{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:f3961038-eb85-5dd3-a0b0-93b811d73ef9",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/io.netty/netty-transport-udt@4.1.75.Final-tuxcare.4",
      "type": "library",
      "group": "io.netty",
      "name": "netty-transport-udt",
      "version": "4.1.75.Final-tuxcare.4",
      "purl": "pkg:maven/io.netty/netty-transport-udt@4.1.75.Final-tuxcare.4"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:37af9313-f4e9-537d-b2b4-f3e37b74d711",
      "id": "CVE-2022-24823",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-24823 is fixed in version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6a7d281a-8ec9-50f1-8f10-e8e4aadf40cd",
      "id": "CVE-2022-41881",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-41881 is fixed in version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3548d884-f8e4-58a2-99e4-056db9d2fa71",
      "id": "CVE-2022-41915",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-41915 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8a511a20-b4ad-5f92-81f3-873651391af6",
      "id": "CVE-2023-34462",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-34462 is fixed in version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:21657cca-dc22-57b2-a1aa-8b6d2fd0cc72",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-44487 is fixed in version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b1f78f63-9022-56ba-a2a1-67e415197ebf",
      "id": "CVE-2023-4586",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2023-4586 is a false positive for io.netty:netty-transport-udt 4.1.75.Final-tuxcare.4."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dd3bbb9e-8c9d-5963-baaf-3b8a645ca5a9",
      "id": "CVE-2024-29025",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-29025 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ded8b138-f935-58a9-b298-770148e51617",
      "id": "CVE-2024-47535",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-47535 is fixed in version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c889262c-063c-53ba-97c3-093fbec770e2",
      "id": "CVE-2025-24970",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-24970 is fixed in version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:28305f2c-d20a-5658-9bff-2f9bd05f1d1a",
      "id": "CVE-2025-25193",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-25193 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1d968b69-b82e-5d90-b032-e82fb87df1cf",
      "id": "CVE-2025-55163",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-55163 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:338ee45e-ad49-5c10-bfb9-3e33d0df8235",
      "id": "CVE-2025-58056",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-58056 is fixed in version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4d5abc87-913e-5dd9-812b-b50656a3f841",
      "id": "CVE-2025-58057",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58057 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b52dd932-7e50-56fc-83ea-b695eba9583d",
      "id": "CVE-2025-59419",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-59419 is fixed in version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:af73e3b7-b954-5125-bd9c-a3006c3af73c",
      "id": "CVE-2025-67735",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-67735 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b1b6b6a5-7f13-5d88-b4eb-f3f377a56160",
      "id": "CVE-2026-33870",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33870 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ccd85db3-5c18-542a-bbf0-1ba1d5d8ce7f",
      "id": "CVE-2026-33871",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33871 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3bf96290-e556-53c2-9040-28d319fb23a1",
      "id": "CVE-2026-41417",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41417 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b9ec3df1-e6ea-5e0d-8067-5b428b03c6b1",
      "id": "CVE-2026-42577",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42577 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d295713e-9261-5afc-bf21-8c0b09783963",
      "id": "CVE-2026-42578",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42578 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4bba5abb-6c92-5ea0-a70d-0107fc744238",
      "id": "CVE-2026-42579",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42579 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d4695649-790d-5542-a874-c6d1ee6cd691",
      "id": "CVE-2026-42580",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42580 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ced03273-472d-5d75-90c4-f62fcb2f9dac",
      "id": "CVE-2026-42581",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42581 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:124d3e97-85f1-5133-b53d-39e20cbd442a",
      "id": "CVE-2026-42583",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42583 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2bbd7e36-2aef-5625-867c-5d10eb94b234",
      "id": "CVE-2026-42584",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42584 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b3345c24-8ac5-547b-a52b-6ba00dcad1f9",
      "id": "CVE-2026-42585",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42585 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:668f8823-5415-5cf4-9745-36fd22144cb3",
      "id": "CVE-2026-42586",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42586 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8910969b-9c3c-53f1-8988-9df486b9ef45",
      "id": "CVE-2026-42587",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42587 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4164a536-8c56-5439-b910-9338683e6875",
      "id": "CVE-2026-44248",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44248 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:194df936-6b28-5962-8549-0b1c6f7f5fd2",
      "id": "CVE-2026-44249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44249 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:642269a8-c0a0-56f5-bf96-acfd96ec0b44",
      "id": "CVE-2026-44250",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44250 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:37a4d7a6-50f4-5b90-ba21-1fd8cfed7808",
      "id": "CVE-2026-44890",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:357f1a8b-f0ea-5d22-9839-083836a4f5a3",
      "id": "CVE-2026-44891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44891 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:15a25fc2-9a1b-5d38-9f43-9976b1397684",
      "id": "CVE-2026-44893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44893 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:517ea552-1a9c-5c4c-b857-faf3a634329f",
      "id": "CVE-2026-45416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45416 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f33caaeb-b19c-5829-9b91-46e8f4742c1f",
      "id": "CVE-2026-45536",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45536 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:77ce86a5-08a8-5aa0-8106-0b8b42d1cec1",
      "id": "CVE-2026-45673",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45673 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:85219bfe-1ca2-5f8c-9012-a943796ee5b5",
      "id": "CVE-2026-45674",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45674 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c37a2925-84fe-5be5-a799-d1cc93eb4559",
      "id": "CVE-2026-46340",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-46340 is fixed in version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5f6a7c3a-01e0-5a05-9baa-177d98793c1d",
      "id": "CVE-2026-47244",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47244 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9f077a44-2330-54ff-bdac-c3741b9bb427",
      "id": "CVE-2026-47691",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47691 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:41901701-e542-5edc-8c8b-3b35c3e9c25e",
      "id": "CVE-2026-48006",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48006 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:37ab4397-551b-59ba-af6d-294f1c992bd3",
      "id": "CVE-2026-48043",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-48043 does not affect version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-udt. already_fixed \u2014 The target repository (Netty 4.1.75.Final-tuxcare.1) already contains equivalent protection against CVE-2026-48043. While the upstream patch targets a newer architecture with a ChannelInboundHandlerAdapter tail handler (introduced in CVE-2025-58057 refactoring), the target's older architecture implements the same defensive pattern: a try-finally block ensuring ByteBuf.release() is called uncond..."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:373637b5-17e1-5b60-a5f8-ff14e26c5edb",
      "id": "CVE-2026-48059",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48059 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c12e8c1e-4a6e-5b33-8051-bcf6588c8639",
      "id": "CVE-2026-50010",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50010 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d3d3f825-e31d-596f-881e-e2c5ae115139",
      "id": "CVE-2026-50011",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50011 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9ed0bc6d-aea3-5952-8958-069836f2d6e8",
      "id": "CVE-2026-50020",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50020 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:df37a907-f0c2-5605-8ee3-0dadeb41788c",
      "id": "CVE-2026-50560",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:765b0b63-60ca-59eb-9782-1d5a97425ed4",
      "id": "CVE-2026-55831",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55831 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:219f7fbc-f19f-5db7-b1cd-78a249234558",
      "id": "CVE-2026-55833",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55833 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0669745f-24c0-5590-b997-f373081d04fe",
      "id": "CVE-2026-55851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55851 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dfea6399-590b-596f-82e2-ba9031ee42eb",
      "id": "CVE-2026-56745",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56745 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9adb6c9e-37e6-5d75-b831-c205123c0d28",
      "id": "CVE-2026-56746",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56746 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:127de622-7272-5b7a-9390-61efca28d9c2",
      "id": "CVE-2026-56817",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56817 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f44594c6-5492-570f-8029-bb0aa96e1fb8",
      "id": "CVE-2026-56818",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-56818 does not affect version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-udt. not_affected \u2014 The target version 4.1.75.Final (released March 2022) predates the introduction of the vulnerable feature by over 4 years. CVE-2026-56818 describes incomplete cleanup when the `maxElements` limit is exceeded in RedisArrayAggregator. However, the `maxElements` configuration parameter and associated exception handling were introduced in June 2026 (commits e51c64c964 and 728c98b8ec), neither of wh..."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4382f3c3-d029-52c6-8d75-2f71eb426092",
      "id": "CVE-2026-56819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56819 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:60851bb6-e4c3-5e48-9cb7-c18f7f3e5002",
      "id": "CVE-2026-59898",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59898 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d29609dd-a146-542c-97d2-74812b7d00e7",
      "id": "CVE-2026-59899",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59899 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8a140c52-0fe3-55fc-9fc4-5e1fb380601d",
      "id": "CVE-2026-59900",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59900 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fa033439-6281-53e8-839b-ff5ff5cd4f68",
      "id": "CVE-2026-59901",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59901 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6fbaa346-a24c-5a77-bc9f-a10c083fe05f",
      "id": "CVE-2026-59919",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59919 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0ba41b32-feb2-569f-9039-4581363f76e0",
      "id": "CVE-2026-59920",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59920 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3276f5a1-29b7-5007-b9e6-29a20b1b3de7",
      "id": "CVE-2026-59921",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59921 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0db46c86-e3d9-5a7c-8f77-bbb6f04be75a",
      "id": "CVE-2026-73507",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-73507 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4f1cd53e-4345-5262-ab15-1b51314a2ec9",
      "id": "CVE-2026-73508",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-73508 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:27c64e16-7315-544d-a44c-ee66ac99877d",
      "id": "GHSA-mfg7-5gfp-c4w3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4eef94ae-fe43-5b07-bb53-16a537e38ec0",
      "id": "GHSA-v74w-7mr3-4qg3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.75.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:59336a14-5a38-5e3f-9053-7a839c63162d",
      "id": "GHSA-xpw8-rcwv-8f8p",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-xpw8-rcwv-8f8p is fixed in version 4.1.75.Final-tuxcare.4 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.75.Final-tuxcare.4"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.75.Final-tuxcare.4"
    }
  ]
}