{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:ab3cb4a1-5652-5dbe-8f42-d6cace5fb37d",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/io.netty/netty-codec-http2@4.1.75.Final-tuxcare.3",
      "type": "library",
      "group": "io.netty",
      "name": "netty-codec-http2",
      "version": "4.1.75.Final-tuxcare.3",
      "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.75.Final-tuxcare.3"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:62096eea-37d6-52b6-8ec3-eac422baf1e1",
      "id": "CVE-2022-24823",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-24823 is fixed in version 4.1.75.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0e210e6f-be02-5bc0-bef6-0c505beaaf3e",
      "id": "CVE-2022-41881",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-41881 is fixed in version 4.1.75.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ab5ed396-6c00-5d97-a5a4-54adef8624d8",
      "id": "CVE-2022-41915",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-41915 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8a39e460-ded4-5c6a-9c99-8c5e0d384610",
      "id": "CVE-2023-34462",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-34462 is fixed in version 4.1.75.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1889e3da-4baf-5f56-b56b-72d5ac461062",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-44487 is fixed in version 4.1.75.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a7641d32-152e-5bd5-9933-06232c6cae35",
      "id": "CVE-2023-4586",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2023-4586 is a false positive for io.netty:netty-codec-http2 4.1.75.Final-tuxcare.3."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ba7decc6-d5e7-5f90-8b11-36885d8f021f",
      "id": "CVE-2024-29025",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-29025 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:64f5c21f-4d2f-5e71-83be-8c3c24babe20",
      "id": "CVE-2024-47535",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-47535 is fixed in version 4.1.75.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3d89c7c8-7db7-5377-a922-39ffe0e466f2",
      "id": "CVE-2025-24970",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-24970 is fixed in version 4.1.75.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a8855d69-6649-5943-97d2-7ca02ecd966f",
      "id": "CVE-2025-25193",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-25193 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d28382ac-5670-5891-afac-8cf92076385e",
      "id": "CVE-2025-55163",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-55163 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:368c7165-a485-51d3-a49a-6c2ae081bbfe",
      "id": "CVE-2025-58056",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-58056 is fixed in version 4.1.75.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9acc54e2-f630-599e-88c8-0f331fab6115",
      "id": "CVE-2025-58057",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58057 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e0d845e8-06c8-549f-853a-fff08b6b4dfa",
      "id": "CVE-2025-59419",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-59419 is fixed in version 4.1.75.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b1bd7ac5-d0c5-530f-a717-b6548ab10027",
      "id": "CVE-2025-67735",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-67735 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9abec27b-6b0c-56bf-b691-368aa3f57922",
      "id": "CVE-2026-33870",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33870 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ff013861-121c-5d62-a614-fb26ee7ea388",
      "id": "CVE-2026-33871",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33871 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1ee88b6d-4ffb-542b-8175-c9360970295b",
      "id": "CVE-2026-41417",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41417 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6c3a271c-003e-5212-80e7-ab29635029f5",
      "id": "CVE-2026-42577",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42577 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c5b908fc-1447-573c-b60e-c7afc5717d7c",
      "id": "CVE-2026-42578",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42578 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:34b781f9-2c49-5dfa-991c-319051124876",
      "id": "CVE-2026-42579",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42579 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0b7558e7-e984-56ff-a764-129530bff2da",
      "id": "CVE-2026-42580",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42580 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a6e6b195-55bf-5c05-9a91-6851132e7bb1",
      "id": "CVE-2026-42581",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42581 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:383d0ee5-d895-5e8d-a967-e01f4320256b",
      "id": "CVE-2026-42583",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42583 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e9e44a14-39b6-557b-8e7a-00ac1c4e1a8a",
      "id": "CVE-2026-42584",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42584 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5add85c3-23c5-5172-87e9-b370715c4978",
      "id": "CVE-2026-42585",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42585 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1492a4f5-f77c-55b3-8c9c-75309a7dce3e",
      "id": "CVE-2026-42586",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42586 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9824f141-9aa1-5ab7-a134-653c16464d31",
      "id": "CVE-2026-42587",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42587 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0c95ad3f-e0e2-52bf-8a86-687fa9d8c9b3",
      "id": "CVE-2026-44248",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44248 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2d0ff20d-4b88-59d7-92ec-8630a2886999",
      "id": "CVE-2026-44249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44249 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ccb55e22-ed07-5e34-8d84-57d5dd935931",
      "id": "CVE-2026-44250",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44250 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:09eee999-536d-50aa-8a33-a3a329389723",
      "id": "CVE-2026-44890",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.75.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:df923f3e-ed29-5695-a8bb-3bb638e86e91",
      "id": "CVE-2026-44891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44891 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d961cba6-7094-5ec8-bee4-6b44b9baa858",
      "id": "CVE-2026-44893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44893 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:38d0881f-cce7-5167-adcf-d957609a278c",
      "id": "CVE-2026-45416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45416 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a70536e6-8f33-5118-896d-e992dc5ee023",
      "id": "CVE-2026-45536",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45536 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2587c8ab-1197-55b4-927a-01e8e9479119",
      "id": "CVE-2026-45673",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45673 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:29ceb245-0802-5420-a430-807cc389e567",
      "id": "CVE-2026-45674",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45674 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:66c5770e-5f6f-5249-a39d-c1d703a57f7c",
      "id": "CVE-2026-46340",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-46340 is fixed in version 4.1.75.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:60fe67b0-b7cc-5cbe-a2e5-7c6f942ad23c",
      "id": "CVE-2026-47244",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47244 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:937965d8-8c55-5577-9700-4e01ecc7a2a7",
      "id": "CVE-2026-47691",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47691 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d5ca6033-3236-5188-a945-cf38d0c04355",
      "id": "CVE-2026-48006",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48006 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a0d18003-1516-53aa-a8a0-19965175e7db",
      "id": "CVE-2026-48043",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-48043 does not affect version 4.1.75.Final-tuxcare.3 of io.netty:netty-codec-http2. already_fixed \u2014 The target repository (Netty 4.1.75.Final-tuxcare.1) already contains equivalent protection against CVE-2026-48043. While the upstream patch targets a newer architecture with a ChannelInboundHandlerAdapter tail handler (introduced in CVE-2025-58057 refactoring), the target's older architecture implements the same defensive pattern: a try-finally block ensuring ByteBuf.release() is called uncond..."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6c55dbb5-5265-5374-88d7-9bd1107b2d77",
      "id": "CVE-2026-48059",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48059 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:01d8044c-f7bd-5e8a-b6c7-2e759d4071e7",
      "id": "CVE-2026-50010",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50010 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7dc75d92-57f5-5d5d-986f-a9fcc3df4c4a",
      "id": "CVE-2026-50011",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50011 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ef4e9882-b2d2-5858-a87d-9552d0260da1",
      "id": "CVE-2026-50020",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50020 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e8dcd76d-6335-5dc5-b545-63633530e41d",
      "id": "CVE-2026-50560",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.75.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5270e040-da47-5d81-9d12-a25d657a71df",
      "id": "CVE-2026-55831",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55831 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:536814ab-5363-5f21-85fe-ff4b621243d7",
      "id": "CVE-2026-55833",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55833 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e371d1a5-5042-59e6-930d-c6c97e94a084",
      "id": "CVE-2026-55851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55851 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:373bdcdb-c1f3-555a-bfcc-6babe3e60a25",
      "id": "CVE-2026-56745",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56745 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:eb7fdf08-5711-515f-ad99-1676c1a10865",
      "id": "CVE-2026-56746",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56746 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:314a5489-ed22-5cac-bc94-45082c36ac66",
      "id": "CVE-2026-56817",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56817 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:410f7ee7-f131-5a47-81e5-5ab3791aa4f2",
      "id": "CVE-2026-59898",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59898 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7b5655f6-aec6-5b63-bc10-02a1fc830173",
      "id": "CVE-2026-59899",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59899 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:148d80e7-425d-5709-b27e-087895a92b1c",
      "id": "CVE-2026-59900",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59900 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:71808f03-80bd-5850-9f85-55d10ad45131",
      "id": "CVE-2026-59901",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59901 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a9f35fa5-a326-58af-a3ca-997d623c3ef9",
      "id": "CVE-2026-59919",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59919 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2a505279-2c9b-5d7b-847d-67b62a2e4150",
      "id": "CVE-2026-59920",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59920 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6f26226f-409a-5c46-8b13-8b585b469b5f",
      "id": "CVE-2026-59921",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59921 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e34157a7-8d9e-53a0-bc4a-3c475053fb76",
      "id": "GHSA-mfg7-5gfp-c4w3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7633cb4f-2ff5-56e3-9575-021e2224be79",
      "id": "GHSA-v74w-7mr3-4qg3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8ec6f846-cc3c-5cd5-852c-f1742faea39f",
      "id": "GHSA-xpw8-rcwv-8f8p",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-xpw8-rcwv-8f8p is fixed in version 4.1.75.Final-tuxcare.3 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.75.Final-tuxcare.3"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.75.Final-tuxcare.3"
    }
  ]
}