{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:771722f1-6a03-55ba-b3c4-1f239ae89660",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.73.Final-tuxcare.3",
      "type": "library",
      "group": "io.netty",
      "name": "netty-transport-rxtx",
      "version": "4.1.73.Final-tuxcare.3",
      "purl": "pkg:maven/io.netty/netty-transport-rxtx@4.1.73.Final-tuxcare.3"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:841a2d7e-4caf-58d0-addb-eb6bc1c70e52",
      "id": "CVE-2022-24823",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-24823 is fixed in version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:55d54144-7f5a-533c-b938-9497aa15e452",
      "id": "CVE-2022-41881",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-41881 is fixed in version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:564d91c2-657a-58ba-b08e-d5be514eb744",
      "id": "CVE-2022-41915",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-41915 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0f508ed9-0e13-592e-b67e-0c315eac17c7",
      "id": "CVE-2023-34462",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-34462 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a31ffb4f-a5b3-5388-9a30-9dbf3024fa8b",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-44487 is fixed in version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9413acb0-d7e6-5564-9c35-eff25b3de795",
      "id": "CVE-2023-4586",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2023-4586 is a false positive for io.netty:netty-transport-rxtx 4.1.73.Final-tuxcare.3."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:de73ce7d-02a2-5def-96c6-852bdf018abd",
      "id": "CVE-2024-29025",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-29025 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:848846f3-20c2-5e18-be9d-ea29e8ca7504",
      "id": "CVE-2024-47535",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-47535 is fixed in version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e788d882-1d81-5a3f-a513-0a8b88e10c4f",
      "id": "CVE-2025-24970",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-24970 is fixed in version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:be236d94-4aea-577f-8cfd-527d933de636",
      "id": "CVE-2025-25193",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-25193 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:86331108-ad8f-5bea-9861-c6e6ebe355d7",
      "id": "CVE-2025-55163",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-55163 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:94cb5368-5e4e-5d25-a57d-58dc8fd4041f",
      "id": "CVE-2025-58056",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58056 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:50582922-53cb-5494-9c3e-7c9322f67117",
      "id": "CVE-2025-58057",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58057 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d3f55f73-a0a6-549d-a2e1-ec0680d392d8",
      "id": "CVE-2025-59419",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-59419 is fixed in version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:378c9fb9-a880-5300-a535-b85a8ea501e9",
      "id": "CVE-2025-67735",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-67735 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c7e49287-2933-5456-af9f-2f16c534d476",
      "id": "CVE-2026-33870",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33870 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:85808906-bfcf-5063-93bd-a62c9113bd56",
      "id": "CVE-2026-33871",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33871 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fc54ff1e-8a7b-534a-a386-3b2382a8a0f5",
      "id": "CVE-2026-41417",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41417 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:16074c32-951f-53fd-ac69-a56c9cd0ee56",
      "id": "CVE-2026-42577",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42577 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bc729f61-b99d-5280-b77d-6938a300325b",
      "id": "CVE-2026-42578",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42578 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dc733e7c-96e1-5e8f-9f25-c8550b09ddcf",
      "id": "CVE-2026-42579",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42579 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2681cc1e-3d9f-58df-bdc9-1cf6be767adf",
      "id": "CVE-2026-42580",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42580 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a828d850-2c09-5ede-be39-4251780bed60",
      "id": "CVE-2026-42581",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42581 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1ea1df65-44a1-53c3-897d-d37016468ffa",
      "id": "CVE-2026-42583",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42583 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:968cded6-cf62-5c54-be34-009313207150",
      "id": "CVE-2026-42584",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42584 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c84721f1-ca1c-5753-b8e1-ecd62ec69401",
      "id": "CVE-2026-42585",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42585 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:aff3ed7d-9ab4-5163-b251-418da986efca",
      "id": "CVE-2026-42586",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42586 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cef46652-13cf-57fc-9fa7-4eb3c6927122",
      "id": "CVE-2026-42587",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42587 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:41c4f6f8-a18a-5867-afce-00204e665d10",
      "id": "CVE-2026-44248",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44248 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3c69781c-1a92-5cd9-b711-8a76b183d1e4",
      "id": "CVE-2026-44249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44249 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c03d283e-e7e3-55b6-af26-37f2579e3a40",
      "id": "CVE-2026-44250",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44250 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:da5a997b-f26b-5ec3-9450-4a2716b2d85c",
      "id": "CVE-2026-44890",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:15154cb4-ea4f-5610-a8e3-7b9dc6bfd09e",
      "id": "CVE-2026-44891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44891 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7e5eb22b-c209-5399-90f3-2cbfb5200ba3",
      "id": "CVE-2026-44893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44893 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c8e8b99d-3759-59b3-bb77-b054400c2d82",
      "id": "CVE-2026-45416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45416 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1c9dd076-1f72-5daf-ac12-7f79f9bbd545",
      "id": "CVE-2026-45536",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45536 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8cdb761e-3c50-502f-b944-3ad939433db0",
      "id": "CVE-2026-45673",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45673 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fe73dfe5-ed97-57cd-80f7-050a42a0a175",
      "id": "CVE-2026-45674",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45674 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:50b281a9-aacf-5b9c-ba9d-1838c7b5de8c",
      "id": "CVE-2026-46340",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-46340 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5fcd8014-9dfe-5463-9351-5187d3017787",
      "id": "CVE-2026-47244",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47244 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:30c02714-6976-5682-ac62-7a2a736b5f9e",
      "id": "CVE-2026-47691",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47691 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:48965ea1-0a0f-5c0c-9b29-64336bb29d88",
      "id": "CVE-2026-48006",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48006 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b8e7c67c-67a3-5fe9-94a6-91df666d714d",
      "id": "CVE-2026-48043",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-48043 does not affect version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-rxtx. not_affected \u2014 Version 4.1.73 is not affected by CVE-2026-48043. The target uses a loop-based architecture with try-finally protection (introduced in 2016) that prevents the buffer leak described in the CVE. The vulnerable ChannelInboundHandlerAdapter pattern that the upstream patch fixes does not exist in this version."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:11f4e632-838e-5aab-a953-55c0b1727ffc",
      "id": "CVE-2026-48059",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48059 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cecae287-0583-5b6b-b137-67e9e2fa0fb4",
      "id": "CVE-2026-50010",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50010 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:374d7648-938e-5105-a949-4321ed82f522",
      "id": "CVE-2026-50011",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50011 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fe55b4e2-4cca-534f-a506-2cc8c41168c3",
      "id": "CVE-2026-50020",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50020 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:266a5ccd-b2d7-51d0-8e96-7a9680dd0c20",
      "id": "CVE-2026-50560",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f1de93d1-16b9-5cc1-92fa-3dd7f869e2bd",
      "id": "CVE-2026-55831",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55831 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d788eeeb-ff32-5b36-ac93-cc61526696ce",
      "id": "CVE-2026-55833",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55833 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c0a62e60-0dc4-59d4-aed4-771baba80372",
      "id": "CVE-2026-55851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55851 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3ed59831-d95d-5b32-aa6d-6b1a6d324630",
      "id": "CVE-2026-56745",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56745 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0b584d51-7da7-5a43-bd5c-9a637ca9eeea",
      "id": "CVE-2026-56746",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56746 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2ed42015-9702-564e-bcad-470926a1116a",
      "id": "CVE-2026-56817",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56817 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f77f9de1-6477-5657-a08d-ab58753fbafd",
      "id": "CVE-2026-56818",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-56818 does not affect version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-rxtx. not_affected \u2014 The target version 4.1.73.Final-tuxcare.2 is NOT AFFECTED by CVE-2026-56818. The vulnerable code pattern (configurable `maxElements` limit check without cleanup, contrasting with `maxNestedArrayDepth` limit check WITH cleanup) was introduced in version 4.1.135.Final through commits e51c64c964 and 728c98b8ec (dated 2026-06-01/02). The target version predates these features entirely and does not ..."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:639089d7-d036-5fbf-bbf3-77436bee76ee",
      "id": "CVE-2026-56819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56819 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6057f970-b168-57ce-9ae0-b8619a646b1b",
      "id": "CVE-2026-59898",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59898 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:818500f0-8f60-504a-8ee3-8b7ce6f44f8f",
      "id": "CVE-2026-59899",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59899 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f7ec1efa-6426-544d-9e21-b1d153e40b00",
      "id": "CVE-2026-59900",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59900 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:491441df-65ff-5691-a411-c173822ed942",
      "id": "CVE-2026-59901",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59901 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cdbc3ec7-13e2-5fb1-9381-698ea747d4de",
      "id": "CVE-2026-59919",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59919 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:44cf2812-c654-5c24-a7ec-5130075d36f5",
      "id": "CVE-2026-59920",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59920 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f7d948cc-7821-5ba6-a9f0-9a33a8c0d9b1",
      "id": "CVE-2026-59921",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59921 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e7041847-e2fc-56e8-833b-8bbf3c23d6d4",
      "id": "CVE-2026-73507",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-73507 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9d9f1ca7-386a-5b1e-b18e-b24d2a0ce457",
      "id": "CVE-2026-73508",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-73508 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ba95e718-a85f-5942-99d9-590189a40c12",
      "id": "GHSA-mfg7-5gfp-c4w3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:db5324fa-c9a6-5b94-a9db-7373b6e3e3ac",
      "id": "GHSA-v74w-7mr3-4qg3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:427badfa-6ccd-50f5-adeb-3c6ef0b9117d",
      "id": "GHSA-xpw8-rcwv-8f8p",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-xpw8-rcwv-8f8p affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.73.Final-tuxcare.3"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.73.Final-tuxcare.3"
    }
  ]
}