{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:f06872b5-570d-5fcc-9a9c-91c730e41e6c",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/io.netty/netty-buffer@4.1.117.Final-tuxcare.1",
      "type": "library",
      "group": "io.netty",
      "name": "netty-buffer",
      "version": "4.1.117.Final-tuxcare.1",
      "purl": "pkg:maven/io.netty/netty-buffer@4.1.117.Final-tuxcare.1"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:56276aba-ee3d-50d9-af97-d1cf1f783492",
      "id": "CVE-2025-24970",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-24970 affects version 4.1.117.Final-tuxcare.1 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.117.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cf01ecb6-8425-5db4-8dfe-59122302a8fc",
      "id": "CVE-2025-25193",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-25193 is fixed in version 4.1.117.Final-tuxcare.1 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.117.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3b2b9fdb-b6c3-5db1-98e4-5f2aaacf8d2e",
      "id": "CVE-2026-33871",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-33871 is fixed in version 4.1.117.Final-tuxcare.1 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.117.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ce0ff614-953a-5f0e-a73d-fe295a5deebc",
      "id": "CVE-2026-42579",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42579 is fixed in version 4.1.117.Final-tuxcare.1 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.117.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:228138c0-bbc8-5336-9e1e-9dca146bc3e0",
      "id": "CVE-2026-42580",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42580 affects version 4.1.117.Final-tuxcare.1 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.117.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5841a308-6a83-584f-b725-7cda042be99f",
      "id": "CVE-2026-42583",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42583 affects version 4.1.117.Final-tuxcare.1 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.117.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5b3565fa-4116-5cc8-a452-2ad38ed5bac3",
      "id": "CVE-2026-42586",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42586 affects version 4.1.117.Final-tuxcare.1 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.117.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e5369485-637f-589d-9456-7684e70c4964",
      "id": "CVE-2026-44249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44249 affects version 4.1.117.Final-tuxcare.1 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.117.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:89cfecc6-d408-58d2-9997-9e2850309588",
      "id": "CVE-2026-44890",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.117.Final-tuxcare.1 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.117.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e5b07a3a-910e-5bd2-8958-3b3aa3bbce77",
      "id": "CVE-2026-48059",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48059 affects version 4.1.117.Final-tuxcare.1 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.117.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1b13c807-2b79-5223-81bd-febfb498b535",
      "id": "CVE-2026-50010",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50010 affects version 4.1.117.Final-tuxcare.1 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.117.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6cf8490b-e61a-577d-b31e-5cf7c53ab10f",
      "id": "CVE-2026-50020",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50020 affects version 4.1.117.Final-tuxcare.1 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.117.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9e209201-d264-5c7c-85aa-741a0ce0bcfc",
      "id": "CVE-2026-50560",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.117.Final-tuxcare.1 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.117.Final-tuxcare.1"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.netty/netty-buffer@4.1.117.Final-tuxcare.1"
    }
  ]
}