{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:6365bb79-bfea-5ba0-b4fb-224516866955",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.73.Final-tuxcare.3",
      "type": "library",
      "group": "io.netty",
      "name": "netty-transport-native-kqueue",
      "version": "4.1.73.Final-tuxcare.3",
      "purl": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.73.Final-tuxcare.3"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:14eeb75a-fee1-54b7-b7c1-0bc26ca13b52",
      "id": "CVE-2022-24823",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-24823 is fixed in version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a806db83-cd28-5f85-a1c0-5df4154f4862",
      "id": "CVE-2022-41881",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-41881 is fixed in version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c6b5a7ee-d810-52ba-9be5-15d328805431",
      "id": "CVE-2022-41915",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-41915 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7fc72ebc-8966-5cdc-b3f7-7d3ecfc75d67",
      "id": "CVE-2023-34462",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-34462 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:207ac84d-4076-55b3-a95e-566c6a1b853e",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-44487 is fixed in version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b7895a9a-79f9-5dee-abee-741de6b5acb6",
      "id": "CVE-2023-4586",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2023-4586 is a false positive for io.netty:netty-transport-native-kqueue 4.1.73.Final-tuxcare.3."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:08fd9a73-f18b-53d9-b200-3e187c3f4698",
      "id": "CVE-2024-29025",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-29025 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:03862878-635e-54bd-b2f7-bd189f21abe8",
      "id": "CVE-2024-47535",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-47535 is fixed in version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3cc4a208-e342-592f-bdc2-9c605b845abe",
      "id": "CVE-2025-24970",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-24970 is fixed in version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b56a018c-c1ed-507f-bfb5-ad74198f0078",
      "id": "CVE-2025-25193",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-25193 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:68aad908-bd1a-5c99-9947-191c1c23c253",
      "id": "CVE-2025-55163",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-55163 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5531c09b-5cf8-57e9-9e6f-ca486aea45fd",
      "id": "CVE-2025-58056",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58056 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5f13abd7-8b5a-5288-837d-6473909974f3",
      "id": "CVE-2025-58057",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58057 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:042ef1b4-8f10-5c7a-98c9-379e1e673f61",
      "id": "CVE-2025-59419",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-59419 is fixed in version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ca63231a-3d05-52bb-9bf7-8b6272692af5",
      "id": "CVE-2025-67735",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-67735 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:768f2377-800e-52de-9c51-53429db138ef",
      "id": "CVE-2026-33870",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33870 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5b80878e-6d50-5938-b897-7381973b3166",
      "id": "CVE-2026-33871",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33871 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e67875a2-310a-5e0f-8a32-4dcdcf674235",
      "id": "CVE-2026-41417",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41417 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:749f3ff3-db62-5daf-8159-8e73c91edd88",
      "id": "CVE-2026-42577",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42577 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:554dea9f-89ad-50f6-ad97-0561dec0cb5a",
      "id": "CVE-2026-42578",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42578 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5c4d84b7-efa6-50bf-9533-72fe20eeeb78",
      "id": "CVE-2026-42579",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42579 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:508eb913-e515-597d-84d9-33f14006498f",
      "id": "CVE-2026-42580",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42580 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:250e97e2-cfee-589f-8015-246a245dd8df",
      "id": "CVE-2026-42581",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42581 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4e3b631f-99c7-595b-a93a-dfd6a905311b",
      "id": "CVE-2026-42583",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42583 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:60d4c897-90fa-52cf-8bc8-527dd937ccb0",
      "id": "CVE-2026-42584",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42584 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4eabe3a4-8f2b-592c-b018-08a6e0f33841",
      "id": "CVE-2026-42585",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42585 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f7d68559-13cd-54cb-a38f-0241906e0dad",
      "id": "CVE-2026-42586",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42586 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0474d3bd-5439-5f86-80cf-5c5723b29073",
      "id": "CVE-2026-42587",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42587 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:20bcc453-c6be-50a9-9c03-7acca2bf7d5f",
      "id": "CVE-2026-44248",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44248 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:03cf9bf4-c496-50bb-99a3-1a450d39cfa8",
      "id": "CVE-2026-44249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44249 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f0901340-448e-53d2-825e-a77c8eb86785",
      "id": "CVE-2026-44250",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44250 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:32c4fda3-0429-58e5-985c-ac1ef72921dd",
      "id": "CVE-2026-44890",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:589f63e9-211a-5fdb-8493-7748a959cd83",
      "id": "CVE-2026-44891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44891 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:60b09a1a-f290-5483-81da-09cec72adf97",
      "id": "CVE-2026-44893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44893 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1ceba84c-39a9-591f-a9c4-463df8941d31",
      "id": "CVE-2026-45416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45416 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cddf305b-ecd9-5be4-932d-8dbe82efedeb",
      "id": "CVE-2026-45536",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45536 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9027f4ed-62fa-55c4-8176-c7019989b071",
      "id": "CVE-2026-45673",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45673 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:931c7426-08f8-5219-8e00-c7c2f296e65a",
      "id": "CVE-2026-45674",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45674 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bb51bbb6-5610-598f-b95e-8d7df4b6a301",
      "id": "CVE-2026-46340",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-46340 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:35219c1f-fd46-5222-ac93-526cc21f176a",
      "id": "CVE-2026-47244",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47244 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c2eca2c0-12ca-595e-9e08-dcdf0db24cb0",
      "id": "CVE-2026-47691",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47691 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0ddd1c50-ec8b-53ee-9b27-299925fb4a84",
      "id": "CVE-2026-48006",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48006 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3ae4f9ca-70ab-5e86-90be-16906e137b04",
      "id": "CVE-2026-48043",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-48043 does not affect version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-native-kqueue. not_affected \u2014 Version 4.1.73 is not affected by CVE-2026-48043. The target uses a loop-based architecture with try-finally protection (introduced in 2016) that prevents the buffer leak described in the CVE. The vulnerable ChannelInboundHandlerAdapter pattern that the upstream patch fixes does not exist in this version."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:73b231c6-2a8a-586d-a49d-2125adf44423",
      "id": "CVE-2026-48059",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48059 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a393d6b6-d21b-52a8-9a7c-43320fc8bb08",
      "id": "CVE-2026-50010",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50010 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fa7db0e8-6db5-5d56-8313-27d336991cac",
      "id": "CVE-2026-50011",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50011 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:79d1d56b-f795-5471-a276-f3ec3bf1f662",
      "id": "CVE-2026-50020",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50020 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e820919d-24db-5c34-afba-4a191f88a5d1",
      "id": "CVE-2026-50560",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b6b7b8bc-3558-5365-a572-5ac14c94cf64",
      "id": "CVE-2026-55831",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55831 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cd4bf682-46bd-5431-a755-abb93975403b",
      "id": "CVE-2026-55833",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55833 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:eca48e65-3d07-597c-9e5a-30d70cf859fc",
      "id": "CVE-2026-55851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55851 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:07bf33d0-c49d-5c31-bca2-51ebc3b0ce11",
      "id": "CVE-2026-56745",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56745 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3fe4a03a-0430-575a-a022-84af188a09a1",
      "id": "CVE-2026-56746",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56746 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:240bdcea-d541-5038-9e21-a31f08d1344d",
      "id": "CVE-2026-56817",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56817 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1edd79d7-c2c7-504e-bbf6-8f40463e36da",
      "id": "CVE-2026-56818",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-56818 does not affect version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-native-kqueue. not_affected \u2014 The target version 4.1.73.Final-tuxcare.2 is NOT AFFECTED by CVE-2026-56818. The vulnerable code pattern (configurable `maxElements` limit check without cleanup, contrasting with `maxNestedArrayDepth` limit check WITH cleanup) was introduced in version 4.1.135.Final through commits e51c64c964 and 728c98b8ec (dated 2026-06-01/02). The target version predates these features entirely and does not ..."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:29f746db-b5aa-56db-96db-50c2aa2ce6ca",
      "id": "CVE-2026-56819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56819 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8cd4a8d3-d68e-549f-89c4-a1af4e8b2340",
      "id": "CVE-2026-59898",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59898 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:49648461-1559-5264-b049-be654a7ae3b6",
      "id": "CVE-2026-59899",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59899 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c4f2b703-0eb0-59f9-877e-aa331e400aef",
      "id": "CVE-2026-59900",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59900 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a7cd7520-4d7d-5667-8c97-a0cc0220cf90",
      "id": "CVE-2026-59901",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59901 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9307eb9a-fcbb-554d-bcca-554a6135400a",
      "id": "CVE-2026-59919",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59919 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cab58912-20f4-5790-a966-0be26133b13f",
      "id": "CVE-2026-59920",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59920 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f68ab7af-0512-50e0-ad80-fc619b5fb6f8",
      "id": "CVE-2026-59921",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59921 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:30eb9842-eb03-5b95-902d-cdad685b19b0",
      "id": "CVE-2026-73507",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-73507 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:75b41e99-6769-5d3a-a8e6-f1f66c1f1632",
      "id": "CVE-2026-73508",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-73508 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c079c63f-d67b-5f81-adbe-9fc7c65f59db",
      "id": "GHSA-mfg7-5gfp-c4w3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ac595ff4-6af6-534e-911f-9b1f6e2ee730",
      "id": "GHSA-v74w-7mr3-4qg3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ac0f70f8-8683-5912-8ba7-714e3995c500",
      "id": "GHSA-xpw8-rcwv-8f8p",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-xpw8-rcwv-8f8p affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.73.Final-tuxcare.3"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.73.Final-tuxcare.3"
    }
  ]
}