{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:0a119b4a-5a6f-5708-89c7-cd4810f81160",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/io.netty/netty-transport@4.1.73.Final-tuxcare.3",
      "type": "library",
      "group": "io.netty",
      "name": "netty-transport",
      "version": "4.1.73.Final-tuxcare.3",
      "purl": "pkg:maven/io.netty/netty-transport@4.1.73.Final-tuxcare.3"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:6577db3f-bec6-5066-9bb4-cd2c80ebfc85",
      "id": "CVE-2022-24823",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-24823 is fixed in version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:85713daf-754c-50a5-a524-b4ee9cd85bf2",
      "id": "CVE-2022-41881",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-41881 is fixed in version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7ae82c14-4bfa-51c6-9f37-25f17e882cf1",
      "id": "CVE-2022-41915",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-41915 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ee3df331-e0a9-5934-92d9-a1f942499b60",
      "id": "CVE-2023-34462",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-34462 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d99e8f19-0576-5172-a514-54a6bd63bdad",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-44487 is fixed in version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b344a26e-1c8e-537e-98c4-1c2e16ecd581",
      "id": "CVE-2023-4586",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2023-4586 is a false positive for io.netty:netty-transport 4.1.73.Final-tuxcare.3."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:23e302ec-86ba-54ac-bf32-1254ca6d9a3e",
      "id": "CVE-2024-29025",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-29025 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b776a5e4-3868-5360-9444-3fc8f7bbe286",
      "id": "CVE-2024-47535",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-47535 is fixed in version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:14809dbf-8c83-5396-b8de-376162d71c84",
      "id": "CVE-2025-24970",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-24970 is fixed in version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8a46fc4d-d351-5eae-bf9f-a62d47d9ee78",
      "id": "CVE-2025-25193",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-25193 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3d6e96b8-299d-52c8-8dd9-29bdf73d1f47",
      "id": "CVE-2025-55163",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-55163 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a778380a-5c47-596e-9538-d4f07edfe343",
      "id": "CVE-2025-58056",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58056 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bc27cbd3-d710-59c1-a5eb-32f0d7d29f13",
      "id": "CVE-2025-58057",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58057 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bcf13281-1cd7-55d3-8870-0058f5ac0234",
      "id": "CVE-2025-59419",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-59419 is fixed in version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d1335de6-0dfe-52dc-aeec-787d941be6c0",
      "id": "CVE-2025-67735",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-67735 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:79b5f62a-e37c-5cfb-aef2-681bf46c7110",
      "id": "CVE-2026-33870",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33870 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a2b03c59-968b-525e-b4fc-a464c79b40e8",
      "id": "CVE-2026-33871",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33871 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c425399d-611f-538c-bba8-9c66d7c3692c",
      "id": "CVE-2026-41417",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41417 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d148cff3-bd19-5817-81d5-a1bb1c4256d9",
      "id": "CVE-2026-42577",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42577 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b866ec11-5a24-5e1a-885c-207cb0e95e70",
      "id": "CVE-2026-42578",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42578 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:decf9ba0-0e06-52c2-8a8f-25f78c23de06",
      "id": "CVE-2026-42579",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42579 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2c7d9893-2cab-5bbc-956c-638376699512",
      "id": "CVE-2026-42580",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42580 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7f369853-42ff-5d2a-93ab-d6937bf9b5da",
      "id": "CVE-2026-42581",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42581 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:80c800c8-8623-5385-be62-d6268cb63352",
      "id": "CVE-2026-42583",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42583 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8e7e69b2-f491-5c7d-9d4e-dae566295049",
      "id": "CVE-2026-42584",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42584 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d179e43b-d042-51b0-876f-fc00e5eea1ba",
      "id": "CVE-2026-42585",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42585 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:562c727d-7aa4-5d46-ad76-21bb086484d5",
      "id": "CVE-2026-42586",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42586 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e1ed64d6-7569-5edc-9212-7920f780316f",
      "id": "CVE-2026-42587",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42587 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:72892c02-f7d4-5a25-b12d-a2719291ee6d",
      "id": "CVE-2026-44248",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44248 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6dadf376-1322-5272-811e-ca0d61400324",
      "id": "CVE-2026-44249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44249 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7e44c89c-223e-5f13-bb95-e4b28aee6f88",
      "id": "CVE-2026-44250",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44250 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4893ed26-35d0-5cdb-b279-09bb7acf77d1",
      "id": "CVE-2026-44890",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1d888a3d-638b-592a-b49e-f9d0c9080045",
      "id": "CVE-2026-44891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44891 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4b443384-f450-5e15-a841-678da85cacc1",
      "id": "CVE-2026-44893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44893 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7de74fe5-db66-5ae4-8fd9-84c6b0cefb30",
      "id": "CVE-2026-45416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45416 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:09e5910b-90fb-5e5d-bcab-f9446185777b",
      "id": "CVE-2026-45536",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45536 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0df2bfeb-39ec-555d-bd0e-2a15e9539579",
      "id": "CVE-2026-45673",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45673 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f9008799-2d37-5bbe-8f83-f102435f2937",
      "id": "CVE-2026-45674",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45674 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5a418ecd-02bc-5265-9f2e-317418bb1ea0",
      "id": "CVE-2026-46340",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-46340 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3dba58c1-91d8-5321-8511-ad524d2ed8fc",
      "id": "CVE-2026-47244",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47244 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ffd8f9e4-8926-589e-83a1-ea023b0176b3",
      "id": "CVE-2026-47691",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47691 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c3a43b73-7688-51d9-9e3f-a1fe4ff56393",
      "id": "CVE-2026-48006",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48006 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:186a0289-dfc3-5d67-8d23-cccacb7c985a",
      "id": "CVE-2026-48043",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-48043 does not affect version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport. not_affected \u2014 Version 4.1.73 is not affected by CVE-2026-48043. The target uses a loop-based architecture with try-finally protection (introduced in 2016) that prevents the buffer leak described in the CVE. The vulnerable ChannelInboundHandlerAdapter pattern that the upstream patch fixes does not exist in this version."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8ff7d000-ca4b-593f-9259-0216f61111ec",
      "id": "CVE-2026-48059",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48059 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:33230bef-4bc8-5f3d-acf6-85386cf6f1a2",
      "id": "CVE-2026-50010",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50010 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:03073dca-498e-5867-a2f4-802f349f33a6",
      "id": "CVE-2026-50011",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50011 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a05334e1-f045-51ca-8b1e-aaae5d78b4b2",
      "id": "CVE-2026-50020",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50020 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bba8c146-1489-5c22-b07b-bb388668442e",
      "id": "CVE-2026-50560",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ae1e5a27-bd38-5bc3-817b-e14c8084be43",
      "id": "CVE-2026-55831",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55831 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:16e4b7dc-4531-5ec1-a843-991096a9ec48",
      "id": "CVE-2026-55833",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55833 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0f04f757-a16a-5250-a507-547e2b92aa11",
      "id": "CVE-2026-55851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55851 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b38a84eb-840c-5434-aa0d-8fd07de4ee34",
      "id": "CVE-2026-56745",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56745 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a6f580e9-2c09-5301-a348-b7f5bcea6b72",
      "id": "CVE-2026-56746",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56746 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a9f80a2d-f541-5b78-baef-4da6bbe1d6a8",
      "id": "CVE-2026-56817",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56817 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b4345328-5338-5e50-8949-03ca67a9587f",
      "id": "CVE-2026-56818",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-56818 does not affect version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport. not_affected \u2014 The target version 4.1.73.Final-tuxcare.2 is NOT AFFECTED by CVE-2026-56818. The vulnerable code pattern (configurable `maxElements` limit check without cleanup, contrasting with `maxNestedArrayDepth` limit check WITH cleanup) was introduced in version 4.1.135.Final through commits e51c64c964 and 728c98b8ec (dated 2026-06-01/02). The target version predates these features entirely and does not ..."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a3791301-a4e7-5fc1-98a8-885ccfcf6440",
      "id": "CVE-2026-56819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56819 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ed0affd2-c637-5c94-bacb-2c191dfae7e5",
      "id": "CVE-2026-59898",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59898 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:71074bad-a50d-5831-92e5-47d6b295bce8",
      "id": "CVE-2026-59899",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59899 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6c5df4e6-e10a-5ea4-9b87-dd0021da892a",
      "id": "CVE-2026-59900",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59900 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:aad61834-9662-50b8-b948-8fdf7d7688c2",
      "id": "CVE-2026-59901",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59901 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6069f106-e33f-5f1f-b9ff-3ebd96f89d71",
      "id": "CVE-2026-59919",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59919 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e19c631c-eaa1-5893-a3b6-f44d9c36ff12",
      "id": "CVE-2026-59920",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59920 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8975f78e-813e-5fc0-afc4-7b51d8ed36e8",
      "id": "CVE-2026-59921",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59921 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4a09385b-0771-5f9d-9175-bfa9f6197fd8",
      "id": "CVE-2026-73507",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-73507 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2606fca8-7f9e-5e0a-981a-9044203bf0c4",
      "id": "CVE-2026-73508",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-73508 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:52156d0b-8ea1-5a7c-b57b-28bfc5ec5f9c",
      "id": "GHSA-mfg7-5gfp-c4w3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1d5ab12d-7d98-54a6-8524-5a8831d624b8",
      "id": "GHSA-v74w-7mr3-4qg3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.73.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:949dc0ef-9320-5fe7-8ee8-ea5b24f72c2c",
      "id": "GHSA-xpw8-rcwv-8f8p",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-xpw8-rcwv-8f8p affects version 4.1.73.Final-tuxcare.3 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.73.Final-tuxcare.3"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.netty/netty-transport@4.1.73.Final-tuxcare.3"
    }
  ]
}