{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:4fcc8313-e3bc-560d-a8ba-e2aa35227b11",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.75.Final-tuxcare.4",
      "type": "library",
      "group": "io.netty",
      "name": "netty-transport-rxtx",
      "version": "4.1.75.Final-tuxcare.4",
      "purl": "pkg:maven/io.netty/netty-transport-rxtx@4.1.75.Final-tuxcare.4"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:cd1fba96-bac5-525b-bac7-20f51681d164",
      "id": "CVE-2022-24823",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-24823 is fixed in version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ff4ea7c3-f049-52bf-be7e-37f09db89ad0",
      "id": "CVE-2022-41881",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-41881 is fixed in version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:51a4889b-b258-5be1-b67d-9e4138165fbb",
      "id": "CVE-2022-41915",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-41915 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0009330e-2733-5ace-9003-1eea6089aa9b",
      "id": "CVE-2023-34462",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-34462 is fixed in version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:628378e5-86aa-5513-81c9-cb55186b590b",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-44487 is fixed in version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:46d01eaa-8671-50cf-a7fa-e34a03a21e34",
      "id": "CVE-2023-4586",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2023-4586 is a false positive for io.netty:netty-transport-rxtx 4.1.75.Final-tuxcare.4."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:10da81ef-a660-5936-b7a5-7abb358ac09b",
      "id": "CVE-2024-29025",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-29025 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e8832b8c-3650-5f99-8d99-5a9f92f315b5",
      "id": "CVE-2024-47535",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-47535 is fixed in version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d98a1ed5-5aca-5241-8481-8d7f99938f62",
      "id": "CVE-2025-24970",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-24970 is fixed in version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9498ab54-bca1-5b5c-b4de-3b1e7e01a75a",
      "id": "CVE-2025-25193",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-25193 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:eae24058-5008-5f35-9bc1-adbb921ef0ce",
      "id": "CVE-2025-55163",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-55163 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d0abf647-0425-50ac-8a8c-a7cfb59d1f2f",
      "id": "CVE-2025-58056",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-58056 is fixed in version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:51a2b26b-4347-5625-a5bf-0fbdc798d489",
      "id": "CVE-2025-58057",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58057 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:324ce36c-6785-5ce2-acbb-c825ac624df1",
      "id": "CVE-2025-59419",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-59419 is fixed in version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:defdadcc-f1c3-5ae3-966d-75a14cddfae5",
      "id": "CVE-2025-67735",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-67735 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:90bcea46-3ae4-57d7-9ffd-bbf90bec3da3",
      "id": "CVE-2026-33870",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33870 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2260da34-3ebc-5c9d-a960-78ffb65f68a1",
      "id": "CVE-2026-33871",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33871 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2240e530-097c-54af-85cc-f83a2dd10e1a",
      "id": "CVE-2026-41417",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41417 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b4b0595a-6dc3-517d-8d30-104c4f18c3c8",
      "id": "CVE-2026-42577",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42577 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:911bfe35-64c5-5e84-9540-1ce58a7c4893",
      "id": "CVE-2026-42578",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42578 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:53c33625-f834-5303-888f-588f99572d43",
      "id": "CVE-2026-42579",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42579 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5cb507c2-5c49-5b14-9424-f64517c51b5d",
      "id": "CVE-2026-42580",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42580 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:da0b5598-778e-5dba-8390-a2ef3c264b89",
      "id": "CVE-2026-42581",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42581 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:40acd8c4-aab4-5d2f-a389-fb6d05111850",
      "id": "CVE-2026-42583",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42583 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8bc115fe-2e70-5f15-994b-b4a7a89944bf",
      "id": "CVE-2026-42584",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42584 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d4215102-e03f-59ac-b28b-f7c5ab080b8d",
      "id": "CVE-2026-42585",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42585 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e72517cb-6977-58a4-bfe7-1f5c7b2fdbf6",
      "id": "CVE-2026-42586",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42586 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e133f774-e6ec-5c31-9d6f-3cc41875ae9f",
      "id": "CVE-2026-42587",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42587 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cad99418-ef75-58d1-b4cb-3aa47fff59e8",
      "id": "CVE-2026-44248",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44248 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:037c39a1-7999-5e07-91b3-ed12ff1814f6",
      "id": "CVE-2026-44249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44249 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0f698002-a026-5b09-94e0-80ccda07bb34",
      "id": "CVE-2026-44250",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44250 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:be286953-9de9-5ccb-af0e-3b9b113b883a",
      "id": "CVE-2026-44890",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:10b39f0f-ea0a-5fa3-86c4-5e07c9fd1c5d",
      "id": "CVE-2026-44891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44891 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6a00841a-ca76-5805-8e1a-ae4027fbcf48",
      "id": "CVE-2026-44893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44893 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:64ab3def-51f5-5c9e-8c14-9adb26de9e5c",
      "id": "CVE-2026-45416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45416 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6bfa1892-51b6-5210-88a0-edefed148f66",
      "id": "CVE-2026-45536",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45536 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9594f88a-bf54-538b-9634-b13f5b9b774b",
      "id": "CVE-2026-45673",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45673 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:12a09e32-5111-5803-9ced-15fad4acc446",
      "id": "CVE-2026-45674",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45674 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d95db8b5-61be-5d4e-9b83-d2b030be4c5d",
      "id": "CVE-2026-46340",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-46340 is fixed in version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2350256c-e200-5714-b64a-239bcdcd698f",
      "id": "CVE-2026-47244",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47244 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:797f9f5f-ef26-52ea-9e22-158b31200baf",
      "id": "CVE-2026-47691",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47691 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:16e625da-24c9-5444-b5f7-d206ac7c71d7",
      "id": "CVE-2026-48006",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48006 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a0c23f71-db21-59cd-a191-ae66cb5ba87d",
      "id": "CVE-2026-48043",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-48043 does not affect version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-rxtx. already_fixed \u2014 The target repository (Netty 4.1.75.Final-tuxcare.1) already contains equivalent protection against CVE-2026-48043. While the upstream patch targets a newer architecture with a ChannelInboundHandlerAdapter tail handler (introduced in CVE-2025-58057 refactoring), the target's older architecture implements the same defensive pattern: a try-finally block ensuring ByteBuf.release() is called uncond..."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:91257666-fbc8-576d-a963-cfd37cfd3fdb",
      "id": "CVE-2026-48059",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48059 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:98bbb648-95b2-5516-8c25-8822dc94f010",
      "id": "CVE-2026-50010",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50010 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:41559965-a44d-5508-9727-99b41fb1612d",
      "id": "CVE-2026-50011",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50011 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f9643a2b-be1f-518f-8114-b3b7d6dc49d1",
      "id": "CVE-2026-50020",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50020 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5d177c7e-1b9b-537c-b5b8-1c1d05c69181",
      "id": "CVE-2026-50560",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9293170f-6e37-52eb-a77a-65058554dc3b",
      "id": "CVE-2026-55831",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55831 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bac9f5ac-03ec-5761-8a63-ed6ade84b94c",
      "id": "CVE-2026-55833",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55833 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0f028a7d-5d15-5e86-b07b-91ff2002ea0c",
      "id": "CVE-2026-55851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55851 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ea7bb8db-25b8-5718-a26a-ba4a4cc55102",
      "id": "CVE-2026-56745",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56745 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cb72ce61-4959-5787-ba20-bf3f2899295b",
      "id": "CVE-2026-56746",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56746 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:37d32ad6-5a01-5f2d-981a-7abd76fb36cf",
      "id": "CVE-2026-56817",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56817 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5d43d694-a2b0-5b43-97d9-8ee71951212e",
      "id": "CVE-2026-56818",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-56818 does not affect version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-rxtx. not_affected \u2014 The target version 4.1.75.Final (released March 2022) predates the introduction of the vulnerable feature by over 4 years. CVE-2026-56818 describes incomplete cleanup when the `maxElements` limit is exceeded in RedisArrayAggregator. However, the `maxElements` configuration parameter and associated exception handling were introduced in June 2026 (commits e51c64c964 and 728c98b8ec), neither of wh..."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:db1d4173-1dfd-54f1-9a71-1d0a9d3b8257",
      "id": "CVE-2026-56819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56819 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fcac9b05-a6e5-5319-9a58-373303403787",
      "id": "CVE-2026-59898",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59898 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2b840ad0-fdb1-58f9-812b-17db1662c1a9",
      "id": "CVE-2026-59899",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59899 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a4615a82-1718-5e6a-b797-f40be833e2fa",
      "id": "CVE-2026-59900",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59900 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cfdad6ac-8416-530c-8351-297e6861a74a",
      "id": "CVE-2026-59901",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59901 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:28f3fa45-07ce-5477-a9f7-1c4752491c25",
      "id": "CVE-2026-59919",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59919 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ecb70a6c-6de4-513d-9d9f-636782de9530",
      "id": "CVE-2026-59920",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59920 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:84b135a6-722e-53c5-8724-5ab473a7c3f4",
      "id": "CVE-2026-59921",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59921 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3e23b7ff-b764-5504-9d7d-43bf1741b35a",
      "id": "CVE-2026-73507",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-73507 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:de1af8fd-8567-5923-be52-09f0e12765a8",
      "id": "CVE-2026-73508",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-73508 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9dc9de3d-2226-5b5e-9dde-a507362460e7",
      "id": "GHSA-mfg7-5gfp-c4w3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:caa41d7c-697f-5d92-801c-b54d31b37eea",
      "id": "GHSA-v74w-7mr3-4qg3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d5a19716-f82d-5af7-be07-792f3b461e53",
      "id": "GHSA-xpw8-rcwv-8f8p",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-xpw8-rcwv-8f8p is fixed in version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.75.Final-tuxcare.4"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.75.Final-tuxcare.4"
    }
  ]
}