{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:609ee991-18bc-5d71-b0ec-dc1e2a030e9c",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/io.netty/netty-codec-xml@4.1.75.Final-tuxcare.2",
      "type": "library",
      "group": "io.netty",
      "name": "netty-codec-xml",
      "version": "4.1.75.Final-tuxcare.2",
      "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.75.Final-tuxcare.2"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:06d2f1f7-7fe5-5751-adf2-ab8b6a5ff6e9",
      "id": "CVE-2022-24823",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-24823 is fixed in version 4.1.75.Final-tuxcare.2 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:471073c9-1b18-559b-880f-c792c827cdff",
      "id": "CVE-2022-41881",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-41881 is fixed in version 4.1.75.Final-tuxcare.2 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3a357534-787c-5b92-9cda-f408b6dcaf2f",
      "id": "CVE-2022-41915",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-41915 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e05725bc-9a3f-575b-94db-96fee0aa6b9d",
      "id": "CVE-2023-34462",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-34462 is fixed in version 4.1.75.Final-tuxcare.2 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6a97b640-3f7d-525d-83ee-1a44a0981edb",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-44487 is fixed in version 4.1.75.Final-tuxcare.2 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d2e406c2-d261-51e7-ad64-e3377aa8a1bd",
      "id": "CVE-2023-4586",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2023-4586 is a false positive for io.netty:netty-codec-xml 4.1.75.Final-tuxcare.2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b1bf399a-563a-5798-8d2b-69e76126a275",
      "id": "CVE-2024-29025",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-29025 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9b53895c-e899-5324-8897-2c790713b0e6",
      "id": "CVE-2024-47535",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-47535 is fixed in version 4.1.75.Final-tuxcare.2 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5865186b-e93f-5d6b-8b04-c373d8c586fb",
      "id": "CVE-2025-24970",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-24970 is fixed in version 4.1.75.Final-tuxcare.2 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3aa5625c-0c78-52e3-8c69-b5ec384be02c",
      "id": "CVE-2025-25193",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-25193 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:375bad1e-8dc5-5379-8841-54295a5fbe03",
      "id": "CVE-2025-55163",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-55163 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:360a6285-dca2-5021-afaa-91abff953839",
      "id": "CVE-2025-58056",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-58056 is fixed in version 4.1.75.Final-tuxcare.2 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8b426bf5-3885-5f65-9819-4ec7e0be79e4",
      "id": "CVE-2025-58057",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58057 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e233e279-4ae1-5732-9535-ee4b798565db",
      "id": "CVE-2025-59419",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-59419 is fixed in version 4.1.75.Final-tuxcare.2 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a6be7929-7799-5d8a-8a62-2b603fe859e9",
      "id": "CVE-2025-67735",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-67735 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:81b64989-ab12-5f1c-a726-43e0e1a9e589",
      "id": "CVE-2026-33870",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33870 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a637f8d3-3d23-5e07-9501-e7819bdd3072",
      "id": "CVE-2026-33871",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33871 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2d6cf991-a407-5d30-b745-6304627a286c",
      "id": "CVE-2026-41417",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41417 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dceee1cf-a33e-593c-8757-a63152027253",
      "id": "CVE-2026-42577",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42577 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8811311a-1482-5190-a641-77652a43efa0",
      "id": "CVE-2026-42578",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42578 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:72aeb5ad-b692-5a61-bc30-8a23c65fffe2",
      "id": "CVE-2026-42579",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42579 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cdf8bef8-927b-50a9-914b-7a514800eae5",
      "id": "CVE-2026-42580",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42580 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:21e6a5f8-b682-553a-830c-61453f745578",
      "id": "CVE-2026-42581",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42581 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e7ff5730-88cf-5a08-b124-a853f5cf38b3",
      "id": "CVE-2026-42583",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42583 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:69fa2a3f-2a42-5f55-9afb-ee4855fe2bcb",
      "id": "CVE-2026-42584",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42584 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:654bc16d-4699-51f1-bf03-0aaf3ca1cd35",
      "id": "CVE-2026-42585",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42585 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0388fc61-4629-5766-b746-01583b8c091f",
      "id": "CVE-2026-42586",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42586 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:edd763de-6a35-5cc4-82c8-9adc8a47bd18",
      "id": "CVE-2026-42587",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42587 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:17809716-4dba-55d0-94e0-c0cafe457fdc",
      "id": "CVE-2026-44248",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44248 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c84e1df2-5338-5898-802e-f2f6d8dd6a6c",
      "id": "CVE-2026-44249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44249 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4cb658ba-8365-56ca-849b-1be82b325d5d",
      "id": "CVE-2026-44250",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44250 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1737db69-7eca-58cc-b4f1-45e32c3f9d1e",
      "id": "CVE-2026-44890",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44890 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c205cb2d-b49d-5880-a87d-ce1f5a14680b",
      "id": "CVE-2026-44891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44891 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9f6dbd5a-84d1-5a2a-8c30-c45972352a1f",
      "id": "CVE-2026-44893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44893 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:959528a3-a9ec-519b-a7cf-32d4cd181e09",
      "id": "CVE-2026-45416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45416 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:db1a70be-17ff-584d-a35a-d9b89f3cb9ec",
      "id": "CVE-2026-45536",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45536 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4d254abc-380e-5f14-a6f7-55d47aad063c",
      "id": "CVE-2026-45673",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45673 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4764cbd3-6106-5f14-9d27-e8381ecb8cfd",
      "id": "CVE-2026-45674",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45674 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d9dd3e89-a763-5134-b35f-cdcf1a82d694",
      "id": "CVE-2026-46340",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-46340 is fixed in version 4.1.75.Final-tuxcare.2 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a74cd347-4deb-5e40-b442-0a6d326cc846",
      "id": "CVE-2026-47244",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47244 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1672524e-8e37-58aa-823f-354bcc93f018",
      "id": "CVE-2026-47691",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47691 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:31806021-b520-511f-8e3d-8f825640cc79",
      "id": "CVE-2026-48006",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48006 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d0d879ea-bc35-5c48-9bda-ea8cb0c06e24",
      "id": "CVE-2026-48043",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-48043 does not affect version 4.1.75.Final-tuxcare.2 of io.netty:netty-codec-xml. already_fixed \u2014 The target repository (Netty 4.1.75.Final-tuxcare.1) already contains equivalent protection against CVE-2026-48043. While the upstream patch targets a newer architecture with a ChannelInboundHandlerAdapter tail handler (introduced in CVE-2025-58057 refactoring), the target's older architecture implements the same defensive pattern: a try-finally block ensuring ByteBuf.release() is called uncond..."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:683fabb4-1653-5835-9064-bcefd5f5c457",
      "id": "CVE-2026-48059",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48059 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:20a08680-245d-59dd-b751-de0ba030f2c5",
      "id": "CVE-2026-50010",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50010 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:83c25e5e-99de-5220-a381-bf525a920623",
      "id": "CVE-2026-50011",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50011 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ba086d97-0ce9-5703-89d0-82b872cc10ff",
      "id": "CVE-2026-50020",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50020 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:76267885-0275-527d-9c92-8ae3faecceb4",
      "id": "CVE-2026-50560",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50560 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b10e2cc5-60bc-54f1-9002-d60b6fac9397",
      "id": "CVE-2026-55831",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55831 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ea2ec617-b882-5739-8cff-09455a3feb9a",
      "id": "CVE-2026-55833",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55833 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:038ddd92-52c7-58bc-bd0d-29f6907165ae",
      "id": "CVE-2026-55851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55851 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:355b6271-7b5f-5157-ac29-2d671f9aa67b",
      "id": "CVE-2026-56745",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56745 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fc68c0da-7708-5174-9365-8e3aee5dfd62",
      "id": "CVE-2026-56746",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56746 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dd6edfed-c0ac-51ff-9144-16a02931cafc",
      "id": "CVE-2026-56817",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56817 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5c430c6b-33c4-512b-be28-6eaecec3d1e3",
      "id": "CVE-2026-59898",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59898 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7e6fdf69-72ff-56f8-af03-3175c294eebd",
      "id": "CVE-2026-59899",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59899 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:69d10e93-fe64-5ea8-83b2-b746533f74e9",
      "id": "CVE-2026-59900",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59900 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4bf7bc7c-65a2-5c07-ba2a-f565b275a83e",
      "id": "CVE-2026-59901",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59901 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:010a70ce-7cbc-56a2-8dc5-b72658aeb077",
      "id": "CVE-2026-59919",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59919 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e4241a21-6ebf-5982-bbc7-609cf529f3cd",
      "id": "CVE-2026-59920",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59920 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cb405aeb-64e7-533d-a64e-6d4ff3717485",
      "id": "CVE-2026-59921",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59921 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e638357b-8cf2-5e26-a6b2-4fb1db7663d8",
      "id": "GHSA-mfg7-5gfp-c4w3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0eae10c0-a01e-5e41-a703-f7088cb0e847",
      "id": "GHSA-v74w-7mr3-4qg3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e608172a-2644-5513-873e-486cca50eb0a",
      "id": "GHSA-xpw8-rcwv-8f8p",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-xpw8-rcwv-8f8p is fixed in version 4.1.75.Final-tuxcare.2 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.75.Final-tuxcare.2"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.75.Final-tuxcare.2"
    }
  ]
}