{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:4a48e77d-dad3-5fa6-b267-d4c43f33f354",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.4",
      "type": "library",
      "group": "io.netty",
      "name": "netty-transport",
      "version": "4.1.63.Final-tuxcare.4",
      "purl": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.4"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:6064b45d-119a-5424-9218-5a1cc73fd893",
      "id": "CVE-2021-37136",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-37136 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9c7c8dcd-e06a-5362-b2fc-6a705a74a140",
      "id": "CVE-2021-37137",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-37137 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e984050c-0054-5c23-8d2b-baaa8b34d217",
      "id": "CVE-2021-43797",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-43797 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:11edc830-4cd0-5dca-af60-e2fed374148f",
      "id": "CVE-2022-24823",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-24823 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fc776258-2b67-5b67-aa36-bb4ffeb894a1",
      "id": "CVE-2022-41881",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-41881 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:90cfd736-77d3-5e7d-9e05-37cd64d388bd",
      "id": "CVE-2022-41915",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-41915 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c4d1f282-fdf2-5c91-bbfc-7bd7a0bdcacc",
      "id": "CVE-2023-34462",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-34462 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:857719bc-4c40-5b53-8653-20621b2c2cc1",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-44487 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:19b6c382-dc5e-55f0-8613-3ff2e1559604",
      "id": "CVE-2023-4586",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2023-4586 is a false positive for io.netty:netty-transport 4.1.63.Final-tuxcare.4."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:577f07a2-f887-528a-8cd8-ce8794dded37",
      "id": "CVE-2024-29025",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-29025 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d7bda4fc-e4bb-5d3e-96d7-d696f898929f",
      "id": "CVE-2024-47535",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-47535 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6c2f021a-b827-5cb2-b85a-f87b32b0ab2d",
      "id": "CVE-2025-24970",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-24970 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b97bcc53-5c4e-5b7b-a62a-f68221eedc25",
      "id": "CVE-2025-25193",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-25193 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:52d29928-8363-5a75-8e13-62f8b3b09d40",
      "id": "CVE-2025-55163",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55163 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0697afd4-274c-5043-a1f3-a125fc36b978",
      "id": "CVE-2025-58056",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58056 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:09ab2a71-8c92-55a8-9749-618bf0dcf108",
      "id": "CVE-2025-58057",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-58057 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4a958e23-8c6e-5bf6-9931-723ecda06a3a",
      "id": "CVE-2025-59419",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-59419 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:23defc43-c7f7-55c1-b44f-ed31587d2eb9",
      "id": "CVE-2025-67735",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-67735 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b4ba1b69-a9bd-5fe7-94cf-beddb41d1e72",
      "id": "CVE-2026-33870",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33870 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:db30fb96-c281-5cb5-9d9b-dd5083164916",
      "id": "CVE-2026-33871",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33871 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ddc84d1f-1f5c-55bc-80d3-d8bf0ea2ad68",
      "id": "CVE-2026-41417",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41417 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8dc58ea8-12b0-5652-8a60-468202cc9809",
      "id": "CVE-2026-42577",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42577 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:612be019-9072-5bad-ae58-5e9fc47f31fb",
      "id": "CVE-2026-42578",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42578 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:356c7ac4-780d-5ca1-8abe-745c10782566",
      "id": "CVE-2026-42579",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42579 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8557f544-f96c-5814-9c48-05cc696f107a",
      "id": "CVE-2026-42580",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42580 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fd562364-b221-55c4-a36e-292cae40d039",
      "id": "CVE-2026-42581",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42581 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6b076858-3163-53d6-ba94-1ac2751d135b",
      "id": "CVE-2026-42583",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42583 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:54119560-de88-5812-b5c1-e85d72274936",
      "id": "CVE-2026-42584",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42584 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b42e1f2d-6a48-5dcf-af74-9a456de981c0",
      "id": "CVE-2026-42585",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42585 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7acef01a-8106-5fdd-9e98-c84aa92935be",
      "id": "CVE-2026-42586",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42586 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:29186c46-2251-58a2-acaf-8a45b08003fd",
      "id": "CVE-2026-42587",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42587 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b01c9a12-f124-5362-87e1-7e13a755f5a1",
      "id": "CVE-2026-44248",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44248 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:203b4f5a-2ace-5f47-8e18-3aef94b09989",
      "id": "CVE-2026-44249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44249 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6f9c5bb9-7df6-508a-b44f-919bb4afda9a",
      "id": "CVE-2026-44250",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44250 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e2ee5963-8e31-55d9-bc6c-72e4adb1e31f",
      "id": "CVE-2026-44890",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:de21cfee-dc0f-5304-b74e-824cdc0ee77e",
      "id": "CVE-2026-44891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44891 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b2723229-a1c2-5e62-bd44-82fabdda49d7",
      "id": "CVE-2026-44893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44893 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e478beeb-bd7c-5d22-95eb-b3a22750eb15",
      "id": "CVE-2026-45416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45416 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8a8fd624-f159-5a49-ba20-5111ead06618",
      "id": "CVE-2026-45536",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45536 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:25d1fd36-aa62-5161-a820-d206613d2931",
      "id": "CVE-2026-45673",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45673 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:97fd18eb-da0e-5991-9c2e-989f3c0be2b6",
      "id": "CVE-2026-45674",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45674 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:42ca270c-94e9-52d4-a74c-a62c9d59e369",
      "id": "CVE-2026-46340",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-46340 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5ee720dc-6bcb-531d-83ad-f653b01df821",
      "id": "CVE-2026-47244",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47244 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:56e88fad-4c89-52d0-bd8c-bc453b5bd490",
      "id": "CVE-2026-47691",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47691 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e7f4a59f-4dab-596f-a050-7a7b61ed6bc8",
      "id": "CVE-2026-48006",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48006 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1903d716-96f4-5c51-9cbe-63d03487c165",
      "id": "CVE-2026-48043",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-48043 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:11e7f3bd-9fcf-5de1-9871-8570ef78e2d7",
      "id": "CVE-2026-48059",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48059 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a52b7712-4a78-5068-a408-5f4f48f07348",
      "id": "CVE-2026-50010",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50010 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:baf19cfe-df9d-58d8-b2c9-dab2d82ab470",
      "id": "CVE-2026-50011",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50011 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:98680af3-680c-5f62-a9e2-50ea03eb09bb",
      "id": "CVE-2026-50020",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50020 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:153857d2-5c94-5744-ae9b-73547b8c6365",
      "id": "CVE-2026-50560",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.63.Final-tuxcare.4 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2e6638b4-a643-5f71-9147-51e5713ad91b",
      "id": "CVE-2026-55831",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55831 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5ca51fb9-2e9f-5d5c-ba25-be3e5ea8b082",
      "id": "CVE-2026-55833",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55833 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:04bdba17-6ddd-5eef-bdca-1e9677c54991",
      "id": "CVE-2026-55851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55851 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0397437d-e502-5495-bee9-c0dc0ecd9491",
      "id": "CVE-2026-56745",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56745 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:37c79f95-0fe5-574f-85f2-f59f86f7d71d",
      "id": "CVE-2026-56746",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56746 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cd679a1d-fe81-5533-bb92-eea6ecb7c8cc",
      "id": "CVE-2026-56817",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-56817 does not affect version 4.1.63.Final-tuxcare.4 of io.netty:netty-transport. not_affected \u2014 The Netty codec-xml module contains XmlDecoder, which instantiates an Aalto XML parser without security configuration (line 38: new InputFactoryImpl() with no XXE protection). However, this is a library component that Netty itself does not use in its own production code. The vulnerability only manifests when downstream applications explicitly add XmlDecoder to their Netty channel pipelines. Per..."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:20148039-ec31-5e04-a126-2fd247c3656d",
      "id": "CVE-2026-56818",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56818 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0442c3cb-126a-5793-9284-af6c6e84fac6",
      "id": "CVE-2026-56819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56819 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b4d1c6a8-8416-543a-9517-e46f2d50b278",
      "id": "CVE-2026-59898",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59898 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:60a3ea8e-55d0-5435-bc37-cfdca471d4c2",
      "id": "CVE-2026-59899",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59899 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:aa9f17b3-921b-52e9-88de-18f431e42b36",
      "id": "CVE-2026-59900",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59900 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5a33e641-63ba-5a76-b4c6-36864f5a8c98",
      "id": "CVE-2026-59901",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59901 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:50b065e4-852c-5ec4-9681-277722ae99be",
      "id": "CVE-2026-59919",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59919 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:06c0a529-b8e0-5822-81fa-d09580e7a842",
      "id": "CVE-2026-59920",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59920 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:74e53a26-b826-5b4a-ab0c-c3f48080c4e6",
      "id": "CVE-2026-59921",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59921 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0ac0885a-739c-5da3-bd9e-c63f96dd8dd4",
      "id": "CVE-2026-73507",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-73507 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d8f820c4-60a2-5045-a411-cbc999488fee",
      "id": "CVE-2026-73508",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-73508 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6ad57dc9-353f-5adb-9a2b-04777f164f14",
      "id": "GHSA-mfg7-5gfp-c4w3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3d2a741d-9b0c-53d1-bc19-e4a585db66de",
      "id": "GHSA-v74w-7mr3-4qg3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2eb21fbf-e617-58e2-8e7f-2d17c12bf342",
      "id": "GHSA-xpw8-rcwv-8f8p",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-xpw8-rcwv-8f8p affects version 4.1.63.Final-tuxcare.4 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.4"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.4"
    }
  ]
}