{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:b5f1ccf4-6206-5e08-b491-b36c9bc29a9e", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.4", "type": "library", "group": "io.netty", "name": "netty-transport-rxtx", "version": "4.1.63.Final-tuxcare.4", "purl": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.4" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:304cf616-8112-5e00-a6ae-16883a9389be", "id": "CVE-2021-37136", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-37136 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-transport-rxtx." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:1d666d72-ae67-5032-8453-8d9f684dc8e5", "id": "CVE-2021-37137", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-37137 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-transport-rxtx." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:c0157274-001f-5be1-b221-7fa2534cdd44", "id": "CVE-2021-43797", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-43797 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-transport-rxtx." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:12dfc82c-0ff0-532e-b5e7-8b92acd17237", "id": "CVE-2022-24823", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-24823 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-transport-rxtx." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:9b0427a9-1c91-5417-ab6f-3f091a75b4c4", "id": "CVE-2022-41881", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-41881 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-transport-rxtx." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:51b28690-8b8d-5a88-b555-9682dc77bf9f", "id": "CVE-2022-41915", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-41915 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-transport-rxtx." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:5bff7879-b218-53fc-a2aa-10045be86629", "id": "CVE-2023-34462", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-34462 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-transport-rxtx." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:fccb9f69-e120-5d9f-a033-3d16ba7059f4", "id": "CVE-2023-44487", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-44487 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-transport-rxtx." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:0f64678a-0925-5dc8-8f4d-1ddc5c15fd0c", "id": "CVE-2023-4586", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2023-4586 is a false positive for io.netty:netty-transport-rxtx 4.1.63.Final-tuxcare.4." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:e4c52eba-49c1-5ab3-a4a5-3db275bfef3e", "id": "CVE-2024-29025", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-29025 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-transport-rxtx." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:b7fe32c4-2264-5917-a5ab-efd530c32a51", "id": "CVE-2024-47535", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-47535 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-transport-rxtx." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:a68eba78-80a4-5cd1-8965-f7ba779d9166", "id": "CVE-2025-24970", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-24970 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-transport-rxtx." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:c38591f5-ef0a-5dad-ae9f-86bc401db611", "id": "CVE-2025-25193", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-25193 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-transport-rxtx." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:cfa428ed-3b31-5e8f-856f-6179524de68c", "id": "CVE-2025-55163", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55163 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-transport-rxtx." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:4b2ec21a-43bf-5aca-bd53-a7bed2290996", "id": "CVE-2025-58056", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-58056 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-transport-rxtx." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:8ce37761-8159-5d49-a491-a4ab5111188a", "id": "CVE-2025-58057", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-58057 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-transport-rxtx." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:fb096c5e-d22a-5c03-87e1-28798c8359fb", "id": "CVE-2025-59419", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59419 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-transport-rxtx." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:c3766c5f-1c50-5685-b87c-cba572349397", "id": "CVE-2025-67735", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-67735 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-transport-rxtx." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:4e49701c-d76e-54e2-863a-05f46750dda1", "id": "CVE-2026-33870", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33870 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-transport-rxtx." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:4d9532f6-1f27-5f1d-899e-117cef91b25e", "id": "CVE-2026-33871", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33871 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-transport-rxtx." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:2b9ee034-1e46-5e6d-be10-e536cb068ef4", "id": "CVE-2026-41417", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41417 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-transport-rxtx." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:e6388e46-816a-5480-aca8-ca9200cd4e4e", "id": "CVE-2026-42577", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42577 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-transport-rxtx." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:b89811ba-86bc-5166-8055-c6fb7aeb33ea", "id": "CVE-2026-42578", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42578 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-transport-rxtx." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:6377a67b-0e67-5f00-bda2-81f95d39af53", "id": "CVE-2026-42579", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42579 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-transport-rxtx." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:a935a883-db17-5bd7-903d-a2a7133fa266", "id": "CVE-2026-42580", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42580 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-transport-rxtx." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:a81f2b92-6bab-5f1a-84e3-fab21504edae", "id": "CVE-2026-42581", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42581 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-transport-rxtx." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:8b056651-d173-5f86-a750-2ce113dbdb99", "id": "CVE-2026-42583", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42583 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-transport-rxtx." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:ef180306-1d45-5a0e-a984-3ea75b075a9a", "id": "CVE-2026-42584", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42584 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-transport-rxtx." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:205baee0-c9df-5642-bced-e0d43f2253a0", "id": "CVE-2026-42585", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42585 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-transport-rxtx." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:57d1a4f0-fbeb-50c4-8502-7e1f780d7121", "id": "CVE-2026-42586", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42586 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-transport-rxtx." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:d0eae956-d0aa-5e3e-8260-0046a16c0f7c", "id": "CVE-2026-42587", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42587 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-transport-rxtx." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:4f5d77b5-61ef-5147-bb2d-894690a35def", "id": "CVE-2026-44248", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44248 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-transport-rxtx." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:2647bb05-d671-5cfa-be4f-d5f85b6619cc", "id": "CVE-2026-44249", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44249 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-transport-rxtx." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:84ce8e8b-ae2f-5e46-95e9-c95717575459", "id": "CVE-2026-44250", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44250 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-transport-rxtx." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:66792c1a-b9ba-586e-8343-0958c91e9fa0", "id": "CVE-2026-44890", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-transport-rxtx." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:3e98cfb1-1b9f-528b-a5f9-b31026258f91", "id": "CVE-2026-44891", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44891 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-transport-rxtx." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:ad85824f-3018-533a-b6a5-5b9e9a49e2a1", "id": "CVE-2026-44893", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44893 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-transport-rxtx." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:c226b679-a879-588b-be02-b481f61daa7f", "id": "CVE-2026-45416", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45416 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-transport-rxtx." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:487de0de-50f1-57e3-a23b-c925cfa88de9", "id": "CVE-2026-45536", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45536 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-transport-rxtx." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:12c969ed-635b-5cbe-9e93-787c9792a21b", "id": "CVE-2026-45673", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45673 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-transport-rxtx." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:7566a6d3-e6c5-5635-8c86-cb4d7ccf89f8", "id": "CVE-2026-45674", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45674 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-transport-rxtx." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:81e201b3-4c9e-5d2e-807e-478bf4383e39", "id": "CVE-2026-46340", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-46340 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-transport-rxtx." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:78c4b9c4-f968-5d03-9e31-a384cf639968", "id": "CVE-2026-47244", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47244 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-transport-rxtx." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:c2b067c0-cdb3-5d65-89fe-69e1160331fc", "id": "CVE-2026-47691", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47691 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-transport-rxtx." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:b5814986-ab4f-55e9-b6c7-95842a237759", "id": "CVE-2026-48006", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-48006 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-transport-rxtx." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:e62759ce-85c8-5854-8c05-5815acedd8af", "id": "CVE-2026-48043", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48043 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-transport-rxtx." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:0b3d321e-5d3c-5760-b780-a5f1650824da", "id": "CVE-2026-48059", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-48059 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-transport-rxtx." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:04dd7cb7-5cd5-5f2a-9e83-2b472c02b90c", "id": "CVE-2026-50010", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50010 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-transport-rxtx." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:543eba1b-f8ad-50d2-b2f6-1ea058beae58", "id": "CVE-2026-50011", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50011 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-transport-rxtx." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:afce50ef-1b43-53b0-a6f7-3afc43065424", "id": "CVE-2026-50020", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50020 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-transport-rxtx." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:c5b82216-8969-5dbf-841c-24e620a9dbb2", "id": "CVE-2026-50560", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-transport-rxtx." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:f2ba0f3d-e17c-58e4-b85a-504abde184d1", "id": "CVE-2026-55831", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55831 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-transport-rxtx." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:b192b7e0-fa9a-5881-8923-8af196894328", "id": "CVE-2026-55833", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55833 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-transport-rxtx." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:3e75e1aa-f463-5a5f-8ae7-f90119e698e1", "id": "CVE-2026-55851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55851 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-transport-rxtx." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:7d9a0a23-fa47-5783-9360-61a5f8af7742", "id": "CVE-2026-56745", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56745 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-transport-rxtx." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:6646085f-3ab8-5546-a401-1032323b49d6", "id": "CVE-2026-56746", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56746 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-transport-rxtx." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:75ba0d5d-97e4-5f43-8021-cd94133595d6", "id": "CVE-2026-56817", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-56817 does not affect version 4.1.63.Final-tuxcare.4 of io.netty:netty-transport-rxtx. not_affected \u2014 The Netty codec-xml module contains XmlDecoder, which instantiates an Aalto XML parser without security configuration (line 38: new InputFactoryImpl() with no XXE protection). However, this is a library component that Netty itself does not use in its own production code. The vulnerability only manifests when downstream applications explicitly add XmlDecoder to their Netty channel pipelines. Per..." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:355abe3f-68f4-5b05-9052-6458ff472c8f", "id": "CVE-2026-56818", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56818 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-transport-rxtx." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:5649d98c-d9db-5327-a180-5b7043668303", "id": "CVE-2026-56819", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56819 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-transport-rxtx." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:89343eab-9429-5b6a-b007-2e7df9cc9da3", "id": "CVE-2026-59898", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59898 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-transport-rxtx." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:6a876b29-ad30-5aa1-8b4d-46161775a4c4", "id": "CVE-2026-59899", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59899 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-transport-rxtx." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:260662ef-8a80-5a52-bcd4-d0d2480b576e", "id": "CVE-2026-59900", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59900 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-transport-rxtx." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:429e8458-08f2-56a9-86e8-c50c9c9911be", "id": "CVE-2026-59901", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59901 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-transport-rxtx." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:20635463-a1a9-5f14-9e22-d77afe789a7c", "id": "CVE-2026-59919", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59919 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-transport-rxtx." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:d40d7178-c255-51c7-b90b-e09d735888d1", "id": "CVE-2026-59920", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59920 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-transport-rxtx." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:dfe01d82-1c42-5157-bc4a-90db57c4614f", "id": "CVE-2026-59921", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59921 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-transport-rxtx." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:bfde84a3-e838-5cf0-885d-4097e95c34c6", "id": "CVE-2026-73507", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-73507 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-transport-rxtx." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:0353b6da-51a0-59c6-a50f-77d7e8c4d047", "id": "CVE-2026-73508", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-73508 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-transport-rxtx." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:875feae1-7ea4-5ecf-a5fd-800b773e8db3", "id": "GHSA-mfg7-5gfp-c4w3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-transport-rxtx." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:9a320d1e-9d28-58d5-b2cf-83d5768c8e0e", "id": "GHSA-v74w-7mr3-4qg3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-transport-rxtx." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:d5f949c0-b7e0-5fda-8e7e-61208c70a8b6", "id": "GHSA-xpw8-rcwv-8f8p", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-xpw8-rcwv-8f8p affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-transport-rxtx." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.4" } ] } ], "dependencies": [ { "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.4" } ] }