{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:db434efc-b26a-5f79-9025-7992f8dd5a68",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.63.Final-tuxcare.2",
      "type": "library",
      "group": "io.netty",
      "name": "netty-codec-memcache",
      "version": "4.1.63.Final-tuxcare.2",
      "purl": "pkg:maven/io.netty/netty-codec-memcache@4.1.63.Final-tuxcare.2"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:d21a9665-fc31-54ca-a4fb-254883564fa8",
      "id": "CVE-2021-37136",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-37136 is fixed in version 4.1.63.Final-tuxcare.2 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e543f7f4-231d-551d-abe4-065b48dd227c",
      "id": "CVE-2021-37137",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-37137 is fixed in version 4.1.63.Final-tuxcare.2 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dae6a709-8e96-5aa9-8fbb-1d17c6aa5e57",
      "id": "CVE-2021-43797",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-43797 is fixed in version 4.1.63.Final-tuxcare.2 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:06df69dd-5830-59a1-8327-a3fe045e0332",
      "id": "CVE-2022-24823",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-24823 is fixed in version 4.1.63.Final-tuxcare.2 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a234bf12-71ad-5fb0-8e7f-c90f8b2507a9",
      "id": "CVE-2022-41881",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-41881 is fixed in version 4.1.63.Final-tuxcare.2 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:67c51911-378a-5d35-b658-ce1f02e64be9",
      "id": "CVE-2022-41915",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-41915 is fixed in version 4.1.63.Final-tuxcare.2 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e37052af-91b5-53a0-8c06-fbabfecee09d",
      "id": "CVE-2023-34462",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-34462 is fixed in version 4.1.63.Final-tuxcare.2 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f30dc5b5-e207-51e8-a546-257c938a9db2",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-44487 is fixed in version 4.1.63.Final-tuxcare.2 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1219eecc-6dbf-59ff-88f7-9a2c8ed1edfc",
      "id": "CVE-2023-4586",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2023-4586 is a false positive for io.netty:netty-codec-memcache 4.1.63.Final-tuxcare.2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0e44bf21-7497-50b4-ae14-ce62cfe955dd",
      "id": "CVE-2024-29025",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-29025 is fixed in version 4.1.63.Final-tuxcare.2 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7a39e53b-7d5c-5111-8459-166394a909cb",
      "id": "CVE-2024-47535",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-47535 is fixed in version 4.1.63.Final-tuxcare.2 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0b463e37-7c64-58ee-9528-03875e50063f",
      "id": "CVE-2025-24970",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-24970 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:40ff71e9-a61c-53ba-a8ba-aca8479679e5",
      "id": "CVE-2025-25193",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-25193 is fixed in version 4.1.63.Final-tuxcare.2 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b76bf0a4-2fc2-5238-ad70-39f5e453f2fb",
      "id": "CVE-2025-55163",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55163 is fixed in version 4.1.63.Final-tuxcare.2 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ea92e498-2e17-511e-932b-5a52d7fc9fe3",
      "id": "CVE-2025-58056",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58056 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8a501125-94e2-55ea-8bb9-9397f0f78702",
      "id": "CVE-2025-58057",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-58057 is fixed in version 4.1.63.Final-tuxcare.2 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e95b26ae-5e45-58f5-a46b-83347065b2a2",
      "id": "CVE-2025-59419",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-59419 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:64fa0d94-b2e9-517e-8298-276d02b0f9e8",
      "id": "CVE-2025-67735",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-67735 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6cf53b8e-5326-53ca-a257-58c54503f226",
      "id": "CVE-2026-33870",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33870 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:95db31a1-b5ba-5dd6-b259-62e27b1400db",
      "id": "CVE-2026-33871",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33871 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b814fa51-60a6-5260-ac91-49affb0fa184",
      "id": "CVE-2026-41417",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41417 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3bf3abc5-0ab7-595d-abf4-00908856433e",
      "id": "CVE-2026-42577",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42577 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1fbbdf2d-03bb-5480-b9b7-22c0fa331a4a",
      "id": "CVE-2026-42578",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42578 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:054085d7-3604-5058-98a8-ec6d808c2acb",
      "id": "CVE-2026-42579",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42579 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3c6bb8e5-d3a0-5888-bb56-1b4e2d6eb4bc",
      "id": "CVE-2026-42580",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42580 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2bf632ab-5a25-5979-861f-9fccfcbce3d2",
      "id": "CVE-2026-42581",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42581 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d54f5c05-ef08-585e-948c-9c2f3bf52fe2",
      "id": "CVE-2026-42583",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42583 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f7ac34ab-9c9c-5ad6-a69b-b028b4f6e26b",
      "id": "CVE-2026-42584",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42584 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d1f1cd4a-6d2b-56ee-ab82-e8cb4f222e85",
      "id": "CVE-2026-42585",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42585 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:19f69844-ac7d-50f3-a9dd-81ec5f62a50f",
      "id": "CVE-2026-42586",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42586 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:151cd9cb-48cd-5eec-998a-b7aeb5e4ef0b",
      "id": "CVE-2026-42587",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42587 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8dbb271b-bcb5-56fb-966e-5479f256e733",
      "id": "CVE-2026-44248",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44248 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fdfcac93-8232-5504-98e2-54cbc8d95f83",
      "id": "CVE-2026-44249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44249 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:84b57b36-3e1a-5fa6-85aa-cf00a8b8f2b5",
      "id": "CVE-2026-44250",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44250 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bec88100-a748-5c76-9ca8-96571d95dd22",
      "id": "CVE-2026-44890",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44890 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7fbc2edf-c32b-50b5-92f8-edcde16a3430",
      "id": "CVE-2026-44891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44891 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a6974623-ea35-599c-ac17-03a24cc6c754",
      "id": "CVE-2026-44893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44893 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:25e1c2f9-6569-5c4c-b1ff-c9a1722871c6",
      "id": "CVE-2026-45416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45416 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:980bdd89-4972-5e81-9e2c-10bb20825902",
      "id": "CVE-2026-45536",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45536 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ea3313e4-2e2b-505f-aa9e-9bd3f208a4b4",
      "id": "CVE-2026-45673",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45673 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a9841469-33c8-55de-9ca4-362a6777d9a5",
      "id": "CVE-2026-45674",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45674 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c39ee72c-fafa-5a6a-85c1-99642b4d8201",
      "id": "CVE-2026-46340",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-46340 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b2c88519-4796-5d6d-a215-3902f450a0f4",
      "id": "CVE-2026-47244",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47244 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c909bc4e-d53a-5c48-a51f-6854689aba55",
      "id": "CVE-2026-47691",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47691 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:85cd3013-e860-53f9-af6e-82a091f6895c",
      "id": "CVE-2026-48006",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48006 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:461f2127-6211-50f3-8cc4-1d6a6e1211d4",
      "id": "CVE-2026-48043",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48043 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:44b1ba95-ca99-5b22-8f1e-ce3a0e46112c",
      "id": "CVE-2026-48059",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48059 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6d58e091-be39-5cc6-b49f-5a7d6e5ffc7a",
      "id": "CVE-2026-50010",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50010 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:841bfec2-1914-58f0-87cf-e1c35c032f2a",
      "id": "CVE-2026-50011",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50011 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:26c9e896-d726-5af6-9483-ff876ee41f3b",
      "id": "CVE-2026-50020",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50020 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e7429ede-6ed3-5a8a-9c54-8c9713e7f35c",
      "id": "CVE-2026-50560",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50560 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4cb4c283-651d-52fa-8ef1-ace62e96c7ba",
      "id": "CVE-2026-55831",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55831 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:64db652c-2eb2-52bc-b0d4-858e87996deb",
      "id": "CVE-2026-55833",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55833 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5791ec34-1b2d-5a6d-b894-a245909d6b6c",
      "id": "CVE-2026-55851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55851 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fb404df0-d92c-56a8-b92b-bcc302554568",
      "id": "CVE-2026-56745",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56745 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:845ea37a-fb7b-5414-be0d-46b30a35fa52",
      "id": "CVE-2026-56746",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56746 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:956beeea-436b-59a0-a108-642be75ad87a",
      "id": "CVE-2026-56817",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-56817 does not affect version 4.1.63.Final-tuxcare.2 of io.netty:netty-codec-memcache. not_affected \u2014 The Netty codec-xml module contains XmlDecoder, which instantiates an Aalto XML parser without security configuration (line 38: new InputFactoryImpl() with no XXE protection). However, this is a library component that Netty itself does not use in its own production code. The vulnerability only manifests when downstream applications explicitly add XmlDecoder to their Netty channel pipelines. Per..."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a8473387-385b-5abb-9bb3-de44ffa4d68f",
      "id": "CVE-2026-59898",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59898 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b649f521-f7ba-54f1-81bb-0525d2236c0e",
      "id": "CVE-2026-59899",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59899 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8fb61830-4051-5735-bc7a-e1317b1f2c78",
      "id": "CVE-2026-59900",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59900 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e35e2ad1-3f1f-5894-a5a0-ed29530f7921",
      "id": "CVE-2026-59901",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59901 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5975d3c4-5912-5e95-8e7a-6fe5e48cda8d",
      "id": "CVE-2026-59919",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59919 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d5b2a44b-63a6-5d18-9962-f46a9749a222",
      "id": "CVE-2026-59920",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59920 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:21781191-f8c7-55ca-9079-4cffa2c5b932",
      "id": "CVE-2026-59921",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59921 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:20ec86c6-aa2c-5f38-9239-83c739a45d95",
      "id": "GHSA-mfg7-5gfp-c4w3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:04ce0c8a-cb05-588b-b3e9-298141d613f6",
      "id": "GHSA-v74w-7mr3-4qg3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0d37d358-57dd-5882-8ffc-79c0addfb2a9",
      "id": "GHSA-xpw8-rcwv-8f8p",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-xpw8-rcwv-8f8p affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.63.Final-tuxcare.2"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.63.Final-tuxcare.2"
    }
  ]
}