{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:b1988dc7-de37-53e9-ad81-d82d707cebdb",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/io.netty/netty-codec-http2@4.1.115.Final-tuxcare.3",
      "type": "library",
      "group": "io.netty",
      "name": "netty-codec-http2",
      "version": "4.1.115.Final-tuxcare.3",
      "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.115.Final-tuxcare.3"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:c9b3ec72-cf2b-54a9-99c5-8604e295942b",
      "id": "CVE-2025-24970",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-24970 is fixed in version 4.1.115.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.115.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f4d82b22-afff-5e61-8b29-9f1b6858a5fd",
      "id": "CVE-2025-25193",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-25193 is fixed in version 4.1.115.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.115.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f55b88d2-e2e8-5af4-9c4e-b3766db64048",
      "id": "CVE-2025-55163",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-55163 affects version 4.1.115.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.115.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9799cd7e-c0fc-5f09-964d-287fcbd8a7e0",
      "id": "CVE-2025-58056",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58056 affects version 4.1.115.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.115.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2bc486f4-806a-5465-a2c6-5d29944bd664",
      "id": "CVE-2025-58057",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58057 affects version 4.1.115.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.115.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7dfb2f27-a564-5ac7-bbbc-9258f26cdbac",
      "id": "CVE-2025-59419",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-59419 affects version 4.1.115.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.115.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e8d3de48-6744-59bd-b121-b8177f4a587f",
      "id": "CVE-2025-67735",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-67735 affects version 4.1.115.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.115.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:94dbac7a-80b0-5ea0-b36e-8873f40d4d50",
      "id": "CVE-2026-33870",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33870 affects version 4.1.115.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.115.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1def3bab-8ef6-537a-8e84-604ee117910e",
      "id": "CVE-2026-33871",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33871 affects version 4.1.115.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.115.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:33346cf8-7531-5815-a252-575d15bf1ea8",
      "id": "CVE-2026-41417",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41417 affects version 4.1.115.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.115.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:50de0d91-4e6f-5e59-9195-163bd3c44f51",
      "id": "CVE-2026-42577",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42577 affects version 4.1.115.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.115.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b603030d-7db6-5958-a6f0-64278a8b9039",
      "id": "CVE-2026-42578",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42578 affects version 4.1.115.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.115.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:21c22227-6741-5f56-8984-636fd579d43d",
      "id": "CVE-2026-42579",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42579 affects version 4.1.115.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.115.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0fbb6d54-1418-5a2c-8ba6-af1c1a4e0c50",
      "id": "CVE-2026-42580",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42580 affects version 4.1.115.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.115.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:01b96f6c-4db7-53a2-b378-d36abdd55fe6",
      "id": "CVE-2026-42581",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42581 affects version 4.1.115.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.115.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fbecf462-acf1-53fd-acc4-4b23a7c0cbd6",
      "id": "CVE-2026-42583",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42583 affects version 4.1.115.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.115.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:261e2ede-5e4a-5ace-81b4-5e75baab4fb2",
      "id": "CVE-2026-42584",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42584 affects version 4.1.115.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.115.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f0d5f609-76bf-5dff-8e97-7da984b684b3",
      "id": "CVE-2026-42585",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42585 affects version 4.1.115.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.115.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:79b376dd-61de-54f0-98ab-4449d85ba641",
      "id": "CVE-2026-42586",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42586 affects version 4.1.115.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.115.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c49e154e-d908-5791-86e4-20f621dbc5f4",
      "id": "CVE-2026-42587",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42587 affects version 4.1.115.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.115.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4aa1a7bc-f244-506a-8ad0-7720914107fe",
      "id": "CVE-2026-44248",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44248 affects version 4.1.115.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.115.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:027ff26d-6c81-5985-b546-c99df229db3d",
      "id": "CVE-2026-44249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44249 affects version 4.1.115.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.115.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1009a551-8fb7-58a5-9330-ecab8738d835",
      "id": "CVE-2026-44250",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44250 affects version 4.1.115.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.115.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:93f47714-4885-5e29-95de-20bfe8585c4d",
      "id": "CVE-2026-44890",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44890 affects version 4.1.115.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.115.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:312e2a1d-ebe1-5ddb-823e-f03700d26ace",
      "id": "CVE-2026-44891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44891 affects version 4.1.115.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.115.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bce98544-770d-55da-9b08-22290ca710ec",
      "id": "CVE-2026-44893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44893 affects version 4.1.115.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.115.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f1f3d633-17b7-5b8e-8313-f4274103d9da",
      "id": "CVE-2026-45416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45416 affects version 4.1.115.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.115.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5f447b11-a82a-53eb-af5a-22972665d613",
      "id": "CVE-2026-45536",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45536 affects version 4.1.115.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.115.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fbefdb8b-33ba-5731-8f5c-14ef338534d8",
      "id": "CVE-2026-45673",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45673 affects version 4.1.115.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.115.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:20ba127f-4476-5abb-affa-ead4e6f88edc",
      "id": "CVE-2026-45674",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45674 affects version 4.1.115.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.115.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f2d9cb65-d1c6-5717-9207-ad50b02cd095",
      "id": "CVE-2026-46340",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-46340 affects version 4.1.115.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.115.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:59e85893-dea1-5817-8566-d7090de5ec02",
      "id": "CVE-2026-47244",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47244 affects version 4.1.115.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.115.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:80598a69-c010-5f56-9533-0f7762249195",
      "id": "CVE-2026-47691",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-47691 does not affect version 4.1.115.Final-tuxcare.3 of io.netty:netty-codec-http2. Patches already applied: fb9fbe974b57430ee439636bf576c93a2759364f (already in target via 54c8ecfb9e80 'Backport CVE-2026-45674 to 4.1.115.Final'); 5749d7822f0bf18e2eb0ea1f10d7b7181456ad75 (already in target via 54c8ecfb9e80 'Backport CVE-2026-45674 to 4.1.115.Final'); 6f19adf36863712f96b16d768d92f0c2f78cf315 (already in target via 54c8ecfb9e80 'Backport CVE-2026-45674 to 4.1.115.Final')"
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.115.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:621d6e69-39a2-5a13-a391-ec21b4208cd0",
      "id": "CVE-2026-48006",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48006 affects version 4.1.115.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.115.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7905ee40-5b1a-5bd5-b7b4-c734db09a6c6",
      "id": "CVE-2026-48043",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48043 affects version 4.1.115.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.115.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9fd0a0ac-477b-5a37-8558-305b6e83799c",
      "id": "CVE-2026-48059",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48059 affects version 4.1.115.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.115.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:951a6fc8-f433-58ec-9146-7d0a21888961",
      "id": "CVE-2026-50010",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50010 affects version 4.1.115.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.115.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b060fc07-c6eb-5035-90df-22f577761a90",
      "id": "CVE-2026-50011",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50011 affects version 4.1.115.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.115.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6716667d-ec98-5ca8-8b01-0856131b1245",
      "id": "CVE-2026-50020",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50020 affects version 4.1.115.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.115.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ba861f54-d37f-5658-bf77-5d9d4735f728",
      "id": "CVE-2026-50560",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50560 affects version 4.1.115.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.115.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:542e1c18-eb07-505e-84a2-a841f9d70b64",
      "id": "CVE-2026-55831",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55831 affects version 4.1.115.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.115.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:26d45435-e550-5e7f-a8e7-d00a34ee8e32",
      "id": "CVE-2026-55833",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55833 affects version 4.1.115.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.115.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2986b1d7-ffcd-5bca-8952-198f9892b49f",
      "id": "CVE-2026-55851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55851 affects version 4.1.115.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.115.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6526994a-21e7-578e-81de-6a80ca02b8c4",
      "id": "CVE-2026-56745",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56745 affects version 4.1.115.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.115.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5a003e25-0e47-5107-b6ae-03dd7f8d4533",
      "id": "CVE-2026-56746",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56746 affects version 4.1.115.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.115.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:282f225e-2680-5294-818b-16b9b6e60a77",
      "id": "CVE-2026-56817",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56817 affects version 4.1.115.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.115.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5950ca12-4f8e-5736-adcf-02466ad9a0aa",
      "id": "CVE-2026-56820",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56820 affects version 4.1.115.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.115.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e12f8b93-3703-55c2-9506-3776fd4528c0",
      "id": "CVE-2026-56821",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56821 affects version 4.1.115.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.115.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:12d65ce5-c43a-59f8-8e64-0607ac625114",
      "id": "CVE-2026-56822",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56822 affects version 4.1.115.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.115.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5c858015-4671-55d9-b9ac-ba756fcda1e5",
      "id": "CVE-2026-59898",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59898 affects version 4.1.115.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.115.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e6ce349f-ac8c-5af0-b53e-d40c58275ca0",
      "id": "CVE-2026-59899",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59899 affects version 4.1.115.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.115.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a27bc606-533e-5d2e-b90d-134c2d355cad",
      "id": "CVE-2026-59900",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59900 affects version 4.1.115.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.115.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:746859c3-b897-5e17-b02c-8c7f9e34e05a",
      "id": "CVE-2026-59901",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59901 affects version 4.1.115.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.115.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:df12a48a-4443-5861-a2c2-b2152861db60",
      "id": "CVE-2026-59919",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59919 affects version 4.1.115.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.115.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f9c2e474-9643-53b4-bfc9-bb17070cc558",
      "id": "CVE-2026-59920",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59920 affects version 4.1.115.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.115.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:13c0850d-cb72-538b-9097-ddcf5e2e6b9c",
      "id": "CVE-2026-59921",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59921 affects version 4.1.115.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.115.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5439e2e4-0851-5ea7-99f3-1991352e6895",
      "id": "GHSA-mfg7-5gfp-c4w3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.115.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.115.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:75c63537-449b-58ad-aee4-0a0c6c58ed08",
      "id": "GHSA-v74w-7mr3-4qg3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.115.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.115.Final-tuxcare.3"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.115.Final-tuxcare.3"
    }
  ]
}