{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:9700ab40-1a62-5606-ba96-e72f046306f8",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/io.netty/netty-codec-http2@4.1.52.Final-tuxcare.2",
      "type": "library",
      "group": "io.netty",
      "name": "netty-codec-http2",
      "version": "4.1.52.Final-tuxcare.2",
      "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.52.Final-tuxcare.2"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:58882045-85f7-52a2-81c0-06ef168e629b",
      "id": "CVE-2021-21290",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-21290 is fixed in version 4.1.52.Final-tuxcare.2 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.52.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:95385aad-5251-5280-ad29-2b9c3be908de",
      "id": "CVE-2021-21295",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-21295 is fixed in version 4.1.52.Final-tuxcare.2 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.52.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ea9e1409-e474-5944-ab46-d9ddf20b8e8d",
      "id": "CVE-2021-21409",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-21409 is fixed in version 4.1.52.Final-tuxcare.2 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.52.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:009d431a-4cf2-5612-8a03-8192b0a624b5",
      "id": "CVE-2021-37136",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-37136 is fixed in version 4.1.52.Final-tuxcare.2 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.52.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:887bfe9a-6cf8-590e-80b5-c41940e3ebda",
      "id": "CVE-2021-37137",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-37137 is fixed in version 4.1.52.Final-tuxcare.2 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.52.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9df1cb40-139e-52b6-bcc3-2a71e83240bc",
      "id": "CVE-2021-43797",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-43797 is fixed in version 4.1.52.Final-tuxcare.2 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.52.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:10cc112e-bbaa-50c9-b433-898b6ee2bb3f",
      "id": "CVE-2022-24823",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-24823 is fixed in version 4.1.52.Final-tuxcare.2 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.52.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2b8c8ef0-df9c-5571-839b-44033d680dea",
      "id": "CVE-2022-41881",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-41881 is fixed in version 4.1.52.Final-tuxcare.2 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.52.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f53d70f0-26c3-57e7-8d98-b73c015b74d4",
      "id": "CVE-2023-34462",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-34462 is fixed in version 4.1.52.Final-tuxcare.2 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.52.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:713cef9d-a5c9-5c23-b9f0-a7cbc96eb37c",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-44487 is fixed in version 4.1.52.Final-tuxcare.2 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.52.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a841c2f9-e692-5054-8eb1-667a722f6a58",
      "id": "CVE-2023-4586",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2023-4586 is a false positive for io.netty:netty-codec-http2 4.1.52.Final-tuxcare.2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.52.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5b043f00-1e0f-56fe-b9d3-920cf6893f04",
      "id": "CVE-2024-29025",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-29025 is fixed in version 4.1.52.Final-tuxcare.2 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.52.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e0a063ff-7563-5a4d-a1a1-9003ae88d4ef",
      "id": "CVE-2024-47535",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-47535 is fixed in version 4.1.52.Final-tuxcare.2 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.52.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3f049947-cfbb-5dbe-a61d-8abfc079ac18",
      "id": "CVE-2025-24970",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-24970 affects version 4.1.52.Final-tuxcare.2 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.52.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c7a8309a-459f-5b8b-9ffa-9208a0c4bf30",
      "id": "CVE-2025-25193",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-25193 affects version 4.1.52.Final-tuxcare.2 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.52.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bb7113ef-204b-5d20-a2b9-1215a0d7e17f",
      "id": "CVE-2025-55163",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-55163 affects version 4.1.52.Final-tuxcare.2 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.52.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:44156e5a-5a1e-5710-93e0-0fc8956a4da9",
      "id": "CVE-2025-58056",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-58056 is fixed in version 4.1.52.Final-tuxcare.2 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.52.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b4d6bf3e-1016-58cd-8948-fa6e40ec6350",
      "id": "CVE-2025-58057",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-58057 is fixed in version 4.1.52.Final-tuxcare.2 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.52.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:37c9966d-a860-5690-87c7-e237a0eb2d58",
      "id": "CVE-2025-59419",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-59419 is fixed in version 4.1.52.Final-tuxcare.2 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.52.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e9ecfa97-b9ab-56b6-b93d-1a487100c120",
      "id": "CVE-2025-67735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-67735 is fixed in version 4.1.52.Final-tuxcare.2 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.52.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5491f246-cb37-52fa-a998-1746bda6b2ba",
      "id": "CVE-2026-33870",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33870 affects version 4.1.52.Final-tuxcare.2 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.52.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6693ff0b-29ac-5054-aa4b-d8f610acbbf6",
      "id": "CVE-2026-33871",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33871 affects version 4.1.52.Final-tuxcare.2 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.52.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:36b8d1f4-410a-522f-84f4-ff7d04a3050e",
      "id": "CVE-2026-41417",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41417 affects version 4.1.52.Final-tuxcare.2 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.52.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ddc2c24e-e730-534e-8465-bbb77d015f9b",
      "id": "CVE-2026-42577",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42577 affects version 4.1.52.Final-tuxcare.2 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.52.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:30c69cd9-230b-51a9-b25c-4db0d321d6bb",
      "id": "CVE-2026-42578",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42578 affects version 4.1.52.Final-tuxcare.2 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.52.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:554dc67a-8cc8-5654-a133-5454c40bfd0c",
      "id": "CVE-2026-42579",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42579 affects version 4.1.52.Final-tuxcare.2 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.52.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b2d35c0f-63f1-550c-ae7d-d628c7437a90",
      "id": "CVE-2026-42580",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42580 affects version 4.1.52.Final-tuxcare.2 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.52.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b6a3c557-0282-5ae8-8e1e-8efdadc13819",
      "id": "CVE-2026-42581",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42581 affects version 4.1.52.Final-tuxcare.2 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.52.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:79ddaa82-8749-580d-b482-1c2833fbd52a",
      "id": "CVE-2026-42583",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42583 affects version 4.1.52.Final-tuxcare.2 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.52.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:be638bf8-fcf1-5fdd-a4c8-64b7d1eff298",
      "id": "CVE-2026-42584",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42584 affects version 4.1.52.Final-tuxcare.2 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.52.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ff3d1cdc-4dfd-5ed5-8738-8b4427a4411a",
      "id": "CVE-2026-42585",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42585 affects version 4.1.52.Final-tuxcare.2 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.52.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ba282b7c-47ab-5472-91ba-ebb130dd4639",
      "id": "CVE-2026-42586",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42586 affects version 4.1.52.Final-tuxcare.2 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.52.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c5ef8920-57df-5c9f-865c-b111685e283f",
      "id": "CVE-2026-42587",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42587 affects version 4.1.52.Final-tuxcare.2 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.52.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8c19f589-2e23-5da0-9e06-ecb7b08a1c60",
      "id": "CVE-2026-44248",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44248 affects version 4.1.52.Final-tuxcare.2 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.52.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3ee17a8c-7536-59f0-827b-80deeacb57a9",
      "id": "CVE-2026-44249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44249 affects version 4.1.52.Final-tuxcare.2 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.52.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:83eb34d9-d4d4-511c-ba51-eb9221f241cd",
      "id": "CVE-2026-44250",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44250 affects version 4.1.52.Final-tuxcare.2 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.52.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4c58532c-4c7d-596d-a4b7-a01bb275f47a",
      "id": "CVE-2026-44890",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44890 affects version 4.1.52.Final-tuxcare.2 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.52.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:74b28aa6-b28b-5088-9f29-8c9b8e1fd18d",
      "id": "CVE-2026-44891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44891 affects version 4.1.52.Final-tuxcare.2 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.52.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2bd575d8-ec17-5782-9653-8bfe6171378c",
      "id": "CVE-2026-44893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44893 affects version 4.1.52.Final-tuxcare.2 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.52.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5068dba1-61f4-5a91-b34a-c3787397caf8",
      "id": "CVE-2026-45416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45416 affects version 4.1.52.Final-tuxcare.2 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.52.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a609fda8-fcf6-5700-bc2e-b1c39626d04e",
      "id": "CVE-2026-45536",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45536 affects version 4.1.52.Final-tuxcare.2 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.52.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4bdc9528-9015-519a-908b-6db8deb6e1c4",
      "id": "CVE-2026-45673",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45673 affects version 4.1.52.Final-tuxcare.2 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.52.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5697f7ae-0a2c-5d05-bb09-dfad23b6832d",
      "id": "CVE-2026-45674",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45674 affects version 4.1.52.Final-tuxcare.2 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.52.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8e18889e-331b-5be4-ad92-31224ea80b1d",
      "id": "CVE-2026-46340",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-46340 affects version 4.1.52.Final-tuxcare.2 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.52.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:758bb080-19ba-5e3a-baf1-332dff842cb6",
      "id": "CVE-2026-47244",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47244 affects version 4.1.52.Final-tuxcare.2 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.52.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ab5e06c5-a9a6-54d8-b6b2-0ccea301addd",
      "id": "CVE-2026-47691",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47691 affects version 4.1.52.Final-tuxcare.2 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.52.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3d87bad2-dbfd-54e9-8215-e97f697c7945",
      "id": "CVE-2026-48006",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48006 affects version 4.1.52.Final-tuxcare.2 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.52.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e26bc0f9-9347-5b59-8019-a7981f2a4bf6",
      "id": "CVE-2026-48043",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48043 affects version 4.1.52.Final-tuxcare.2 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.52.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:63f1148b-d3a2-5a5d-8eba-7785608d2401",
      "id": "CVE-2026-48059",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48059 affects version 4.1.52.Final-tuxcare.2 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.52.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:deedc44a-29f6-56ad-8d5a-abd2cc3a2952",
      "id": "CVE-2026-50010",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50010 affects version 4.1.52.Final-tuxcare.2 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.52.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a7b31924-d566-5d42-80c7-d12da1c590f6",
      "id": "CVE-2026-50011",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50011 affects version 4.1.52.Final-tuxcare.2 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.52.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:551067cb-aa3e-5d86-b437-8204896131d0",
      "id": "CVE-2026-50020",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50020 affects version 4.1.52.Final-tuxcare.2 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.52.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:42732f26-76f9-5cd3-8920-90d6a5a7f147",
      "id": "CVE-2026-50560",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50560 affects version 4.1.52.Final-tuxcare.2 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.52.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:47b01fc9-6d5a-5311-a175-7ca9b6848ba2",
      "id": "CVE-2026-55831",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55831 affects version 4.1.52.Final-tuxcare.2 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.52.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:34720e88-44ce-5bfe-8da4-f9103f9958fa",
      "id": "CVE-2026-55833",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55833 affects version 4.1.52.Final-tuxcare.2 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.52.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9d0f2c1f-94f1-5f25-8770-e27619149699",
      "id": "CVE-2026-55851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55851 affects version 4.1.52.Final-tuxcare.2 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.52.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1afde354-a4fc-59f4-aca3-5d8559efa71e",
      "id": "CVE-2026-56745",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56745 affects version 4.1.52.Final-tuxcare.2 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.52.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:10a61bb6-33f6-5ca5-a648-5e85bef2b1d1",
      "id": "CVE-2026-56746",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56746 affects version 4.1.52.Final-tuxcare.2 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.52.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:46276aa7-d9df-58dc-8da4-1b1e8ee269c1",
      "id": "CVE-2026-56817",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56817 affects version 4.1.52.Final-tuxcare.2 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.52.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:85b25328-ccbd-57af-b970-83c912485e71",
      "id": "CVE-2026-59898",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59898 affects version 4.1.52.Final-tuxcare.2 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.52.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c510c7c3-1b6d-5c0d-9e54-fcb4dda204e8",
      "id": "CVE-2026-59899",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59899 affects version 4.1.52.Final-tuxcare.2 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.52.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d77bfb0b-6d85-5288-a69f-baab8f9e4187",
      "id": "CVE-2026-59900",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59900 affects version 4.1.52.Final-tuxcare.2 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.52.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fdd68746-434e-5459-8e09-0095d827fb6b",
      "id": "CVE-2026-59901",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59901 affects version 4.1.52.Final-tuxcare.2 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.52.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2aa721e4-5f2d-5d00-a838-7d0010ae8658",
      "id": "CVE-2026-59919",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59919 affects version 4.1.52.Final-tuxcare.2 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.52.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0c69dce2-4ca7-51e7-bfd0-c372cf504668",
      "id": "CVE-2026-59920",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59920 affects version 4.1.52.Final-tuxcare.2 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.52.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3dc7b405-edad-5cbe-a460-4fbf301b4bab",
      "id": "CVE-2026-59921",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59921 affects version 4.1.52.Final-tuxcare.2 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.52.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2462eb45-04d0-57ac-8228-3a7dd5cec32d",
      "id": "GHSA-mfg7-5gfp-c4w3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.52.Final-tuxcare.2 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.52.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1f3ff0d4-345a-5fce-9154-630f77466c34",
      "id": "GHSA-v74w-7mr3-4qg3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.52.Final-tuxcare.2 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.52.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b4a1d7c8-be86-5f25-8f91-17eb57693ad1",
      "id": "GHSA-xpw8-rcwv-8f8p",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-xpw8-rcwv-8f8p is fixed in version 4.1.52.Final-tuxcare.2 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.52.Final-tuxcare.2"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.52.Final-tuxcare.2"
    }
  ]
}