{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:9cc883b6-731b-5440-8aa8-00acaa582875",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.92.Final-tuxcare.4",
      "type": "library",
      "group": "io.netty",
      "name": "netty-codec-smtp",
      "version": "4.1.92.Final-tuxcare.4",
      "purl": "pkg:maven/io.netty/netty-codec-smtp@4.1.92.Final-tuxcare.4"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:c790ce65-194d-5d01-9135-603d473ce4fd",
      "id": "CVE-2023-34462",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-34462 is fixed in version 4.1.92.Final-tuxcare.4 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.92.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:84c7e998-18f5-502b-abfd-cb1319f94f6d",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-44487 is fixed in version 4.1.92.Final-tuxcare.4 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.92.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0094bdc4-750f-56fd-90cf-81aab83af3e1",
      "id": "CVE-2023-4586",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2023-4586 is a false positive for io.netty:netty-codec-smtp 4.1.92.Final-tuxcare.4."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.92.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6e4ff0a9-0915-572b-8185-00c5a1545190",
      "id": "CVE-2024-29025",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-29025 is fixed in version 4.1.92.Final-tuxcare.4 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.92.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3f280ef7-0802-5883-9d51-d57d2e05d835",
      "id": "CVE-2024-47535",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-47535 is fixed in version 4.1.92.Final-tuxcare.4 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.92.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:43c7f561-b70e-5a94-bdb8-87534fd223d6",
      "id": "CVE-2025-24970",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-24970 is fixed in version 4.1.92.Final-tuxcare.4 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.92.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c08cd08f-a256-5707-bcad-e823563f4f13",
      "id": "CVE-2025-25193",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-25193 affects version 4.1.92.Final-tuxcare.4 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.92.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d9c8472f-f9f3-5cf6-9e04-756a2d23d2ab",
      "id": "CVE-2025-55163",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55163 is fixed in version 4.1.92.Final-tuxcare.4 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.92.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d370667b-f468-5e97-8e03-9c3145c9319c",
      "id": "CVE-2025-58056",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-58056 is fixed in version 4.1.92.Final-tuxcare.4 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.92.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:302a00e9-efaa-567f-a62a-48a745d5b847",
      "id": "CVE-2025-58057",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58057 affects version 4.1.92.Final-tuxcare.4 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.92.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f5b71f47-0dbb-5fb4-919a-df87a26f80a4",
      "id": "CVE-2025-59419",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-59419 is fixed in version 4.1.92.Final-tuxcare.4 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.92.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:70a8ff68-a52f-5598-b809-e5650cc83385",
      "id": "CVE-2025-67735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-67735 is fixed in version 4.1.92.Final-tuxcare.4 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.92.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:912679ec-30e7-5ae6-8660-305ec5f51d95",
      "id": "CVE-2026-33870",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-33870 is fixed in version 4.1.92.Final-tuxcare.4 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.92.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d65e3016-1e51-5f67-b67a-19047f8c3a3e",
      "id": "CVE-2026-33871",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33871 affects version 4.1.92.Final-tuxcare.4 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.92.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6405475e-7666-57bd-ac52-8cc351f7a75d",
      "id": "CVE-2026-41417",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41417 affects version 4.1.92.Final-tuxcare.4 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.92.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d4926b74-d1ed-5ae1-84c1-4e487ffd148d",
      "id": "CVE-2026-42577",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42577 affects version 4.1.92.Final-tuxcare.4 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.92.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fa49a083-38ae-5731-bc52-23138c954887",
      "id": "CVE-2026-42578",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42578 affects version 4.1.92.Final-tuxcare.4 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.92.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:52e3bf39-bebb-5c8f-8397-ab43eac4b1cc",
      "id": "CVE-2026-42579",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42579 is fixed in version 4.1.92.Final-tuxcare.4 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.92.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ba7cd04a-75ed-5a10-9a4b-eb2b7ad47ac7",
      "id": "CVE-2026-42580",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42580 affects version 4.1.92.Final-tuxcare.4 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.92.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:570fb19e-89af-5f16-a3ae-9d29cd921bfa",
      "id": "CVE-2026-42581",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42581 is fixed in version 4.1.92.Final-tuxcare.4 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.92.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d34ec245-e204-5687-8dec-b1956558072d",
      "id": "CVE-2026-42583",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42583 affects version 4.1.92.Final-tuxcare.4 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.92.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d5bdbca8-828b-58e8-8178-4972394d8ebc",
      "id": "CVE-2026-42584",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42584 affects version 4.1.92.Final-tuxcare.4 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.92.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9ec3cc47-8fd2-58e6-85f8-e042f75791ff",
      "id": "CVE-2026-42585",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42585 affects version 4.1.92.Final-tuxcare.4 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.92.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ef24fd2a-0739-58a4-8fb3-f3afb29fa3a7",
      "id": "CVE-2026-42586",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42586 affects version 4.1.92.Final-tuxcare.4 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.92.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:854412bd-0c2a-558d-9e99-17f76a6cd564",
      "id": "CVE-2026-42587",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42587 affects version 4.1.92.Final-tuxcare.4 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.92.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0d240f69-7d30-563c-8fb4-ee1ba6b5709d",
      "id": "CVE-2026-44248",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44248 affects version 4.1.92.Final-tuxcare.4 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.92.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c3e302f0-7d2c-5463-857e-8d49c9ba8ccf",
      "id": "CVE-2026-44249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44249 affects version 4.1.92.Final-tuxcare.4 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.92.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9671836a-8715-55a5-8cd5-e9943b956b1e",
      "id": "CVE-2026-44250",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44250 affects version 4.1.92.Final-tuxcare.4 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.92.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:785c0d86-549c-55e5-994b-05af38a8557c",
      "id": "CVE-2026-44890",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.92.Final-tuxcare.4 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.92.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c5d79556-32e8-56b1-aa08-8de610c3966f",
      "id": "CVE-2026-44891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44891 affects version 4.1.92.Final-tuxcare.4 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.92.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9819d4a8-b0ca-5573-99ee-a5ecca61ce99",
      "id": "CVE-2026-44893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44893 affects version 4.1.92.Final-tuxcare.4 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.92.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:94e32696-efaf-5058-8889-b907e2c98f2f",
      "id": "CVE-2026-45416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45416 affects version 4.1.92.Final-tuxcare.4 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.92.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d97b1eba-3eb4-532c-a858-19f5391e9681",
      "id": "CVE-2026-45536",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45536 affects version 4.1.92.Final-tuxcare.4 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.92.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:89a16b33-3612-503e-b104-f06269ebfeb0",
      "id": "CVE-2026-45673",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45673 affects version 4.1.92.Final-tuxcare.4 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.92.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1a55d35b-f4f2-58cd-bed2-b022636bd58a",
      "id": "CVE-2026-45674",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45674 affects version 4.1.92.Final-tuxcare.4 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.92.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3bd6d7f6-769a-50eb-b55f-a7c3f0309a83",
      "id": "CVE-2026-46340",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-46340 is fixed in version 4.1.92.Final-tuxcare.4 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.92.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:42864c15-ff34-5408-91e0-93d804693041",
      "id": "CVE-2026-47244",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47244 affects version 4.1.92.Final-tuxcare.4 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.92.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b8385c6c-41f7-5a2b-b5a0-38180be044fd",
      "id": "CVE-2026-47691",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47691 affects version 4.1.92.Final-tuxcare.4 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.92.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b62fa776-3e5b-527d-857e-fc3a4f4bc04a",
      "id": "CVE-2026-48006",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48006 affects version 4.1.92.Final-tuxcare.4 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.92.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:65b8048f-eac6-5159-bc60-3c377223a3e2",
      "id": "CVE-2026-48043",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-48043 does not affect version 4.1.92.Final-tuxcare.4 of io.netty:netty-codec-smtp. not_affected \u2014 The target repository (Netty 4.1.92.Final-tuxcare.3) is not affected by CVE-2026-48043. The vulnerability exists in a newer architectural pattern (ChannelInboundHandlerAdapter-based decompression handling) that was introduced after version 4.1.92. The target uses an older architecture that processes HTTP/2 decompression directly in the onDataRead() method with existing try-finally protection."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.92.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bc866a5b-828c-55e6-80b8-383d94eecc3c",
      "id": "CVE-2026-48059",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48059 affects version 4.1.92.Final-tuxcare.4 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.92.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8462c8c9-6fa3-5834-83f1-aa4af5e6f81d",
      "id": "CVE-2026-50010",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50010 affects version 4.1.92.Final-tuxcare.4 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.92.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bfcbc44f-7591-5d3b-bf49-89032ac78cb0",
      "id": "CVE-2026-50011",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50011 affects version 4.1.92.Final-tuxcare.4 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.92.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e3033713-fd9a-5367-a37b-7b7496b782f3",
      "id": "CVE-2026-50020",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50020 affects version 4.1.92.Final-tuxcare.4 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.92.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7c1e73b2-b78a-5a93-964c-c2962432142e",
      "id": "CVE-2026-50560",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.92.Final-tuxcare.4 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.92.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b04779bc-3a19-5149-b029-41f25abcef47",
      "id": "CVE-2026-55831",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55831 affects version 4.1.92.Final-tuxcare.4 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.92.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7eb8872d-0298-5793-af8b-1005f4beea60",
      "id": "CVE-2026-55833",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55833 affects version 4.1.92.Final-tuxcare.4 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.92.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:da66caac-b59d-53d9-885d-b0547d917e1e",
      "id": "CVE-2026-55851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55851 affects version 4.1.92.Final-tuxcare.4 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.92.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:877cc3f6-cbba-5d7d-a0d1-290b79f22059",
      "id": "CVE-2026-56745",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56745 affects version 4.1.92.Final-tuxcare.4 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.92.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d27428a9-5688-57c1-a15e-1e79df224b94",
      "id": "CVE-2026-56746",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56746 affects version 4.1.92.Final-tuxcare.4 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.92.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e2658c91-268a-5466-9d96-084fa42b3d94",
      "id": "CVE-2026-56817",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56817 affects version 4.1.92.Final-tuxcare.4 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.92.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d3075b52-c18a-5a9d-97ee-2bfe54086507",
      "id": "CVE-2026-56820",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56820 affects version 4.1.92.Final-tuxcare.4 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.92.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6cbfbb27-a581-5308-8b58-45fd4aa49579",
      "id": "CVE-2026-56821",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56821 affects version 4.1.92.Final-tuxcare.4 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.92.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5b910479-91d1-5591-b48e-78291b441796",
      "id": "CVE-2026-56822",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56822 affects version 4.1.92.Final-tuxcare.4 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.92.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d0c3dd99-d635-5248-9905-3e7b1a277205",
      "id": "CVE-2026-59898",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59898 affects version 4.1.92.Final-tuxcare.4 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.92.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c617632e-999c-56a7-b201-b0f9be8ae8be",
      "id": "CVE-2026-59899",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59899 affects version 4.1.92.Final-tuxcare.4 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.92.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5e023c48-54be-5d91-9662-fb29b8d3295a",
      "id": "CVE-2026-59900",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59900 affects version 4.1.92.Final-tuxcare.4 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.92.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:305ae9fe-8c27-5c52-84b8-fe008d50e6a3",
      "id": "CVE-2026-59901",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59901 affects version 4.1.92.Final-tuxcare.4 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.92.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:42e27801-6c98-5e7c-9fc0-45267fe94dc3",
      "id": "CVE-2026-59919",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59919 affects version 4.1.92.Final-tuxcare.4 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.92.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8eb61d3d-6914-5a14-87e9-90c2dc5fd524",
      "id": "CVE-2026-59920",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59920 affects version 4.1.92.Final-tuxcare.4 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.92.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0ac891ea-d30a-5fe1-985b-6c6d12f37dea",
      "id": "CVE-2026-59921",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59921 affects version 4.1.92.Final-tuxcare.4 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.92.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:be9f3b98-fc8c-5603-aa1c-ab33c84056df",
      "id": "GHSA-mfg7-5gfp-c4w3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.92.Final-tuxcare.4 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.92.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0fff848e-7800-5877-8fdd-bed5ab603082",
      "id": "GHSA-v74w-7mr3-4qg3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.92.Final-tuxcare.4 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.92.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0a210981-5e68-5839-8e6a-8367d9b53ec3",
      "id": "GHSA-xpw8-rcwv-8f8p",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability GHSA-xpw8-rcwv-8f8p does not affect version 4.1.92.Final-tuxcare.4 of io.netty:netty-codec-smtp. The version is not vulnerable. [terminalized not_affected from patch_application_manual/not_vulnerable]"
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.92.Final-tuxcare.4"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.92.Final-tuxcare.4"
    }
  ]
}