{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:fed5e781-1600-510c-92e7-6fa63e73dcc6",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.75.Final-tuxcare.4",
      "type": "library",
      "group": "io.netty",
      "name": "netty-transport-native-kqueue",
      "version": "4.1.75.Final-tuxcare.4",
      "purl": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.75.Final-tuxcare.4"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:7c65ea25-6661-5aff-91f8-8094fe5b632a",
      "id": "CVE-2022-24823",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-24823 is fixed in version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:97c28f8e-6f99-5f93-8fc1-901602f2323c",
      "id": "CVE-2022-41881",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-41881 is fixed in version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:793af67d-df5e-5ee6-9320-ad94060dba19",
      "id": "CVE-2022-41915",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-41915 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2c5ee850-d765-5c60-ac55-056dacf7e235",
      "id": "CVE-2023-34462",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-34462 is fixed in version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b5467bc4-ac89-5df9-a539-99785f499c3f",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-44487 is fixed in version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a3239300-0325-5d8a-bcf5-d2bbc5004b3e",
      "id": "CVE-2023-4586",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2023-4586 is a false positive for io.netty:netty-transport-native-kqueue 4.1.75.Final-tuxcare.4."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1a344c1f-e0d8-50f7-b45e-685eac7b3c69",
      "id": "CVE-2024-29025",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-29025 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4609296e-d03c-589f-ab4e-3c324132fc11",
      "id": "CVE-2024-47535",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-47535 is fixed in version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0fecd73d-0bbb-5db2-8598-3604d84671c1",
      "id": "CVE-2025-24970",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-24970 is fixed in version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ac2968cc-79d2-5505-99bf-332d4fc3b5a6",
      "id": "CVE-2025-25193",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-25193 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:22f4b99e-6311-550a-adc1-62c4342f652f",
      "id": "CVE-2025-55163",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-55163 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8dbc1042-df7b-549c-9630-1b21e2bcdb10",
      "id": "CVE-2025-58056",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-58056 is fixed in version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b0b33801-c85c-565b-aeb3-7299f2a9ca92",
      "id": "CVE-2025-58057",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58057 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:af0cdfea-6003-57c6-91e5-031e0b89d67d",
      "id": "CVE-2025-59419",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-59419 is fixed in version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b5259368-142b-5ad5-81cd-ada526fda3ef",
      "id": "CVE-2025-67735",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-67735 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:be9f3889-54ff-5697-aa58-e323091242d4",
      "id": "CVE-2026-33870",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33870 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:93ca96d0-22e9-57b2-b937-de5a828605d7",
      "id": "CVE-2026-33871",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33871 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0be998ce-881a-5361-8fa0-503713d09cce",
      "id": "CVE-2026-41417",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41417 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f6622ad3-2430-54ad-aa0f-035f7e032a40",
      "id": "CVE-2026-42577",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42577 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9eea7fc3-0cdf-5736-ae24-f6c4499428db",
      "id": "CVE-2026-42578",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42578 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1be65683-f766-55ba-916d-a650773c7d20",
      "id": "CVE-2026-42579",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42579 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:33a2bffe-7394-538d-bf59-8bcd4f0d792b",
      "id": "CVE-2026-42580",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42580 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b76790db-dd4e-565e-8a18-2b3a08ce5c95",
      "id": "CVE-2026-42581",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42581 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:07dece8e-1dbf-529f-99e5-7ac7e145475a",
      "id": "CVE-2026-42583",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42583 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ba73c84d-bc8b-5bfe-b8f5-3846a7807bf7",
      "id": "CVE-2026-42584",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42584 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1ab2e6f5-991d-52ef-ad92-e1274b12d71f",
      "id": "CVE-2026-42585",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42585 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:01f9ca63-00c5-5d3b-9686-5f31fbeab528",
      "id": "CVE-2026-42586",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42586 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:59d2bf5d-22d1-5be6-8868-6edbd080c1eb",
      "id": "CVE-2026-42587",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42587 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:537bd8f8-12d0-5cd4-90d8-40c3377cad84",
      "id": "CVE-2026-44248",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44248 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:11913643-f14a-5902-a810-396dd4b848d9",
      "id": "CVE-2026-44249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44249 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a043f387-a215-5ded-85c2-ccb0d03f582b",
      "id": "CVE-2026-44250",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44250 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:efc4a124-68d7-586f-ba1a-b410978da7ce",
      "id": "CVE-2026-44890",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4b7ba46d-7066-5dd1-9d54-0558089fe1b7",
      "id": "CVE-2026-44891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44891 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e0dc1bf8-10f5-5a26-b82b-46573d248501",
      "id": "CVE-2026-44893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44893 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8168d426-a6d3-5a5d-96c1-f13aac96491c",
      "id": "CVE-2026-45416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45416 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ea200286-1f11-5d0d-af0e-442be720b36b",
      "id": "CVE-2026-45536",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45536 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f540f2e9-1762-549d-9452-3abb5ad04cd6",
      "id": "CVE-2026-45673",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45673 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:daedad3d-9249-508b-bee4-3b585e90684c",
      "id": "CVE-2026-45674",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45674 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4cd14e8e-0168-5e3c-ac9d-5a8271d11a7c",
      "id": "CVE-2026-46340",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-46340 is fixed in version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bef2e093-efa6-5cbc-8f1a-ac2d1d86c893",
      "id": "CVE-2026-47244",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47244 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:278e22e7-dbb0-55ad-9271-8dd9ae6b39b1",
      "id": "CVE-2026-47691",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47691 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e540f45a-71d9-5511-b350-20840ae614e0",
      "id": "CVE-2026-48006",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48006 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bd1a3bca-cb01-507a-a0bd-dcad043a351d",
      "id": "CVE-2026-48043",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-48043 does not affect version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-native-kqueue. already_fixed \u2014 The target repository (Netty 4.1.75.Final-tuxcare.1) already contains equivalent protection against CVE-2026-48043. While the upstream patch targets a newer architecture with a ChannelInboundHandlerAdapter tail handler (introduced in CVE-2025-58057 refactoring), the target's older architecture implements the same defensive pattern: a try-finally block ensuring ByteBuf.release() is called uncond..."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c10f706b-7939-5aa4-9fc4-c93e6b3a93b7",
      "id": "CVE-2026-48059",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48059 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0b73a6ce-bf5b-55fd-a81b-9f006d41156e",
      "id": "CVE-2026-50010",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50010 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:367d2bd7-09c2-58e1-b74b-b5e608cedfee",
      "id": "CVE-2026-50011",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50011 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5a3ad51a-5dfc-5116-8255-f91e1176565f",
      "id": "CVE-2026-50020",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50020 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0284e302-f80e-55ec-8efc-601d6125ff5d",
      "id": "CVE-2026-50560",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5d913a8c-48d6-5576-9571-11f634ea83be",
      "id": "CVE-2026-55831",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55831 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8cff3e23-4746-5438-ba03-40adffd2f71c",
      "id": "CVE-2026-55833",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55833 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c42c554f-829f-5b90-934f-bf44839c321f",
      "id": "CVE-2026-55851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55851 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:37f9931c-90fc-5128-82c4-8608e7a7ae99",
      "id": "CVE-2026-56745",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56745 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fbf75910-bfae-536f-a7de-e5adac95c949",
      "id": "CVE-2026-56746",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56746 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2a8abef8-bb42-5c97-b884-98129b5695b1",
      "id": "CVE-2026-56817",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56817 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6101dd37-19ad-5cd2-b4f7-66bbf2145c8a",
      "id": "CVE-2026-56818",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-56818 does not affect version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-native-kqueue. not_affected \u2014 The target version 4.1.75.Final (released March 2022) predates the introduction of the vulnerable feature by over 4 years. CVE-2026-56818 describes incomplete cleanup when the `maxElements` limit is exceeded in RedisArrayAggregator. However, the `maxElements` configuration parameter and associated exception handling were introduced in June 2026 (commits e51c64c964 and 728c98b8ec), neither of wh..."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:207e5380-2b7e-5873-9cb0-b3d2eab68979",
      "id": "CVE-2026-56819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56819 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c8eb5db8-7b4a-5f1d-8b06-13072594086e",
      "id": "CVE-2026-59898",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59898 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f3e4a0a4-3cee-58c0-ab91-8076c3757934",
      "id": "CVE-2026-59899",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59899 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:40847f8c-5a1c-51b0-880f-108819c0f2cd",
      "id": "CVE-2026-59900",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59900 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:05d84da1-2954-575c-9e6a-862fe152d2fe",
      "id": "CVE-2026-59901",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59901 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bc24c4c1-713e-51d6-af05-11598441a6e0",
      "id": "CVE-2026-59919",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59919 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:75c67ec9-8aba-52f1-af2c-cceaa642f46f",
      "id": "CVE-2026-59920",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59920 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:709af76f-f909-5ff5-84b5-a2efad2ab5e8",
      "id": "CVE-2026-59921",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59921 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e2942547-8a88-52eb-b1d1-c787fee42a1c",
      "id": "GHSA-mfg7-5gfp-c4w3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f836a9ac-0fbf-5c59-ab1b-2df712a98ff6",
      "id": "GHSA-v74w-7mr3-4qg3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:838eb608-a09b-5788-a2a1-5c571b5ae089",
      "id": "GHSA-xpw8-rcwv-8f8p",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-xpw8-rcwv-8f8p is fixed in version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.75.Final-tuxcare.4"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.75.Final-tuxcare.4"
    }
  ]
}