{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:4d50166d-d182-5bff-8739-fa7114623fac",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.73.Final-tuxcare.2",
      "type": "library",
      "group": "io.netty",
      "name": "netty-codec-mqtt",
      "version": "4.1.73.Final-tuxcare.2",
      "purl": "pkg:maven/io.netty/netty-codec-mqtt@4.1.73.Final-tuxcare.2"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:d61531b5-ba2c-5a86-a4ee-c20f5393c378",
      "id": "CVE-2022-24823",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-24823 is fixed in version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dcd3e592-6926-57f2-a371-9fcb2ac71fb5",
      "id": "CVE-2022-41881",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-41881 is fixed in version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d607bd8a-2b00-502a-82d5-58a8e968f294",
      "id": "CVE-2022-41915",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-41915 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c639596e-940d-5f33-9885-4a4f8ea72f34",
      "id": "CVE-2023-34462",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-34462 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5b95426d-f73d-58bb-ab50-fc6d595bb311",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-44487 is fixed in version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:804c2127-38dc-5543-974a-3a56a266d696",
      "id": "CVE-2023-4586",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2023-4586 is a false positive for io.netty:netty-codec-mqtt 4.1.73.Final-tuxcare.2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d8234eae-befb-565a-94b9-cfc5fa0b805b",
      "id": "CVE-2024-29025",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-29025 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cc556785-9ac8-5f4b-a804-3850c7baceae",
      "id": "CVE-2024-47535",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-47535 is fixed in version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b5449a1b-e088-5369-afad-ef7a81bab3d9",
      "id": "CVE-2025-24970",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-24970 is fixed in version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:606afd2c-eedd-5e26-b7fc-12b3bb3c33f0",
      "id": "CVE-2025-25193",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-25193 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:411520fc-a698-59af-8632-e124d299fc3d",
      "id": "CVE-2025-55163",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-55163 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8d191fde-0bf0-5675-ab2d-68549aed4248",
      "id": "CVE-2025-58056",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58056 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f2f26267-12c9-5d7e-a403-0962c4277261",
      "id": "CVE-2025-58057",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58057 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0364f74a-0f97-5c4d-8c57-49b5d0125ad6",
      "id": "CVE-2025-59419",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-59419 is fixed in version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:91f24e3e-47a9-5404-ac49-44aae16f0228",
      "id": "CVE-2025-67735",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-67735 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:483bc10c-9476-546e-ae7b-0219d0705734",
      "id": "CVE-2026-33870",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33870 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:43e1aea2-32b6-5a70-a309-8b5294a6dae7",
      "id": "CVE-2026-33871",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33871 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f06b52be-daf1-5eef-94b1-c88ce2b28094",
      "id": "CVE-2026-41417",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41417 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4467be48-305e-56eb-858a-a66e97ec69e8",
      "id": "CVE-2026-42577",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42577 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:efe39f05-f101-5a33-89fe-be3c239a9cbb",
      "id": "CVE-2026-42578",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42578 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8364bcb3-e831-59b4-9efa-bc014f911c12",
      "id": "CVE-2026-42579",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42579 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cde5a0b4-d5d8-50c8-9ff9-e470accf688f",
      "id": "CVE-2026-42580",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42580 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ab58c4f8-aa9d-5f8e-bd43-3e36a22af34d",
      "id": "CVE-2026-42581",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42581 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:db9430b5-9ac1-51d7-b2ff-3ad81f91f0e6",
      "id": "CVE-2026-42583",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42583 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:15d74044-3916-5e16-9ea0-2413450e04c8",
      "id": "CVE-2026-42584",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42584 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:34482d9a-83f1-56eb-bea3-205946a8baa3",
      "id": "CVE-2026-42585",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42585 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f029164c-6721-569e-b4e3-09929df3005b",
      "id": "CVE-2026-42586",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42586 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:02eff787-f514-53e6-9746-95b63e67f470",
      "id": "CVE-2026-42587",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42587 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e6922370-08dd-5859-8475-4292868d3f33",
      "id": "CVE-2026-44248",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44248 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4083e729-1a76-51b8-a9da-ab00c2a57299",
      "id": "CVE-2026-44249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44249 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4a911c59-4179-5bc2-9c04-3c71b05c044a",
      "id": "CVE-2026-44250",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44250 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f1c65fd9-9d50-583c-b979-1fe39405a6f2",
      "id": "CVE-2026-44890",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:46a1bc54-b57f-5d60-a91a-a0c4dbeb9c44",
      "id": "CVE-2026-44891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44891 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:67df7dcc-0d64-56a6-a67d-3ad0ae4ab489",
      "id": "CVE-2026-44893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44893 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d74fe4da-5aef-5cb9-b61a-e031c398a9ff",
      "id": "CVE-2026-45416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45416 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:94c87521-094c-5bfc-bdcd-501a702b7cd1",
      "id": "CVE-2026-45536",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45536 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:578aeaec-8bba-54a6-9047-9f122c27874e",
      "id": "CVE-2026-45673",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45673 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2a2e5e56-4485-55fb-979b-90650f83cd76",
      "id": "CVE-2026-45674",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45674 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8beb077a-d160-5e6a-9844-2a543c7e482f",
      "id": "CVE-2026-46340",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-46340 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0fabf045-d018-5eb9-82c7-4f1ac2baae8b",
      "id": "CVE-2026-47244",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47244 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f2c1b8e7-6ddf-5e31-b976-2ca22aa2d7a3",
      "id": "CVE-2026-47691",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47691 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5abf4ba9-5c2b-589d-a996-ef948157038d",
      "id": "CVE-2026-48006",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48006 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9f8c2b51-b465-5877-b3cf-b944f65aa526",
      "id": "CVE-2026-48043",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-48043 does not affect version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec-mqtt. not_affected \u2014 Version 4.1.73 is not affected by CVE-2026-48043. The target uses a loop-based architecture with try-finally protection (introduced in 2016) that prevents the buffer leak described in the CVE. The vulnerable ChannelInboundHandlerAdapter pattern that the upstream patch fixes does not exist in this version."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:038f6ac2-ad34-5f62-9dc5-68ab2c9228c0",
      "id": "CVE-2026-48059",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48059 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4ab17ef7-f2e5-5553-adc0-e6a6ca237b9f",
      "id": "CVE-2026-50010",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50010 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2b450b2e-a6f3-57e5-b6a1-5e0654cdd877",
      "id": "CVE-2026-50011",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50011 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0ac1ac19-5128-575b-92d2-fc1e1ac9fa5d",
      "id": "CVE-2026-50020",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50020 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5cd9f995-e9e0-5376-9f25-29a9947a3a37",
      "id": "CVE-2026-50560",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4f8966be-f7df-5ed1-9c58-e526ccca2cec",
      "id": "CVE-2026-55831",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55831 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7f7739e1-f1ff-5066-878a-805dc41b5455",
      "id": "CVE-2026-55833",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55833 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e3dd9a1d-0234-5f85-a118-467a8a4c4ac6",
      "id": "CVE-2026-55851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55851 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4ff8d071-925a-581e-8823-f54a36317e74",
      "id": "CVE-2026-56745",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56745 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9a60db71-73f7-5c58-9d00-b89adc057bc3",
      "id": "CVE-2026-56746",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56746 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:abf24434-dd5f-59d2-9ad8-67c68dbfbccf",
      "id": "CVE-2026-56817",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56817 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4065b9f4-80b6-5bd5-adcb-2dee386356e2",
      "id": "CVE-2026-59898",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59898 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a4cc8741-0a94-5fcf-a0c5-57ba7551b308",
      "id": "CVE-2026-59899",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59899 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9747214f-81dc-59d8-ad04-a35944aa6e8c",
      "id": "CVE-2026-59900",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59900 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1bd29ee4-9c7e-5ed0-8353-32fda87d2bc8",
      "id": "CVE-2026-59901",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59901 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:02a2992b-460d-5c64-8058-f15c4786780c",
      "id": "CVE-2026-59919",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59919 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:13d0246d-6bbd-54b6-a90a-709f44c5b139",
      "id": "CVE-2026-59920",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59920 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ee69f083-cece-5cf9-ae5b-49dab6df6d40",
      "id": "CVE-2026-59921",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59921 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2999a6a0-7a7e-5d35-bed3-68bd415979a9",
      "id": "GHSA-mfg7-5gfp-c4w3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a15323e1-665f-51b5-bf4b-1c1bcee4febb",
      "id": "GHSA-v74w-7mr3-4qg3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:073e5fd1-87de-5961-93db-95a89d3e9288",
      "id": "GHSA-xpw8-rcwv-8f8p",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-xpw8-rcwv-8f8p affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.73.Final-tuxcare.2"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.73.Final-tuxcare.2"
    }
  ]
}