{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:ef2382d0-9902-5d71-9af4-4b2d5a3f13df",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/io.netty/netty-codec-http2@4.1.117.Final-tuxcare.1",
      "type": "library",
      "group": "io.netty",
      "name": "netty-codec-http2",
      "version": "4.1.117.Final-tuxcare.1",
      "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.117.Final-tuxcare.1"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:98d23679-3ab6-58c8-96c5-124865971960",
      "id": "CVE-2025-24970",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-24970 affects version 4.1.117.Final-tuxcare.1 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.117.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:89f1d986-3d41-536f-a3ad-bc87f72c131b",
      "id": "CVE-2025-25193",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-25193 is fixed in version 4.1.117.Final-tuxcare.1 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.117.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6a23be1a-7e2b-5a09-a61f-e94c9a392be0",
      "id": "CVE-2026-33871",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-33871 is fixed in version 4.1.117.Final-tuxcare.1 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.117.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:871b7323-874a-51f8-86e1-64d61b966d0d",
      "id": "CVE-2026-42579",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42579 is fixed in version 4.1.117.Final-tuxcare.1 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.117.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c3a76129-8276-5cc2-9b32-fce309f9f99a",
      "id": "CVE-2026-42580",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42580 affects version 4.1.117.Final-tuxcare.1 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.117.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9daf75c3-bf5a-5f35-aba8-099c4362820f",
      "id": "CVE-2026-42583",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42583 affects version 4.1.117.Final-tuxcare.1 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.117.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:05223fd5-8465-5dbb-888b-1cee3a2de6f9",
      "id": "CVE-2026-42586",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42586 affects version 4.1.117.Final-tuxcare.1 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.117.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:eeffbaa6-570f-5dd2-b531-06795cda7727",
      "id": "CVE-2026-44249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44249 affects version 4.1.117.Final-tuxcare.1 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.117.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e2448d8b-de8a-5734-b838-85dc1f996a0c",
      "id": "CVE-2026-44890",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.117.Final-tuxcare.1 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.117.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9b2cf9d3-03f8-5159-87db-a8b4c3ba3458",
      "id": "CVE-2026-48059",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48059 affects version 4.1.117.Final-tuxcare.1 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.117.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dd4dcaee-d9ce-584f-a2b9-b80b1f2d44bc",
      "id": "CVE-2026-50010",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50010 affects version 4.1.117.Final-tuxcare.1 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.117.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:13703995-8f6a-52d7-add9-abcc251a3f85",
      "id": "CVE-2026-50020",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50020 affects version 4.1.117.Final-tuxcare.1 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.117.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e2816943-2958-5f55-8e85-9518d0f432d9",
      "id": "CVE-2026-50560",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.117.Final-tuxcare.1 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.117.Final-tuxcare.1"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.117.Final-tuxcare.1"
    }
  ]
}