{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:1f8c2327-d02b-5580-9990-1ac13f066e47", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/io.netty/netty-codec-http@4.1.49.Final-tuxcare.1", "type": "library", "group": "io.netty", "name": "netty-codec-http", "version": "4.1.49.Final-tuxcare.1", "purl": "pkg:maven/io.netty/netty-codec-http@4.1.49.Final-tuxcare.1" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:83681a95-dd71-501e-a7a7-9eb8ede7f9aa", "id": "CVE-2021-21290", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-21290 affects version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.49.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:79df919b-2922-519f-965b-1fd276a44859", "id": "CVE-2021-21295", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-21295 affects version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.49.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:7fc876dc-3f52-5c4c-89ee-5b42403ad362", "id": "CVE-2021-21409", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-21409 is fixed in version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.49.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:35b3fd8f-3d54-558e-a34e-3f1ed54f74dd", "id": "CVE-2021-37136", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-37136 is fixed in version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.49.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:d28b6160-6997-5d96-83af-f211e52b7aa8", "id": "CVE-2021-37137", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-37137 is fixed in version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.49.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:3aa579ed-8dc2-51ca-b631-41b2eece91f3", "id": "CVE-2021-43797", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-43797 is fixed in version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.49.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:6391e97a-8735-5235-b2d6-0ba00eef31b4", "id": "CVE-2022-24823", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-24823 is fixed in version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.49.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:8c39f415-8912-5da8-8b94-45e60dbcffa0", "id": "CVE-2022-41881", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-41881 affects version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.49.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:77bbdc71-bdf2-553b-8497-bbdec9db00a4", "id": "CVE-2022-41915", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-41915 affects version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.49.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:fdd2021b-56b0-5dcf-be29-4657812e2a9f", "id": "CVE-2023-34462", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-34462 is fixed in version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.49.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:baf19bd7-192a-5ca7-b512-f9a53e1f7b2a", "id": "CVE-2023-44487", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-44487 is fixed in version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.49.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:9f42ee9e-222b-54a5-aaf9-80b3ab8cda46", "id": "CVE-2023-4586", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2023-4586 is a false positive for io.netty:netty-codec-http 4.1.49.Final-tuxcare.1." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.49.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:a9540d16-eb40-5143-b138-1085effe61cd", "id": "CVE-2024-29025", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-29025 affects version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.49.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:7dbb1512-d20c-5a1a-9626-e501ce31fd98", "id": "CVE-2024-47535", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-47535 affects version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.49.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:3804fff0-988b-5840-8703-92dd25a6e848", "id": "CVE-2025-24970", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-24970 is fixed in version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.49.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:29539025-6c13-5afd-9bfe-6ffbf6108e54", "id": "CVE-2025-25193", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-25193 affects version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.49.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:584ccbe7-6b7a-5eba-af84-2167d5b32f18", "id": "CVE-2025-55163", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55163 is fixed in version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.49.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:07d5a4c6-cd48-5db4-b18a-958651279c22", "id": "CVE-2025-58056", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-58056 affects version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.49.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:216ab8e1-ea91-5195-8697-ac8e3385ad3b", "id": "CVE-2025-58057", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-58057 affects version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.49.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:6b961017-2146-5b45-9d8a-5a76bc6be515", "id": "CVE-2025-59419", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-59419 affects version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.49.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:5d2ac7b3-172a-53b6-b5b6-1c40a31817a5", "id": "CVE-2025-67735", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-67735 affects version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.49.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:e0d29d9c-e1af-5b52-bd3b-17be94a6f4f7", "id": "CVE-2026-33870", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33870 affects version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.49.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:cfe31b35-91ff-52c8-8837-84126d13aa4a", "id": "CVE-2026-33871", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33871 affects version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.49.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:ea983065-5398-5238-ab29-5c9478477b25", "id": "CVE-2026-41417", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41417 affects version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.49.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:69870e29-eebb-5123-9651-f3bb92125d88", "id": "CVE-2026-42577", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42577 affects version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.49.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:5d45c64a-a75b-5644-b52d-ae539ba699a7", "id": "CVE-2026-42578", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42578 affects version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.49.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:90757d6a-f708-52d1-8350-de4918692eeb", "id": "CVE-2026-42579", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42579 affects version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.49.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:efc4cfcd-1ba4-5114-961a-e1452c8e7345", "id": "CVE-2026-42580", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42580 affects version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.49.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:d4fb3f05-8004-5fc2-bb2f-9d0dd864124e", "id": "CVE-2026-42581", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42581 affects version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.49.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:80162dcb-8854-5a2c-b859-f24c490a7b8b", "id": "CVE-2026-42583", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42583 affects version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.49.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:a528c2a6-5dc0-5145-8e5b-99fd7026dc4a", "id": "CVE-2026-42584", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42584 affects version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.49.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:56fb6732-2090-5279-8879-ab88511cd3a7", "id": "CVE-2026-42585", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42585 affects version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.49.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:b4a6f559-6eb0-56a3-a35e-39752fd52502", "id": "CVE-2026-42586", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42586 affects version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.49.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:05cef4bd-bcd5-5570-9c67-d3ec3d839cb2", "id": "CVE-2026-42587", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42587 affects version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.49.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:c0b53af3-ef89-562e-824f-737dbfef38c4", "id": "CVE-2026-44248", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44248 affects version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.49.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:12f496b2-8d4e-59c6-a198-b86feb128d8c", "id": "CVE-2026-44249", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-44249 does not affect version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-http. not_affected \u2014 The target repository (Netty 4.1.49.Final-tuxcare.1) is not affected by CVE-2026-44249. The vulnerability exists in the IpSubnetFilterRule#compareTo(InetSocketAddress) method, which was introduced in version 4.1.52+ as part of a binary search optimization (PR #10492, merged September 2020). The target version predates this feature and uses a simpler matches() method that correctly applies the s..." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.49.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:71f2fdd5-7634-597a-aafd-e0283d0f84fe", "id": "CVE-2026-44250", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44250 affects version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.49.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:5cd47922-a332-5683-9196-ef5bb630d5ed", "id": "CVE-2026-44890", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44890 affects version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.49.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:4cb9f30c-4df3-59ae-bf13-102032372903", "id": "CVE-2026-44891", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44891 affects version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.49.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:e9e4daa6-87a2-500e-9965-cbfba3cbb057", "id": "CVE-2026-44893", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44893 affects version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.49.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:c2bdeb1b-5054-5e9b-9865-df204ddd1d5f", "id": "CVE-2026-45416", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45416 affects version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.49.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:c94aba6b-10f4-5ca1-9ac4-d9734ef6861f", "id": "CVE-2026-45536", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45536 affects version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.49.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:be857245-b067-505f-b794-687a39167e01", "id": "CVE-2026-45673", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45673 affects version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.49.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:cd334a54-072a-570d-96fe-3f0111cd09bc", "id": "CVE-2026-45674", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45674 affects version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.49.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:90054e64-727c-5907-92f1-22cf1f30a972", "id": "CVE-2026-46340", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-46340 affects version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.49.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:6efdac5e-8c0c-5b9e-91fd-cf0edfdddb3a", "id": "CVE-2026-47244", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47244 affects version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.49.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:61e9c7eb-458e-5d2e-b253-db4ac62060a9", "id": "CVE-2026-47691", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47691 affects version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.49.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:56b934ec-b0ca-5ddf-9290-111b7003f095", "id": "CVE-2026-48006", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-48006 affects version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.49.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:70412c55-00fa-5f45-b918-0105bf22aaf1", "id": "CVE-2026-48043", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-48043 affects version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.49.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:20314fe6-a2a3-5b56-89cd-9c82327d1dff", "id": "CVE-2026-48059", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-48059 affects version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.49.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:4738ce59-b201-5ad9-8c31-77723c83f66f", "id": "CVE-2026-50010", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50010 affects version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.49.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:f59ca29d-ff5a-5662-ab16-2a3c4025aa0b", "id": "CVE-2026-50011", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50011 affects version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.49.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:dcdb993d-dfb2-56c2-b1f6-01ee4bd9133d", "id": "CVE-2026-50020", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50020 affects version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.49.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:1935e71b-cf5e-5aed-b253-4f98e95657e2", "id": "CVE-2026-50560", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50560 affects version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.49.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:f21e3c6b-fd8c-5b43-9b5a-6e1d2414961b", "id": "CVE-2026-55831", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55831 affects version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.49.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:7fa45fc0-d585-54cd-bf98-8d8d9851ebf2", "id": "CVE-2026-55833", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55833 affects version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.49.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:82e82a22-9cd4-5fd9-9372-8bf702e55dd0", "id": "CVE-2026-55851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55851 affects version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.49.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:c93e493b-e06c-52f8-9cf6-ef098d258497", "id": "CVE-2026-56745", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56745 affects version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.49.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:3ec23072-db68-5f11-bff3-9c49b2f96672", "id": "CVE-2026-56746", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56746 affects version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.49.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:6d26b47b-2ba3-5459-a67d-e4ebd84f8a62", "id": "CVE-2026-56817", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56817 affects version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.49.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:e9a1f67b-d696-5b11-8cb7-bf8c083db3ea", "id": "CVE-2026-59898", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59898 affects version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.49.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:19dfa3a0-7585-5324-a24a-37815af1217b", "id": "CVE-2026-59899", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59899 affects version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.49.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:a73e434a-8bb0-54fa-b975-ed3f92b19a41", "id": "CVE-2026-59900", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59900 affects version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.49.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:686a7481-1ec0-52c8-a69f-6280992a69a3", "id": "CVE-2026-59901", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59901 affects version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.49.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:f156c7ab-72c5-5db5-91c0-780c5f4bdd7d", "id": "CVE-2026-59919", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59919 affects version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.49.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:293e56a7-0ba9-5352-9886-e5bb964f2a11", "id": "CVE-2026-59920", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59920 affects version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.49.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:08b086b7-cf8e-552e-95eb-b5c3179d8fab", "id": "CVE-2026-59921", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59921 affects version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.49.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:be4b7cd4-3b63-50f7-9eaf-fa6191da01b4", "id": "GHSA-mfg7-5gfp-c4w3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.49.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:e2562115-abce-5845-af0a-6eef9bacb41e", "id": "GHSA-v74w-7mr3-4qg3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.49.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:c385c5fb-6325-53a8-9087-0ce5c660292b", "id": "GHSA-xpw8-rcwv-8f8p", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-xpw8-rcwv-8f8p affects version 4.1.49.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.49.Final-tuxcare.1" } ] } ], "dependencies": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.49.Final-tuxcare.1" } ] }