",
      "id": "CVE-2026-44248",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44248 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-classes-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-kqueue@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f593043d-be2a-5f5c-a9a0-407cd093b7d5",
      "id": "CVE-2026-44249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44249 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-classes-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-kqueue@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fee56056-86ea-520e-9ccf-7dd8cfeb9df6",
      "id": "CVE-2026-44250",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44250 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-classes-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-kqueue@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:84926a91-2d7f-5a9d-8bd3-ea2c2cd126a4",
      "id": "CVE-2026-44890",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-classes-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-kqueue@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:96006dfd-3d3b-5056-8d5a-7141fb63e073",
      "id": "CVE-2026-44891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44891 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-classes-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-kqueue@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f65d45f6-d5c4-5b5e-8971-9779c6d54c13",
      "id": "CVE-2026-44893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44893 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-classes-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-kqueue@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a29fa3aa-7c8d-5302-8506-ec07b4f872f6",
      "id": "CVE-2026-45416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45416 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-classes-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-kqueue@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:462cc473-b6bb-5dbe-a8f4-623b182f972b",
      "id": "CVE-2026-45536",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45536 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-classes-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-kqueue@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7c6000d7-9cf2-5bbe-8281-4b52ff9ce466",
      "id": "CVE-2026-45673",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45673 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-classes-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-kqueue@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3fefb49b-93a2-568d-b6fd-c9afad8b657f",
      "id": "CVE-2026-45674",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45674 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-classes-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-kqueue@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0786d2d7-e97a-5141-b632-52e16602eeee",
      "id": "CVE-2026-46340",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-46340 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-classes-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-kqueue@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:29cdd625-81eb-5331-baae-67127cb50ac7",
      "id": "CVE-2026-47244",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47244 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-classes-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-kqueue@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2b8090cb-1319-5d16-a00a-562f19e2c4d6",
      "id": "CVE-2026-47691",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47691 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-classes-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-kqueue@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:94b39809-d0d6-5ffc-b193-7b00378ecfb7",
      "id": "CVE-2026-48006",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48006 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-classes-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-kqueue@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3f262d91-c5b7-5631-af91-26756608e5ac",
      "id": "CVE-2026-48043",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-48043 does not affect version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-classes-kqueue. not_affected \u2014 Version 4.1.73 is not affected by CVE-2026-48043. The target uses a loop-based architecture with try-finally protection (introduced in 2016) that prevents the buffer leak described in the CVE. The vulnerable ChannelInboundHandlerAdapter pattern that the upstream patch fixes does not exist in this version."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-kqueue@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:47c24dcc-1562-5ca7-91d9-3884b4c8a7fd",
      "id": "CVE-2026-48059",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48059 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-classes-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-kqueue@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1314ad79-3b57-5206-82d9-6f9cc64254a9",
      "id": "CVE-2026-50010",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50010 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-classes-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-kqueue@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d246741d-4109-5409-a606-8aa66517b0f9",
      "id": "CVE-2026-50011",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50011 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-classes-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-kqueue@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c12bbe47-76b4-56cc-845c-004d2d3756e9",
      "id": "CVE-2026-50020",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50020 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-classes-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-kqueue@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:248c4694-1cde-590b-bad5-0a735ef8aac7",
      "id": "CVE-2026-50560",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-classes-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-kqueue@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dc3166e0-a779-5d36-8ddf-895f4442c5b6",
      "id": "CVE-2026-55831",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55831 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-classes-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-kqueue@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:969e5406-f55b-5967-8e51-0a7afd417dac",
      "id": "CVE-2026-55833",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55833 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-classes-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-kqueue@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ea2e84cf-c64b-526e-8acd-4436f2139b7d",
      "id": "CVE-2026-55851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55851 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-classes-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-kqueue@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:acf67853-0b6c-5145-bd1f-9c2a899e015b",
      "id": "CVE-2026-56745",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56745 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-classes-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-kqueue@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:adb509ab-b726-56e3-a7df-57731c30ea9f",
      "id": "CVE-2026-56746",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56746 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-classes-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-kqueue@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4c42d4dc-b2a4-59c9-9723-35fc48cf004b",
      "id": "CVE-2026-56817",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56817 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-classes-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-kqueue@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3619e6c9-73b1-5fba-ae21-3be5901baefc",
      "id": "CVE-2026-56818",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-56818 does not affect version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-classes-kqueue. not_affected \u2014 The target version 4.1.73.Final-tuxcare.2 is NOT AFFECTED by CVE-2026-56818. The vulnerable code pattern (configurable `maxElements` limit check without cleanup, contrasting with `maxNestedArrayDepth` limit check WITH cleanup) was introduced in version 4.1.135.Final through commits e51c64c964 and 728c98b8ec (dated 2026-06-01/02). The target version predates these features entirely and does not ..."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-kqueue@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a59413d1-5450-5521-baaa-9dbea6380647",
      "id": "CVE-2026-56819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56819 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-classes-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-kqueue@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:aa734c2e-7b1e-5783-b8b4-0d8de6acc887",
      "id": "CVE-2026-59898",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59898 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-classes-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-kqueue@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:133814f1-c328-5bdb-b3d9-49bac068f784",
      "id": "CVE-2026-59899",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59899 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-classes-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-kqueue@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7e3b8cd7-e01f-5479-b388-1c6b9e688701",
      "id": "CVE-2026-59900",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59900 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-classes-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-kqueue@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c35216eb-6d9f-54b5-ab4a-b2be7a6d0507",
      "id": "CVE-2026-59901",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59901 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-classes-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-kqueue@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1757c7f1-37b7-500e-903c-e90ea6729e48",
      "id": "CVE-2026-59919",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59919 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-classes-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-kqueue@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dabcd0be-6d07-5874-a8dd-82a252568e41",
      "id": "CVE-2026-59920",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59920 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-classes-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-kqueue@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:71abd211-92d6-52e9-95b5-14ba51e609ff",
      "id": "CVE-2026-59921",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59921 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-classes-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-kqueue@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a0d075a4-697b-5c53-a912-6de123ee954d",
      "id": "GHSA-mfg7-5gfp-c4w3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-classes-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-kqueue@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:db965f7f-0025-5834-8feb-bb94b3a2e0e8",
      "id": "GHSA-v74w-7mr3-4qg3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-classes-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-kqueue@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4d30635a-4061-595d-8962-66526e83f124",
      "id": "GHSA-xpw8-rcwv-8f8p",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-xpw8-rcwv-8f8p affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-classes-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-classes-kqueue@4.1.73.Final-tuxcare.3"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.netty/netty-transport-classes-kqueue@4.1.73.Final-tuxcare.3"
    }
  ]
}