{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:8a8992a2-e202-5744-9fac-ad533f530b28",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.2",
      "type": "library",
      "group": "io.netty",
      "name": "netty-buffer",
      "version": "4.1.92.Final-tuxcare.2",
      "purl": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.2"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:42ca388b-579b-5628-927b-469b8e3a6482",
      "id": "CVE-2023-34462",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-34462 is fixed in version 4.1.92.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0f86c268-b1fa-5e23-8035-24263f72a3a2",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-44487 is fixed in version 4.1.92.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:64081076-3049-5fe2-b66c-cb70021afff0",
      "id": "CVE-2023-4586",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2023-4586 is a false positive for io.netty:netty-buffer 4.1.92.Final-tuxcare.2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d155d671-e8a6-54e1-9c54-8ac79288e286",
      "id": "CVE-2024-29025",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-29025 is fixed in version 4.1.92.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:781ebb9d-2c7d-5d37-8f7a-60c6faae5746",
      "id": "CVE-2024-47535",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-47535 is fixed in version 4.1.92.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0e62cfe2-24a9-5670-96b3-e0dd13b6bd0c",
      "id": "CVE-2025-24970",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-24970 is fixed in version 4.1.92.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:42b4aa01-86a9-5561-890f-7556723dc9c9",
      "id": "CVE-2025-25193",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-25193 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d7f5eff2-3d35-578c-bedf-09b987dba2e0",
      "id": "CVE-2025-55163",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55163 is fixed in version 4.1.92.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c31cbc8a-2165-5c99-8848-5b15ea99062a",
      "id": "CVE-2025-58056",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-58056 is fixed in version 4.1.92.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:93e4850b-200f-5853-bbb9-3c0e7099363f",
      "id": "CVE-2025-58057",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58057 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5fede117-590a-5db2-90f9-5b68fa95a30d",
      "id": "CVE-2025-59419",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-59419 is fixed in version 4.1.92.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bfaac9a3-1617-5f49-995b-758a96162844",
      "id": "CVE-2025-67735",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-67735 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:19d82c34-aad7-5c37-a1c9-15707ee8c50f",
      "id": "CVE-2026-33870",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-33870 is fixed in version 4.1.92.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5d7d8285-e4b7-5367-aba9-9bd779571041",
      "id": "CVE-2026-33871",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33871 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b6e7c6a3-7603-5a35-8419-2ef6556d5b67",
      "id": "CVE-2026-41417",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41417 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:96cfc757-16c9-5d71-9334-7399190d28eb",
      "id": "CVE-2026-42577",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42577 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f19f1bf0-3afc-56db-af01-7f19ddac4c28",
      "id": "CVE-2026-42578",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42578 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:45ee210b-7b7a-57b9-9046-65033b73f32d",
      "id": "CVE-2026-42579",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42579 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e9131d09-0f7d-5886-8769-2c8c309ec97e",
      "id": "CVE-2026-42580",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42580 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7c630f52-8787-5325-a24d-bbb6aa1fefd5",
      "id": "CVE-2026-42581",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42581 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7663b872-15fa-5e71-b87e-9cdb58b99dbd",
      "id": "CVE-2026-42583",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42583 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2a3fd8b4-df13-55ee-9f04-4b2184783fa8",
      "id": "CVE-2026-42584",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42584 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:298cab01-c2a4-50cf-bd6b-4ad4748aedea",
      "id": "CVE-2026-42585",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42585 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3e8fa125-013e-5613-9377-124d4a2987fb",
      "id": "CVE-2026-42586",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42586 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:22868e30-d86a-5aa7-a0f5-639664dd696c",
      "id": "CVE-2026-42587",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42587 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:efecdbc0-953d-5182-b1fb-ea12a1d6d613",
      "id": "CVE-2026-44248",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44248 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f85996c2-a131-585f-808c-b10b711e9206",
      "id": "CVE-2026-44249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44249 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1e5da0dc-069e-5929-bafb-c210d8d968e7",
      "id": "CVE-2026-44250",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44250 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fd488138-07ab-57e2-9a30-5d94b49c968b",
      "id": "CVE-2026-44890",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44890 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f39c1591-0dd1-5a95-87b5-04ec99921c3f",
      "id": "CVE-2026-44891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44891 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6dcb1440-22d8-559f-ba4c-c0d081091dcc",
      "id": "CVE-2026-44893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44893 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3cafc25e-d45c-5e8e-b0be-8f4253b8bdc1",
      "id": "CVE-2026-45416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45416 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d460a8ac-3609-58a3-84bf-3f52681afafd",
      "id": "CVE-2026-45536",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45536 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f7eaef34-3f5a-5710-8505-1f6990d771e6",
      "id": "CVE-2026-45673",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45673 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a07049d5-98f7-570c-bac7-6fbca97ba912",
      "id": "CVE-2026-45674",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45674 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dc1800d8-b19d-532e-a063-ea4ec2e6e48f",
      "id": "CVE-2026-46340",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-46340 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b3ad89e5-db91-5b06-a384-7ab1693c8016",
      "id": "CVE-2026-47244",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47244 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a9b6c833-63af-54ab-8d7b-7b8402db8397",
      "id": "CVE-2026-47691",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47691 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:da1a2906-bb98-590b-a78b-65d0fc22131e",
      "id": "CVE-2026-48006",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48006 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0938396d-a36e-5b3a-b1fd-82018e4c6610",
      "id": "CVE-2026-48043",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-48043 does not affect version 4.1.92.Final-tuxcare.2 of io.netty:netty-buffer. not_affected \u2014 The target repository (Netty 4.1.92.Final-tuxcare.3) is not affected by CVE-2026-48043. The vulnerability exists in a newer architectural pattern (ChannelInboundHandlerAdapter-based decompression handling) that was introduced after version 4.1.92. The target uses an older architecture that processes HTTP/2 decompression directly in the onDataRead() method with existing try-finally protection."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:77d5b54e-ba1a-5887-8eb1-fdeabb9ffdcc",
      "id": "CVE-2026-48059",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48059 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ddcdf208-7086-512f-80ee-156e2581e843",
      "id": "CVE-2026-50010",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50010 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:23ce3b28-1a11-5783-b995-d45df7b1250d",
      "id": "CVE-2026-50011",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50011 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6f1b8088-d18b-59e4-803f-82eb09dc0de4",
      "id": "CVE-2026-50020",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50020 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:45a60206-eba6-5a4c-8933-f5c01a43d978",
      "id": "CVE-2026-50560",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50560 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6a3ce066-84eb-5cfc-948b-4d4fd70c1cc3",
      "id": "CVE-2026-55831",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55831 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4bd77ab1-6a72-5139-b037-52024cb91f23",
      "id": "CVE-2026-55833",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55833 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:39bccc24-bdfa-5b3f-a6d2-3fcd03963ad5",
      "id": "CVE-2026-55851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55851 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4f38baf0-28f6-51e7-ae8c-52483a6dfa17",
      "id": "CVE-2026-56745",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56745 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:af1cf418-0ee5-568d-be06-6a39bdebbf12",
      "id": "CVE-2026-56746",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56746 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:20418cf4-8917-533a-9cc0-2076c9a8f97f",
      "id": "CVE-2026-56817",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56817 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9246ec32-5523-56c2-90aa-a99bc5d96871",
      "id": "CVE-2026-56820",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56820 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:66931154-6af5-5d9d-b230-d6edefe17150",
      "id": "CVE-2026-56821",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56821 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ae55ecbf-6dc1-5b78-860a-df81f58a3616",
      "id": "CVE-2026-56822",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56822 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:06a269f2-edd9-5af7-9a0b-ae76326093a4",
      "id": "CVE-2026-59898",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59898 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4a022ade-1d84-5e75-965b-af043d886021",
      "id": "CVE-2026-59899",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59899 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:038ab5c0-e23c-5a3e-96ea-be4ad0dd48ef",
      "id": "CVE-2026-59900",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59900 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:04bc7426-f545-5a4d-b611-3704ac80a419",
      "id": "CVE-2026-59901",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59901 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1dd3c328-002a-55aa-b757-8ca51a587e22",
      "id": "CVE-2026-59919",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59919 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6b2b522c-5469-56b0-9ab4-c682fc7953be",
      "id": "CVE-2026-59920",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59920 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:53441a8b-300d-535a-bad1-aead89f359cb",
      "id": "CVE-2026-59921",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59921 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:15d29a04-8bd0-55e8-8d31-5d1ea2ef29ba",
      "id": "GHSA-mfg7-5gfp-c4w3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2581afa8-5d71-5369-9104-02e84caf5bea",
      "id": "GHSA-v74w-7mr3-4qg3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.92.Final-tuxcare.2 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4d0f885f-e4e4-5273-ba41-2cf13d1fe6af",
      "id": "GHSA-xpw8-rcwv-8f8p",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability GHSA-xpw8-rcwv-8f8p does not affect version 4.1.92.Final-tuxcare.2 of io.netty:netty-buffer. The version is not vulnerable. [terminalized not_affected from patch_application_manual/not_vulnerable]"
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.2"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.2"
    }
  ]
}