{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:0a7fc276-c3a5-5b1c-98c2-0b668d181da8",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/io.netty/netty-buffer@4.1.75.Final-tuxcare.3",
      "type": "library",
      "group": "io.netty",
      "name": "netty-buffer",
      "version": "4.1.75.Final-tuxcare.3",
      "purl": "pkg:maven/io.netty/netty-buffer@4.1.75.Final-tuxcare.3"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:0e587c37-074a-570d-9900-074632647a4e",
      "id": "CVE-2022-24823",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-24823 is fixed in version 4.1.75.Final-tuxcare.3 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:adb90735-fb01-5d50-9bad-fb748fda0539",
      "id": "CVE-2022-41881",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-41881 is fixed in version 4.1.75.Final-tuxcare.3 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0c6bcfc5-fe86-5cdd-8fbf-9df1940e7b6c",
      "id": "CVE-2022-41915",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-41915 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b40656fe-f6c1-510d-806a-e38012e1ad92",
      "id": "CVE-2023-34462",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-34462 is fixed in version 4.1.75.Final-tuxcare.3 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:16c5e1bd-ddc5-5487-80f6-7ad0ac55b9f5",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-44487 is fixed in version 4.1.75.Final-tuxcare.3 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4ee2b7cb-4fb6-577a-9f22-f8d879a67292",
      "id": "CVE-2023-4586",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2023-4586 is a false positive for io.netty:netty-buffer 4.1.75.Final-tuxcare.3."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3da0f52c-6e5b-5663-8487-8db8a0ad205e",
      "id": "CVE-2024-29025",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-29025 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d9ebf6fe-c036-5c82-94fc-b61e87ea1368",
      "id": "CVE-2024-47535",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-47535 is fixed in version 4.1.75.Final-tuxcare.3 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:35acbfbb-e9b1-5926-81ae-f8cd41875a15",
      "id": "CVE-2025-24970",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-24970 is fixed in version 4.1.75.Final-tuxcare.3 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:19a11dbb-9ad7-5027-af6d-88072e76bfc3",
      "id": "CVE-2025-25193",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-25193 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a1166f76-c65b-5953-9cfa-f3374f0195af",
      "id": "CVE-2025-55163",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-55163 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:59b12bfb-3f71-5d4d-801d-7df98c6336b4",
      "id": "CVE-2025-58056",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-58056 is fixed in version 4.1.75.Final-tuxcare.3 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8712a176-4574-5534-a420-e1d09da9a53e",
      "id": "CVE-2025-58057",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58057 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:22c815ee-f8ec-5736-ac2b-9360e4ee98e3",
      "id": "CVE-2025-59419",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-59419 is fixed in version 4.1.75.Final-tuxcare.3 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d4b2a0a0-b0a5-5106-a157-ebf93a0a5252",
      "id": "CVE-2025-67735",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-67735 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e1559d73-19a7-5f64-b5e9-9f058d2f245b",
      "id": "CVE-2026-33870",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33870 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1931edfa-a64e-5837-bd17-97e043611820",
      "id": "CVE-2026-33871",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33871 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d3ebf8cc-fd7d-5f9a-a003-18c7c1633853",
      "id": "CVE-2026-41417",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41417 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fcea14cb-33f8-55e1-904c-5ab99d3d24e3",
      "id": "CVE-2026-42577",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42577 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:46509fb6-e17c-5d93-9af0-8e5a2190dc7e",
      "id": "CVE-2026-42578",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42578 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a9f71ef6-eb11-500d-bed0-0204c05ffd90",
      "id": "CVE-2026-42579",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42579 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5ac4e3c8-e530-5c2c-bc61-d31929ffe512",
      "id": "CVE-2026-42580",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42580 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bb361811-406d-58cf-a80c-544f8b52bab9",
      "id": "CVE-2026-42581",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42581 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bd7b5d7e-e1b6-5442-9ee4-5c02c148c0cc",
      "id": "CVE-2026-42583",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42583 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bbf2941f-121e-5296-ab6a-69a636610116",
      "id": "CVE-2026-42584",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42584 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:55ddb45b-965b-50d5-b8d1-f85dbba18636",
      "id": "CVE-2026-42585",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42585 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1e3dd2ef-4351-5b1f-8a61-d4ef67bd50d3",
      "id": "CVE-2026-42586",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42586 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e46562b0-ee19-5e97-97c0-5695f35a4d85",
      "id": "CVE-2026-42587",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42587 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bb0cbf5d-8c2a-5dbb-9fc9-90bd0ef5729f",
      "id": "CVE-2026-44248",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44248 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d87cc7c1-5cb4-5595-9fd6-bc9b0af140ea",
      "id": "CVE-2026-44249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44249 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ac33f38e-e173-5f63-9282-e4a0adb23468",
      "id": "CVE-2026-44250",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44250 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:155afec6-7565-52f0-a3fa-9aa9ad0a7aba",
      "id": "CVE-2026-44890",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.75.Final-tuxcare.3 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:eee1b347-5596-559e-9870-6999f2b24d1c",
      "id": "CVE-2026-44891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44891 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2ff6ab36-3f00-5584-8b2b-ecc8444dbc42",
      "id": "CVE-2026-44893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44893 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:618af253-efbe-5999-ae7f-66242fab5fda",
      "id": "CVE-2026-45416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45416 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3dde09ea-240f-5339-aeda-4d0643d8601c",
      "id": "CVE-2026-45536",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45536 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:78586539-573c-5979-9d0c-0d49b24bf781",
      "id": "CVE-2026-45673",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45673 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:77a7d2fe-fd2e-57e4-90d3-fc8b2331a326",
      "id": "CVE-2026-45674",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45674 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4ceabcd2-1bc9-53cf-879a-ef8d28d562c6",
      "id": "CVE-2026-46340",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-46340 is fixed in version 4.1.75.Final-tuxcare.3 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:58a2cbed-c6f3-5806-943d-ba9ddf93b374",
      "id": "CVE-2026-47244",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47244 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0c36627d-7de3-562a-aeec-0c989f076779",
      "id": "CVE-2026-47691",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47691 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c823d3e1-a819-59d5-a7c3-cc7ef8368806",
      "id": "CVE-2026-48006",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48006 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4334adae-4693-506b-9b89-2395183979c5",
      "id": "CVE-2026-48043",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-48043 does not affect version 4.1.75.Final-tuxcare.3 of io.netty:netty-buffer. already_fixed \u2014 The target repository (Netty 4.1.75.Final-tuxcare.1) already contains equivalent protection against CVE-2026-48043. While the upstream patch targets a newer architecture with a ChannelInboundHandlerAdapter tail handler (introduced in CVE-2025-58057 refactoring), the target's older architecture implements the same defensive pattern: a try-finally block ensuring ByteBuf.release() is called uncond..."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d5f03b8e-ab15-5f05-affd-4c16a7edfc43",
      "id": "CVE-2026-48059",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48059 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:13f19266-fd14-5093-a5e4-09ac80e84ca7",
      "id": "CVE-2026-50010",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50010 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f1c279cd-0463-5813-9ad8-4fde8c541a65",
      "id": "CVE-2026-50011",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50011 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9b176038-8578-547a-be75-308fa1af7abc",
      "id": "CVE-2026-50020",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50020 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:662d8a2a-50b7-5771-8ed3-2acca1f0f111",
      "id": "CVE-2026-50560",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.75.Final-tuxcare.3 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2d571755-067f-5a43-bfbb-5729aa0e3f1a",
      "id": "CVE-2026-55831",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55831 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6a88b05d-7a5e-51a0-a954-92d706d228bb",
      "id": "CVE-2026-55833",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55833 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5d9c2d40-3662-54f2-ad48-5b9934f5b8e2",
      "id": "CVE-2026-55851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55851 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f0dc4984-71c9-57b6-9aa7-f4ef99f2e242",
      "id": "CVE-2026-56745",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56745 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4d7a3dac-3cc4-5290-a634-4157a7dfa4c8",
      "id": "CVE-2026-56746",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56746 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1cc97b22-46f2-58e2-acb7-a4f5123361d7",
      "id": "CVE-2026-56817",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56817 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c0fe41e5-490d-559f-ba6a-da420ba0a843",
      "id": "CVE-2026-59898",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59898 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:383e01a3-ba9f-5b47-940e-eb422d3153ba",
      "id": "CVE-2026-59899",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59899 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8056d692-37ee-5968-847c-7cf60980a6a6",
      "id": "CVE-2026-59900",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59900 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:24d1e31c-f85f-52f9-b609-4fc27711475d",
      "id": "CVE-2026-59901",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59901 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ddd16ab1-ed1d-59be-bf02-1889bb15c41d",
      "id": "CVE-2026-59919",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59919 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8605634f-899c-544e-84ed-ccf83701242b",
      "id": "CVE-2026-59920",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59920 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:771bc1b7-a8bd-5f6d-8979-c19823cc1f50",
      "id": "CVE-2026-59921",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59921 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:38f0cdc0-74b0-5432-897a-9c1e43cd2192",
      "id": "GHSA-mfg7-5gfp-c4w3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:812c1e34-ebda-54ec-bcfa-f67ba8074707",
      "id": "GHSA-v74w-7mr3-4qg3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8216fbe0-c940-5b63-a2f0-cbea68f977b3",
      "id": "GHSA-xpw8-rcwv-8f8p",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-xpw8-rcwv-8f8p is fixed in version 4.1.75.Final-tuxcare.3 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.75.Final-tuxcare.3"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.netty/netty-buffer@4.1.75.Final-tuxcare.3"
    }
  ]
}