{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:46e28a76-dff0-5220-8c21-4b21fab3b085", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/io.netty/netty-codec-http2@4.1.73.Final-tuxcare.2", "type": "library", "group": "io.netty", "name": "netty-codec-http2", "version": "4.1.73.Final-tuxcare.2", "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.73.Final-tuxcare.2" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:d765d39a-ddd7-5f2e-9d1b-97bce849a2a4", "id": "CVE-2022-24823", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-24823 is fixed in version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.73.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:985ffca4-24e3-5ac1-9c10-3fad5ebe3257", "id": "CVE-2022-41881", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-41881 is fixed in version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.73.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:891eaa5d-2779-5f6c-930c-f35e968cca05", "id": "CVE-2022-41915", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-41915 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.73.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:413295fd-037e-50ac-8766-766e9ba18d8e", "id": "CVE-2023-34462", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-34462 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.73.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:2bd47511-524b-5829-855b-fd736c87c5b6", "id": "CVE-2023-44487", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-44487 is fixed in version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.73.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:e95f7cb0-3ee2-5c71-8f06-4f6c00c012cc", "id": "CVE-2023-4586", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2023-4586 is a false positive for io.netty:netty-codec-http2 4.1.73.Final-tuxcare.2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.73.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:4e12a5b7-a840-5dba-99f7-a651ad018890", "id": "CVE-2024-29025", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-29025 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.73.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:bdd0f1c3-e26c-5fd7-8f4d-1b3fad557eaa", "id": "CVE-2024-47535", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-47535 is fixed in version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.73.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:4350e73b-5bb3-55f6-8e73-6c7596030b41", "id": "CVE-2025-24970", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-24970 is fixed in version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.73.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:41a2870d-4dca-54d9-b398-3caa422a6f61", "id": "CVE-2025-25193", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-25193 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.73.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:f9c9bcea-256b-5704-8ecc-00ee0d31dc4f", "id": "CVE-2025-55163", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-55163 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.73.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:cb9c1991-6afd-5209-adab-f5bcb33608f6", "id": "CVE-2025-58056", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-58056 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.73.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:7fd7badc-8f88-585b-878f-36435a1aa871", "id": "CVE-2025-58057", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-58057 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.73.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:9426864f-25e0-5bd6-ad48-feed9ecb9124", "id": "CVE-2025-59419", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59419 is fixed in version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.73.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:6ca84c44-8ffb-5ab2-ad5e-0690fbef2efb", "id": "CVE-2025-67735", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-67735 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.73.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:2e211058-57f3-537b-b281-246f357fa617", "id": "CVE-2026-33870", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33870 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.73.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:8b08459a-43cd-5711-8e42-3826ec474b80", "id": "CVE-2026-33871", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33871 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.73.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:46d02fb4-1cac-577a-a376-4936cb830aca", "id": "CVE-2026-41417", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41417 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.73.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:52d8fac7-6383-5d50-949b-a51b799620a6", "id": "CVE-2026-42577", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42577 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.73.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:c2541626-751e-5415-8d68-7bf936ba3161", "id": "CVE-2026-42578", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42578 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.73.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:86241f81-8f4f-5142-a875-2f4cfcdcdafe", "id": "CVE-2026-42579", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42579 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.73.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:1b0de121-85ae-54d2-8cba-c0f19c350d81", "id": "CVE-2026-42580", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42580 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.73.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:d0d0f9fa-8c9a-514f-9b22-b886130725b4", "id": "CVE-2026-42581", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42581 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.73.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:43a1ce18-dcd4-506d-9c1a-2a50df21f63f", "id": "CVE-2026-42583", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42583 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.73.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:028ad5f9-1574-5cbd-822c-8d7f2d4d3a44", "id": "CVE-2026-42584", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42584 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.73.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:c6c9a977-a235-5b0c-bd98-c9b05fecc390", "id": "CVE-2026-42585", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42585 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.73.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:16b6f535-2e83-5de8-aceb-4c5da3d938e6", "id": "CVE-2026-42586", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42586 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.73.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:cc1d42b1-2445-521f-8533-e504df0da093", "id": "CVE-2026-42587", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42587 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.73.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:259b2868-08d7-583f-9831-f2a982030eba", "id": "CVE-2026-44248", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44248 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.73.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:cfa9e15c-1195-59a5-9533-de0c3a3c829f", "id": "CVE-2026-44249", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44249 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.73.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:04555b3e-8f86-5ffd-8108-f466f87ab934", "id": "CVE-2026-44250", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44250 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.73.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:4d88fc59-40cc-57eb-b6cd-ae3b784b77c9", "id": "CVE-2026-44890", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.73.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:66aecf58-84b1-55ac-869a-e667825f5220", "id": "CVE-2026-44891", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44891 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.73.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:87644b06-82b9-5f60-93f8-25e4fa7cf3cf", "id": "CVE-2026-44893", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44893 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.73.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:2f96b246-f3cb-5a7b-a677-0c3f634ec77b", "id": "CVE-2026-45416", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45416 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.73.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:d358cdd5-1b14-5a43-8bdc-7cec30cc6afa", "id": "CVE-2026-45536", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45536 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.73.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:32546201-5822-53f5-8be5-f3fcb6673744", "id": "CVE-2026-45673", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45673 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.73.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:9c1dd3cc-64c2-519e-86e6-8ca61280c5e3", "id": "CVE-2026-45674", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45674 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.73.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:f057c530-78ed-5892-9fca-97bade7b3f35", "id": "CVE-2026-46340", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-46340 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.73.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:f5e43026-c03d-505a-8035-48e990633c32", "id": "CVE-2026-47244", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47244 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.73.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:144f5e58-b629-5c87-aea4-580ae72ea501", "id": "CVE-2026-47691", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47691 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.73.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:1dad9fc8-2490-5966-ae18-3b32b193c299", "id": "CVE-2026-48006", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-48006 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.73.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:b6866452-1c57-5784-bd6e-4acdebb8a490", "id": "CVE-2026-48043", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-48043 does not affect version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec-http2. not_affected \u2014 Version 4.1.73 is not affected by CVE-2026-48043. The target uses a loop-based architecture with try-finally protection (introduced in 2016) that prevents the buffer leak described in the CVE. The vulnerable ChannelInboundHandlerAdapter pattern that the upstream patch fixes does not exist in this version." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.73.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:da68359d-4aa8-5f17-baff-79a9314c3a89", "id": "CVE-2026-48059", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-48059 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.73.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:152bcf21-d443-562a-bb72-5e52502c1fa6", "id": "CVE-2026-50010", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50010 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.73.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:678b7dbb-eb20-5997-a900-adc8675876ba", "id": "CVE-2026-50011", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50011 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.73.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:de28b2f9-dce5-5fe5-addd-7152d80fff7c", "id": "CVE-2026-50020", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50020 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.73.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:46178865-7ba1-5b6a-a83f-8f7a588a1cd9", "id": "CVE-2026-50560", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.73.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:3fa97e55-60cf-5394-ac0d-8e7940b3981a", "id": "CVE-2026-55831", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55831 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.73.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:0430053d-3ee2-5eb9-9211-afa6c0672504", "id": "CVE-2026-55833", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55833 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.73.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:a17a7a10-f6c1-5f0d-8074-96e7183ff7a3", "id": "CVE-2026-55851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55851 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.73.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:74d24038-cccb-5f9d-b670-f8b3912a09cd", "id": "CVE-2026-56745", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56745 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.73.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:3cb0328b-ad70-5f0d-b5c0-740911a3c3d0", "id": "CVE-2026-56746", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56746 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.73.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:013bd78a-6f59-572d-9030-b640ab17eac5", "id": "CVE-2026-56817", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56817 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.73.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:0399005d-71cf-564a-9845-722a6dfe7a46", "id": "CVE-2026-59898", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59898 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.73.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:d8793717-c2ad-5173-9a3f-ca55d70d4f86", "id": "CVE-2026-59899", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59899 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.73.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:16843d73-c035-5246-a863-83e1a52ad0dc", "id": "CVE-2026-59900", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59900 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.73.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:7c2ef817-9a7c-5c60-aab9-e4e8a0400379", "id": "CVE-2026-59901", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59901 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.73.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:8ce4f393-9083-530f-921c-a3295a39ff8c", "id": "CVE-2026-59919", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59919 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.73.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:4499c048-fd0c-599b-bade-d6fd3985137c", "id": "CVE-2026-59920", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59920 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.73.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:34eb02b2-7bb3-524e-8a94-bce93354f903", "id": "CVE-2026-59921", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59921 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.73.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:228a37ee-c96d-5783-a0f0-2abd73ca9d1b", "id": "GHSA-mfg7-5gfp-c4w3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.73.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:3812c58d-6dc7-5fb9-bd18-eebab55a746f", "id": "GHSA-v74w-7mr3-4qg3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.73.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:c79104a8-3a1c-5edc-8b7d-48494707bb96", "id": "GHSA-xpw8-rcwv-8f8p", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-xpw8-rcwv-8f8p affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.73.Final-tuxcare.2" } ] } ], "dependencies": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.73.Final-tuxcare.2" } ] }