{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:8f49272c-9661-5285-b066-8b48a8880cbc",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/io.netty/netty-bom@4.1.92.Final-tuxcare.2",
      "type": "library",
      "group": "io.netty",
      "name": "netty-bom",
      "version": "4.1.92.Final-tuxcare.2",
      "purl": "pkg:maven/io.netty/netty-bom@4.1.92.Final-tuxcare.2"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:ec8c2fef-e7f4-53c0-a44f-9f418547b87b",
      "id": "CVE-2023-34462",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-34462 is fixed in version 4.1.92.Final-tuxcare.2 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:58c06681-6cd9-549b-9c14-379eb423836b",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-44487 is fixed in version 4.1.92.Final-tuxcare.2 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0fce64e2-eb37-58dc-860e-3957dde9f1e1",
      "id": "CVE-2023-4586",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2023-4586 is a false positive for io.netty:netty-bom 4.1.92.Final-tuxcare.2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0f74527e-f514-5613-9b39-e86bfa69366b",
      "id": "CVE-2024-29025",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-29025 is fixed in version 4.1.92.Final-tuxcare.2 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c70da305-d537-523d-b9c9-daf44c5c0b01",
      "id": "CVE-2024-47535",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-47535 is fixed in version 4.1.92.Final-tuxcare.2 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b4acd921-804c-50e7-beca-6e3ee4d6f492",
      "id": "CVE-2025-24970",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-24970 is fixed in version 4.1.92.Final-tuxcare.2 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ce8aaf12-43d3-5129-b8a7-65676b4bbd53",
      "id": "CVE-2025-25193",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-25193 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5708cfd1-ea55-5601-80dc-f46927729af1",
      "id": "CVE-2025-55163",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55163 is fixed in version 4.1.92.Final-tuxcare.2 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9bec9a46-7689-57c1-aeb5-5915faabb3f7",
      "id": "CVE-2025-58056",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-58056 is fixed in version 4.1.92.Final-tuxcare.2 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9288fa9c-0b61-5783-be00-2a027f8d1cfd",
      "id": "CVE-2025-58057",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58057 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2a1bc29c-beca-519a-b5bd-9739ce420714",
      "id": "CVE-2025-59419",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-59419 is fixed in version 4.1.92.Final-tuxcare.2 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8781714d-d42e-5f26-9135-0f7f9f38deb1",
      "id": "CVE-2025-67735",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-67735 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ebbf1fb4-d816-5571-8fb5-644ad6dbf361",
      "id": "CVE-2026-33870",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-33870 is fixed in version 4.1.92.Final-tuxcare.2 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:389ac05f-7a73-5dbc-9eaa-f707c4afed2f",
      "id": "CVE-2026-33871",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33871 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1319f57a-3af7-524f-9aa4-abb14f1f66c7",
      "id": "CVE-2026-41417",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41417 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e10af054-f01b-5ad2-97f4-d5df0373c495",
      "id": "CVE-2026-42577",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42577 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bdbeb93b-222e-5956-86ff-e707ec7ca87a",
      "id": "CVE-2026-42578",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42578 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:769c5acd-feff-50a7-95cf-38fa391293ef",
      "id": "CVE-2026-42579",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42579 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0dc56558-1f9c-57fe-ae20-e10e0d7ee5c4",
      "id": "CVE-2026-42580",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42580 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1c76b52d-92cc-56d8-b6e5-94011d1960f5",
      "id": "CVE-2026-42581",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42581 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6cbab40a-702b-5624-9f47-9ebb4f8665ca",
      "id": "CVE-2026-42583",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42583 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:75844482-d9be-5358-8862-da6a0714fe5e",
      "id": "CVE-2026-42584",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42584 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9b4d78a7-f3c2-5b04-b357-90d207a70811",
      "id": "CVE-2026-42585",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42585 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c43a86e7-690f-54f6-8dbe-50694a5bb215",
      "id": "CVE-2026-42586",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42586 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:59ee0b2c-8962-5ace-b703-a5133af20d55",
      "id": "CVE-2026-42587",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42587 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2cec9a04-6dcf-5003-b71d-229daad4b94e",
      "id": "CVE-2026-44248",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44248 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:079a1997-940b-5a0f-9f74-9993f8c56a87",
      "id": "CVE-2026-44249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44249 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:43b68a38-74b3-5a27-a1b5-c4057c45ff8d",
      "id": "CVE-2026-44250",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44250 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c22a3619-64a2-5811-aacf-baf73647fa02",
      "id": "CVE-2026-44890",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44890 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:28e75e8b-941b-5f42-b4e0-14dc41526b98",
      "id": "CVE-2026-44891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44891 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bfd9196e-0556-55ae-ab71-ee91a8ef679e",
      "id": "CVE-2026-44893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44893 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3c52c2b6-e661-51bf-b087-520435d527eb",
      "id": "CVE-2026-45416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45416 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b3464765-bf13-5d5b-94d1-e5f60ef6d5f3",
      "id": "CVE-2026-45536",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45536 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1f494643-5897-58e1-a3ec-ecd02fc5fb25",
      "id": "CVE-2026-45673",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45673 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:01b37059-6d93-5926-a73e-b60ff94525ba",
      "id": "CVE-2026-45674",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45674 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b96d1ed3-c70d-553f-ab46-5040faec55f7",
      "id": "CVE-2026-46340",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-46340 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3ee0f35b-b50c-5f71-9a24-b97e7a6b4f88",
      "id": "CVE-2026-47244",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47244 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8fd264e9-c7f9-5d1a-a64c-3145fe6370df",
      "id": "CVE-2026-47691",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47691 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ad545478-527c-559d-80cc-70e387e68b2f",
      "id": "CVE-2026-48006",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48006 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bcc8b7d9-18ba-59dd-9219-30a0dc437647",
      "id": "CVE-2026-48043",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-48043 does not affect version 4.1.92.Final-tuxcare.2 of io.netty:netty-bom. not_affected \u2014 The target repository (Netty 4.1.92.Final-tuxcare.3) is not affected by CVE-2026-48043. The vulnerability exists in a newer architectural pattern (ChannelInboundHandlerAdapter-based decompression handling) that was introduced after version 4.1.92. The target uses an older architecture that processes HTTP/2 decompression directly in the onDataRead() method with existing try-finally protection."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:22986447-148c-5821-b3f1-36683599b548",
      "id": "CVE-2026-48059",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48059 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a227415f-c3f9-51c8-8664-458e3b98e4cf",
      "id": "CVE-2026-50010",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50010 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:27fe83ba-9bee-56f3-8721-ea87886f9458",
      "id": "CVE-2026-50011",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50011 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:12da69c1-7d34-5e34-9787-95ead4301d61",
      "id": "CVE-2026-50020",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50020 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dc10b651-6674-5c64-b14e-19066b82781e",
      "id": "CVE-2026-50560",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50560 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c72df1d3-272d-5fd7-91a3-03b3a9fb32e6",
      "id": "CVE-2026-55831",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55831 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:354598d2-c4bc-582e-84ca-8ff808895fbe",
      "id": "CVE-2026-55833",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55833 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6907bfa3-14df-5dc2-9663-fc422efc9c86",
      "id": "CVE-2026-55851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55851 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:98047f04-11cf-5354-8d88-12a2044d16f3",
      "id": "CVE-2026-56745",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56745 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e690922c-0445-5c69-bfc7-2652beda28ab",
      "id": "CVE-2026-56746",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56746 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:70440009-a031-5ac6-9a93-7a509da3963a",
      "id": "CVE-2026-56817",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56817 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8fd1c379-53c7-59b9-aa56-43d90a524df1",
      "id": "CVE-2026-56820",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56820 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ab02a320-1b39-5df0-bd97-67e06c4292d9",
      "id": "CVE-2026-56821",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56821 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:94129c9f-53e1-5072-9203-7758c8b1683e",
      "id": "CVE-2026-56822",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56822 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b812e97c-095d-5880-a3a3-279fca14d8ac",
      "id": "CVE-2026-59898",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59898 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c7ce6462-8297-5a93-9a76-43461b350477",
      "id": "CVE-2026-59899",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59899 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fe7e6a42-775e-5e4c-972c-043be7c2fc1e",
      "id": "CVE-2026-59900",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59900 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f1ea6597-733e-5d6e-8862-5f9e6fe55915",
      "id": "CVE-2026-59901",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59901 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:58db7c36-2180-539f-9f9d-f7d2ffaafcff",
      "id": "CVE-2026-59919",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59919 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e62b635b-7080-58a3-a18b-fbb95e9e34c7",
      "id": "CVE-2026-59920",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59920 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1adad0a2-9b02-54bd-af1e-bfa3bd99b7c9",
      "id": "CVE-2026-59921",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59921 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:726534d5-6261-55f5-bc34-f967fa282d89",
      "id": "GHSA-mfg7-5gfp-c4w3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dcf34268-fde0-5f96-b824-736b16c17a9f",
      "id": "GHSA-v74w-7mr3-4qg3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8909d474-d39e-57ec-8228-34e1d5d7495c",
      "id": "GHSA-xpw8-rcwv-8f8p",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability GHSA-xpw8-rcwv-8f8p does not affect version 4.1.92.Final-tuxcare.2 of io.netty:netty-bom. The version is not vulnerable. [terminalized not_affected from patch_application_manual/not_vulnerable]"
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.92.Final-tuxcare.2"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.netty/netty-bom@4.1.92.Final-tuxcare.2"
    }
  ]
}