{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:b7c38ecf-fc8f-5e8a-afb4-3b05946bdec3",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/io.netty/netty-transport-udt@4.1.73.Final-tuxcare.3",
      "type": "library",
      "group": "io.netty",
      "name": "netty-transport-udt",
      "version": "4.1.73.Final-tuxcare.3",
      "purl": "pkg:maven/io.netty/netty-transport-udt@4.1.73.Final-tuxcare.3"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:c6cdb2f2-656d-54d2-af43-88e73e2185ed",
      "id": "CVE-2022-24823",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-24823 is fixed in version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a4200848-78b6-5cb9-8487-7c26dc6ed47b",
      "id": "CVE-2022-41881",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-41881 is fixed in version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:10b3a32c-cca1-50a2-8331-93613f39cb63",
      "id": "CVE-2022-41915",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-41915 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:be834005-e1a4-5eb4-a9d7-82b3ce841007",
      "id": "CVE-2023-34462",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-34462 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:00e505fb-66d8-531a-8783-bccdf8894d4f",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-44487 is fixed in version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dbacb289-4a30-506d-9671-4b944d370255",
      "id": "CVE-2023-4586",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2023-4586 is a false positive for io.netty:netty-transport-udt 4.1.73.Final-tuxcare.3."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:33aa9bd9-0fb8-5c99-85a1-5c8d75d0c12f",
      "id": "CVE-2024-29025",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-29025 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4a37dc72-63a7-5c49-a1f9-373cfb93d1fb",
      "id": "CVE-2024-47535",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-47535 is fixed in version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:58a29787-0a43-5dd2-9db8-17e595f0be71",
      "id": "CVE-2025-24970",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-24970 is fixed in version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:81a9ef04-192c-51e7-8ed8-e4b9fdd15685",
      "id": "CVE-2025-25193",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-25193 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f55e24f4-4b6b-553d-abb4-b0ad32cd1cbc",
      "id": "CVE-2025-55163",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-55163 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6146b8f1-fdea-595f-ac1c-907176f35fc0",
      "id": "CVE-2025-58056",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58056 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a16dd51c-bc19-53bf-a4b7-c8b79180679e",
      "id": "CVE-2025-58057",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58057 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6b24f2ef-3b26-5e5e-8481-6501aa0aae10",
      "id": "CVE-2025-59419",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-59419 is fixed in version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d9f0e2db-fcf6-5b1a-9f5c-ff5d3ece5d6c",
      "id": "CVE-2025-67735",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-67735 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:78565dc7-f525-5dc4-9ce4-527e16a37502",
      "id": "CVE-2026-33870",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33870 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ce319c8c-fee4-5f43-ad06-6c069862ae90",
      "id": "CVE-2026-33871",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33871 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:aa3f0434-e2cf-5561-9a66-f7336ddd3ba6",
      "id": "CVE-2026-41417",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41417 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9f9c7b91-c883-595e-891c-6eafe8db5e5e",
      "id": "CVE-2026-42577",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42577 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c606f535-dce4-5187-9243-420c907a13f4",
      "id": "CVE-2026-42578",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42578 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:50cd1bf9-1ab9-5ee3-b643-90b02cfaa96d",
      "id": "CVE-2026-42579",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42579 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a496ae30-d26b-5c82-b9e3-bc28dc34a59b",
      "id": "CVE-2026-42580",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42580 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fe3f7dd1-c6bc-514e-8920-41d8d57c98b7",
      "id": "CVE-2026-42581",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42581 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ee6be6a9-97f7-591e-96a2-1aee9a9bc051",
      "id": "CVE-2026-42583",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42583 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:03433f5a-8b39-5c71-913a-472ea97f295e",
      "id": "CVE-2026-42584",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42584 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cd2073dd-4aaf-5113-a776-56abe8a5b161",
      "id": "CVE-2026-42585",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42585 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:092ed402-189c-5339-b6c8-f4bcd05b3892",
      "id": "CVE-2026-42586",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42586 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:410b9acc-e3ad-5dd6-8349-c012866d94bf",
      "id": "CVE-2026-42587",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42587 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bd96aca5-1e5c-5a06-b2f8-03c0b9de0a11",
      "id": "CVE-2026-44248",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44248 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3e421c4d-0a91-5c1f-8761-11155ade8da3",
      "id": "CVE-2026-44249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44249 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cae9757f-8bc4-5d9a-8290-4e87986bf00c",
      "id": "CVE-2026-44250",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44250 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9536d0ba-9ac5-59dc-a20e-cfbfe6747fb9",
      "id": "CVE-2026-44890",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b23a8406-1c1b-5e2f-b330-e03289e364f5",
      "id": "CVE-2026-44891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44891 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2f203ea5-38c3-5922-97ac-2574226a11e7",
      "id": "CVE-2026-44893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44893 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:59182d36-82a7-5f19-9f2c-8d9836bbdca7",
      "id": "CVE-2026-45416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45416 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9c4bf856-6288-5705-8432-d4ea081173fb",
      "id": "CVE-2026-45536",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45536 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c41dab31-4339-5ea1-b471-55d1913590e1",
      "id": "CVE-2026-45673",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45673 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:be90e584-56e0-5e01-a450-132f1a9d1e22",
      "id": "CVE-2026-45674",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45674 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fa750ea5-0366-580c-826d-46694e9bbdee",
      "id": "CVE-2026-46340",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-46340 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ac63067d-1031-5e34-bcc5-3eb11940a989",
      "id": "CVE-2026-47244",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47244 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:81f4cc60-9833-5551-9b0e-0dd6cc4e926c",
      "id": "CVE-2026-47691",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47691 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6fd61d15-97b0-580a-b289-09325863f6be",
      "id": "CVE-2026-48006",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48006 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:45673a2d-9989-54ec-80ff-2c7944497613",
      "id": "CVE-2026-48043",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-48043 does not affect version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-udt. not_affected \u2014 Version 4.1.73 is not affected by CVE-2026-48043. The target uses a loop-based architecture with try-finally protection (introduced in 2016) that prevents the buffer leak described in the CVE. The vulnerable ChannelInboundHandlerAdapter pattern that the upstream patch fixes does not exist in this version."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2abca148-ab2f-5249-b84f-465530d932fd",
      "id": "CVE-2026-48059",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48059 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5ff2ad42-7c60-58ec-bca7-0a6bc806eaf6",
      "id": "CVE-2026-50010",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50010 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c29992da-6262-55bd-8742-ce3593bde7b3",
      "id": "CVE-2026-50011",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50011 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b621edde-4f09-5090-a38b-303c472d233a",
      "id": "CVE-2026-50020",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50020 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f94232da-d8eb-5789-9415-3a17f25df51b",
      "id": "CVE-2026-50560",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dee0dcf0-73fe-5ec6-93de-7e3ae17706e5",
      "id": "CVE-2026-55831",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55831 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5d647ec5-3b37-5a77-adab-9696bf058ed6",
      "id": "CVE-2026-55833",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55833 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e2f8da41-2972-57e1-8d0c-2432bb573d28",
      "id": "CVE-2026-55851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55851 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:389ba47c-55d6-564b-9459-b07008b6f75b",
      "id": "CVE-2026-56745",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56745 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1ae11b89-5c9f-5bcf-8883-40edc3724caa",
      "id": "CVE-2026-56746",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56746 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7fed03dd-916f-57ce-a36a-3e2787b21e61",
      "id": "CVE-2026-56817",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56817 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c0d62e7a-392e-5481-9c6f-a92fcf79e880",
      "id": "CVE-2026-56818",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-56818 does not affect version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-udt. not_affected \u2014 The target version 4.1.73.Final-tuxcare.2 is NOT AFFECTED by CVE-2026-56818. The vulnerable code pattern (configurable `maxElements` limit check without cleanup, contrasting with `maxNestedArrayDepth` limit check WITH cleanup) was introduced in version 4.1.135.Final through commits e51c64c964 and 728c98b8ec (dated 2026-06-01/02). The target version predates these features entirely and does not ..."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:216b3150-d485-53a4-9f31-ca1586254cd4",
      "id": "CVE-2026-56819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56819 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e5d1b058-790a-5e46-9c32-356671b6808f",
      "id": "CVE-2026-59898",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59898 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:89b4b4a1-44e0-513b-bf93-d3d8afa7ce1a",
      "id": "CVE-2026-59899",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59899 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4616cc0e-ee53-55ce-bd6b-bd82b9803ba8",
      "id": "CVE-2026-59900",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59900 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4dfe433e-dcd5-5e8b-b63d-73f1aa63d98a",
      "id": "CVE-2026-59901",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59901 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:94946729-9d00-5915-ba12-1121301bea4f",
      "id": "CVE-2026-59919",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59919 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2a86f18e-2ffa-5d4e-8efe-080f849a4a83",
      "id": "CVE-2026-59920",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59920 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:28c2decf-a800-5470-aa49-314aff71c5fd",
      "id": "CVE-2026-59921",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59921 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dc04b5b0-ee4b-58b6-993a-ab1c41b79ded",
      "id": "CVE-2026-73507",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-73507 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7827632f-f3ed-5ab0-a63e-a8684019e173",
      "id": "CVE-2026-73508",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-73508 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bc8508f9-8548-562a-af1b-61e5beaf5e8b",
      "id": "GHSA-mfg7-5gfp-c4w3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b93f6af7-7c85-5dee-ac5c-0f0a52f5af59",
      "id": "GHSA-v74w-7mr3-4qg3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:09ddd90d-b71a-5de2-bef8-e1ae20d0ba7d",
      "id": "GHSA-xpw8-rcwv-8f8p",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-xpw8-rcwv-8f8p affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.73.Final-tuxcare.3"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.73.Final-tuxcare.3"
    }
  ]
}