{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:80250622-f553-5984-afdd-abd788d6f864",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/io.netty/netty-codec-http2@4.1.112.Final-tuxcare.3",
      "type": "library",
      "group": "io.netty",
      "name": "netty-codec-http2",
      "version": "4.1.112.Final-tuxcare.3",
      "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.112.Final-tuxcare.3"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:b7e9f884-db03-580e-9998-e7dc5ca7b917",
      "id": "CVE-2024-47535",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-47535 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.112.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2e5b563a-14ed-51d7-84d4-c0ca8d3e55fc",
      "id": "CVE-2025-24970",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-24970 is fixed in version 4.1.112.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.112.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6fc9bbc1-6de0-557c-a03a-4c956e4dc152",
      "id": "CVE-2025-25193",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-25193 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.112.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0b1def9e-4c5b-581a-844c-7596b02081d1",
      "id": "CVE-2025-55163",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55163 is fixed in version 4.1.112.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.112.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1afe9060-3e42-5176-8eea-3e52e351b070",
      "id": "CVE-2025-58056",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-58056 is fixed in version 4.1.112.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.112.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a51a1680-406e-57b0-82b6-8a92027e9393",
      "id": "CVE-2025-58057",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-58057 is fixed in version 4.1.112.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.112.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:64c7f031-e881-568e-8ef9-c88ef4e4b764",
      "id": "CVE-2025-59419",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-59419 is fixed in version 4.1.112.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.112.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a3588845-e8d7-56e1-a784-233f3685d094",
      "id": "CVE-2025-67735",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-67735 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.112.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b3537a33-43ec-5500-bb0f-421df2113703",
      "id": "CVE-2026-33870",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33870 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.112.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:840973ce-83ba-5876-aceb-8b0a9388fea3",
      "id": "CVE-2026-33871",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-33871 is fixed in version 4.1.112.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.112.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5d48597b-53ac-5bb4-ab72-dc0e1dcbdc3e",
      "id": "CVE-2026-41417",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41417 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.112.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ae727385-87f1-5c62-a09b-26d7ff3478c4",
      "id": "CVE-2026-42577",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42577 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.112.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4571980e-f3e9-5146-9bac-c3a928eac6a0",
      "id": "CVE-2026-42578",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42578 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.112.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2133beca-e054-5a89-8cca-b2d2f8ffe42a",
      "id": "CVE-2026-42579",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42579 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.112.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:46b66c28-049c-5ff0-ad49-e03a0ba7b1cc",
      "id": "CVE-2026-42580",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42580 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.112.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:23ad7e81-9a2b-52bb-9f66-e61c91b1eac8",
      "id": "CVE-2026-42581",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42581 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.112.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f27ad3d4-d3ba-5adc-b28f-a98184e8759a",
      "id": "CVE-2026-42583",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42583 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.112.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2c9e203c-b746-532a-b0e9-8975dc48f927",
      "id": "CVE-2026-42584",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42584 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.112.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:35af6803-247e-5767-9853-96ef1e38ed99",
      "id": "CVE-2026-42585",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42585 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.112.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:873c691f-3aed-5c91-b7d2-bed73a447f0c",
      "id": "CVE-2026-42586",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42586 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.112.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1ed13b5d-7350-564b-a1d1-3555f94743c2",
      "id": "CVE-2026-42587",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42587 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.112.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:120c3979-bccb-59a5-a9a7-72d98ff6a5e9",
      "id": "CVE-2026-44248",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44248 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.112.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f0f22482-52cd-5f2c-a36d-7f462e1ba664",
      "id": "CVE-2026-44249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44249 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.112.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:045501b0-e48f-5049-bfbc-1211390da1d6",
      "id": "CVE-2026-44250",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44250 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.112.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c60b4432-0472-5831-a776-61b070c93cdd",
      "id": "CVE-2026-44890",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44890 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.112.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c33508ae-4657-509d-9502-8f6b280e88fe",
      "id": "CVE-2026-44891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44891 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.112.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:142ad846-5a32-5b0e-88d5-e2b8d80171f6",
      "id": "CVE-2026-44893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44893 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.112.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:26d2963d-098c-5eeb-883f-b834f927864e",
      "id": "CVE-2026-45416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45416 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.112.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b2949184-d89f-57d6-a6d2-0f811eb2a2c8",
      "id": "CVE-2026-45536",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45536 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.112.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:243d2aef-ba4e-5c9b-b34d-8e1739ae671c",
      "id": "CVE-2026-45673",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45673 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.112.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d527c264-ffe7-5571-8f68-87dc02669f03",
      "id": "CVE-2026-45674",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45674 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.112.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:08b655b3-96a6-570b-8497-a86ba5c3d888",
      "id": "CVE-2026-46340",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-46340 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.112.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:83d7992d-ed50-5447-81da-8403bd1a7721",
      "id": "CVE-2026-47244",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47244 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.112.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:52291111-0d05-5e7a-ab9e-7ff7531f59f0",
      "id": "CVE-2026-47691",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-47691 does not affect version 4.1.112.Final-tuxcare.3 of io.netty:netty-codec-http2. Patches already applied: fb9fbe974b57430ee439636bf576c93a2759364f (already in target via b391226387d3 'Backport CVE-2026-45674 to 4.1.112.Final'); 6f19adf36863712f96b16d768d92f0c2f78cf315 (already in target via b391226387d3 'Backport CVE-2026-45674 to 4.1.112.Final')"
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.112.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8863135f-f201-58a1-8869-f72571a9e27e",
      "id": "CVE-2026-48006",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48006 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.112.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:610d50ff-20bf-5921-9282-45ce64a0daae",
      "id": "CVE-2026-48043",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48043 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.112.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:98c93117-4402-57b4-9fa9-f13dd85049b8",
      "id": "CVE-2026-48059",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48059 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.112.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6c03085d-e9d0-58c2-a102-881cd98d7b8a",
      "id": "CVE-2026-50010",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50010 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.112.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a119df40-797f-52fe-9cb9-1437bdb10d6c",
      "id": "CVE-2026-50011",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50011 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.112.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3aa0136d-8bd4-5a29-b952-7c9a8106059d",
      "id": "CVE-2026-50020",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50020 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.112.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b2d0b9a4-edc7-5531-bb6c-0b5ccd8a41ef",
      "id": "CVE-2026-50560",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50560 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.112.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b7c83633-013c-5979-81d3-f2e43ee22d08",
      "id": "CVE-2026-55831",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55831 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.112.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:60276b9b-6072-5051-88a8-5060e9854733",
      "id": "CVE-2026-55833",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55833 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.112.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:20c1b151-ddc9-555d-be3f-c178e32ea783",
      "id": "CVE-2026-55851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55851 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.112.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2bb13f53-d92d-5afd-a1eb-0754b72ea115",
      "id": "CVE-2026-56745",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56745 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.112.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dab67712-4ee3-5a35-aa27-50b6df458c39",
      "id": "CVE-2026-56746",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56746 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.112.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9f066590-4cf5-579a-bd0e-55ced8e385fd",
      "id": "CVE-2026-56817",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56817 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.112.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6d25b889-4c51-51d0-b74b-e67ab27d92d7",
      "id": "CVE-2026-56820",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56820 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.112.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d95e471c-8862-5112-b8c9-0f1e013410f9",
      "id": "CVE-2026-56821",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56821 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.112.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a0ad4bdc-cd4f-5e12-aec7-988c453f43a4",
      "id": "CVE-2026-56822",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56822 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.112.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d4b0554b-4ed4-5597-ac22-14371ece25c8",
      "id": "CVE-2026-59898",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59898 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.112.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7eaea298-5efc-500c-bac6-2a686fe75a78",
      "id": "CVE-2026-59899",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59899 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.112.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2daec9e3-2ed7-5220-a2f7-5fe8cd8ba2b9",
      "id": "CVE-2026-59900",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59900 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.112.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6df27818-75f2-5b1c-a3c1-ccb446e1612e",
      "id": "CVE-2026-59901",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59901 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.112.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:95a11ba3-e05e-5ae3-b35a-1541fe0290f0",
      "id": "CVE-2026-59919",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59919 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.112.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ceec4f24-a69c-597e-94b6-36e3e0d6f799",
      "id": "CVE-2026-59920",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59920 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.112.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:53eda823-9fe6-569d-9a47-860ed01e9099",
      "id": "CVE-2026-59921",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59921 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.112.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e97abb9e-865b-58cf-89ac-46c80177537d",
      "id": "GHSA-mfg7-5gfp-c4w3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.112.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ca11eade-3084-5ff3-95b5-12e9e1c8b035",
      "id": "GHSA-v74w-7mr3-4qg3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.112.Final-tuxcare.3"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.112.Final-tuxcare.3"
    }
  ]
}