{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:f2bb8e4a-0c06-595e-bc7e-11418686f4d8",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.63.Final-tuxcare.2",
      "type": "library",
      "group": "io.netty",
      "name": "netty-codec-mqtt",
      "version": "4.1.63.Final-tuxcare.2",
      "purl": "pkg:maven/io.netty/netty-codec-mqtt@4.1.63.Final-tuxcare.2"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:1236c05e-dde8-5128-85f6-b9e9c546de08",
      "id": "CVE-2021-37136",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-37136 is fixed in version 4.1.63.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4c7ae73c-75a2-52b6-bfa3-102249a20d91",
      "id": "CVE-2021-37137",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-37137 is fixed in version 4.1.63.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d6a2b023-af80-5ef0-a17f-72133fcd730d",
      "id": "CVE-2021-43797",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-43797 is fixed in version 4.1.63.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d6a019bd-8858-5bf5-8ef0-6590e0455e26",
      "id": "CVE-2022-24823",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-24823 is fixed in version 4.1.63.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e0d53a4a-ca61-5b47-815a-74d7a9f00e4f",
      "id": "CVE-2022-41881",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-41881 is fixed in version 4.1.63.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:81ac1798-7d7d-5b4d-b028-177f8310b992",
      "id": "CVE-2022-41915",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-41915 is fixed in version 4.1.63.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:16559201-1aed-5a79-9048-d83e75607861",
      "id": "CVE-2023-34462",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-34462 is fixed in version 4.1.63.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4b0ba779-758d-55c7-a018-40da01f9af94",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-44487 is fixed in version 4.1.63.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5968f698-4a4b-5b51-8101-42f4933c2e67",
      "id": "CVE-2023-4586",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2023-4586 is a false positive for io.netty:netty-codec-mqtt 4.1.63.Final-tuxcare.2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:201f5d5e-7a5e-5f63-83a8-4fdd3dcb359e",
      "id": "CVE-2024-29025",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-29025 is fixed in version 4.1.63.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:46b9faf2-7fa9-56d3-8c5b-e5db56ba68ec",
      "id": "CVE-2024-47535",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-47535 is fixed in version 4.1.63.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2f34f514-6306-53f2-a1eb-33f972e697e5",
      "id": "CVE-2025-24970",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-24970 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d23a90c9-544a-5556-8394-e07a33985354",
      "id": "CVE-2025-25193",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-25193 is fixed in version 4.1.63.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:da5ddac1-333b-5a05-8a8c-f0a51af8427a",
      "id": "CVE-2025-55163",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55163 is fixed in version 4.1.63.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fed9e91d-fb99-5c51-8ef7-651d9c048f6b",
      "id": "CVE-2025-58056",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58056 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1288072f-0978-52b9-b09a-4d5b113b188c",
      "id": "CVE-2025-58057",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-58057 is fixed in version 4.1.63.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:163dbf89-b0c0-5ac9-b75c-fe390152ba5a",
      "id": "CVE-2025-59419",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-59419 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:22ea11d0-069c-5b81-a55b-18207969ff14",
      "id": "CVE-2025-67735",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-67735 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9b198c4c-3740-5926-8927-2aa658a8034d",
      "id": "CVE-2026-33870",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33870 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:21ba1558-313d-5e7a-8efa-c0dad1fd44e5",
      "id": "CVE-2026-33871",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33871 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dacc9ed1-953f-59ec-b8a0-0d6499ff1210",
      "id": "CVE-2026-41417",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41417 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:56ea52ad-a103-568e-91f7-58d17ad8ffc9",
      "id": "CVE-2026-42577",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42577 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8e06bcf0-11d8-5314-8678-7db44cb97a08",
      "id": "CVE-2026-42578",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42578 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ad882c67-4318-59ca-99e1-79301e76ccb4",
      "id": "CVE-2026-42579",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42579 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6de759c9-9caf-545e-881c-cba227bfecd8",
      "id": "CVE-2026-42580",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42580 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:318f576d-ebe4-56cf-bd46-97577ba36ec1",
      "id": "CVE-2026-42581",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42581 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:09e862d6-48aa-5e63-b4ab-072122b994c5",
      "id": "CVE-2026-42583",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42583 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:39a1d915-8246-5f09-a2f1-3960982a01a7",
      "id": "CVE-2026-42584",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42584 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:23067d48-fe83-5eb6-8f81-4c2224b71d8b",
      "id": "CVE-2026-42585",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42585 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4e1495ba-2c18-5ee8-be4f-e584c50a7423",
      "id": "CVE-2026-42586",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42586 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:07477dff-5fe6-5fc2-8658-8b54162762e4",
      "id": "CVE-2026-42587",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42587 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4963eb10-5260-570e-a1f8-195279899fc9",
      "id": "CVE-2026-44248",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44248 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8606e2b0-a84f-51ec-873b-62f07dd3458d",
      "id": "CVE-2026-44249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44249 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d21c6212-94f4-5e5e-926b-f2cb1137cf03",
      "id": "CVE-2026-44250",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44250 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:46f7686c-0f5e-5c60-9e38-bd0a2cfa692b",
      "id": "CVE-2026-44890",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44890 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8c8b3739-f672-520f-b795-9818022a5854",
      "id": "CVE-2026-44891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44891 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8bd9484f-98f2-5dab-82a7-22e3f134f123",
      "id": "CVE-2026-44893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44893 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0e6528b3-5552-565e-919a-605d589cafed",
      "id": "CVE-2026-45416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45416 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:068867ad-8c14-50d2-90c0-161e1caec51f",
      "id": "CVE-2026-45536",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45536 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cc7873fc-4335-5db2-8620-ec00ac8df88b",
      "id": "CVE-2026-45673",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45673 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:70784921-fca1-5d2b-a6ea-4fa4c8d2c63f",
      "id": "CVE-2026-45674",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45674 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c8ff5ea3-5673-5413-b6a9-50e92c6f4cca",
      "id": "CVE-2026-46340",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-46340 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5939d18c-dcbb-511a-b42f-39c222aed11c",
      "id": "CVE-2026-47244",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47244 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0a387b03-8761-52ff-b34c-87f2bb04ae52",
      "id": "CVE-2026-47691",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47691 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:258f8b19-f9bf-5d85-a9db-6c4c140cb5e0",
      "id": "CVE-2026-48006",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48006 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9dd5e965-2dd4-5e38-924d-01f1965b372d",
      "id": "CVE-2026-48043",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48043 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:07bec3e2-2e46-5c0c-9eb5-8730b5a067dc",
      "id": "CVE-2026-48059",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48059 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6bad3f31-f73e-54e4-9e9f-61da42178b7d",
      "id": "CVE-2026-50010",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50010 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:53f8ac3a-26de-5156-90d6-cf614632addd",
      "id": "CVE-2026-50011",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50011 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:be592f47-3195-559c-9a92-c44940215a48",
      "id": "CVE-2026-50020",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50020 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a7ba159d-ce02-529e-ae37-5c8a6798ded2",
      "id": "CVE-2026-50560",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50560 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:60e483cd-412f-5bf0-a0f0-ff149e83998a",
      "id": "CVE-2026-55831",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55831 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dd2c0825-444d-5063-b2b3-4bc5dc72da89",
      "id": "CVE-2026-55833",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55833 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dcf52b83-2e49-5f12-b5f4-4f471b144b97",
      "id": "CVE-2026-55851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55851 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1202dbb6-a016-51c8-9b49-6b079493abcb",
      "id": "CVE-2026-56745",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56745 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9b8e7b2c-9201-510b-9098-b2178e319ee7",
      "id": "CVE-2026-56746",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56746 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:729e3159-a663-557c-bfb4-5e61be055f9a",
      "id": "CVE-2026-56817",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-56817 does not affect version 4.1.63.Final-tuxcare.2 of io.netty:netty-codec-mqtt. not_affected \u2014 The Netty codec-xml module contains XmlDecoder, which instantiates an Aalto XML parser without security configuration (line 38: new InputFactoryImpl() with no XXE protection). However, this is a library component that Netty itself does not use in its own production code. The vulnerability only manifests when downstream applications explicitly add XmlDecoder to their Netty channel pipelines. Per..."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9d0e7d92-fd79-5e08-b4cc-b4f6ac8309e3",
      "id": "CVE-2026-59898",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59898 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6b662674-3cd6-564f-87c3-c43e88e8a92c",
      "id": "CVE-2026-59899",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59899 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cf95c0aa-c77e-5f1c-a22d-e21ae252cf9d",
      "id": "CVE-2026-59900",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59900 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:17e0af52-33c1-5238-a2f9-88dfe40ff2be",
      "id": "CVE-2026-59901",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59901 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:665d449b-af4e-5c97-aa43-38d7a1ca8b25",
      "id": "CVE-2026-59919",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59919 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:35cfd66a-4a74-57af-89de-393aec409b34",
      "id": "CVE-2026-59920",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59920 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4bc372ad-5aa3-5a4a-9ea5-1d945fc8279e",
      "id": "CVE-2026-59921",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59921 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:44ac31be-ffee-5cd8-b0f5-6d7a332c8267",
      "id": "GHSA-mfg7-5gfp-c4w3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fe1e1fea-3b6e-5c03-9acc-82c4ad31c74f",
      "id": "GHSA-v74w-7mr3-4qg3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:316456fe-113b-5fa8-aed2-defa339cfe92",
      "id": "GHSA-xpw8-rcwv-8f8p",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-xpw8-rcwv-8f8p affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.63.Final-tuxcare.2"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.63.Final-tuxcare.2"
    }
  ]
}