{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:4569b306-b4c0-5c09-8cf8-110a3d79881c",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/io.netty/netty-codec-xml@4.1.75.Final-tuxcare.3",
      "type": "library",
      "group": "io.netty",
      "name": "netty-codec-xml",
      "version": "4.1.75.Final-tuxcare.3",
      "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.75.Final-tuxcare.3"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:caf4c43e-053a-5fbf-80c5-31c2cbb4c082",
      "id": "CVE-2022-24823",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-24823 is fixed in version 4.1.75.Final-tuxcare.3 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6732c14a-cd83-5dcf-b053-039d8d5a7f1f",
      "id": "CVE-2022-41881",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-41881 is fixed in version 4.1.75.Final-tuxcare.3 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a331b483-4601-56a4-9101-6ee29d962ea0",
      "id": "CVE-2022-41915",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-41915 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5ca392c5-dc8e-5c3f-9f7d-6e1be0201753",
      "id": "CVE-2023-34462",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-34462 is fixed in version 4.1.75.Final-tuxcare.3 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b548516f-d040-5983-936a-e0dd29215044",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-44487 is fixed in version 4.1.75.Final-tuxcare.3 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4c7a04e8-a000-5e56-abb4-68eb998ca586",
      "id": "CVE-2023-4586",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2023-4586 is a false positive for io.netty:netty-codec-xml 4.1.75.Final-tuxcare.3."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:55f69182-4023-5464-8569-5b0294739adf",
      "id": "CVE-2024-29025",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-29025 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8f6466e8-eea4-5143-a7d1-d9149eedf329",
      "id": "CVE-2024-47535",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-47535 is fixed in version 4.1.75.Final-tuxcare.3 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bbe521a0-3f56-5ed0-945f-20f24b4a0973",
      "id": "CVE-2025-24970",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-24970 is fixed in version 4.1.75.Final-tuxcare.3 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a97e6421-c3ee-57e3-a923-d0923aef2809",
      "id": "CVE-2025-25193",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-25193 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3c3338d5-1135-5571-9089-1ca70e8e485c",
      "id": "CVE-2025-55163",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-55163 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ba8f5b16-f1bd-51ff-b7c5-305c6dadbaf5",
      "id": "CVE-2025-58056",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-58056 is fixed in version 4.1.75.Final-tuxcare.3 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8a1d58cd-fbbf-5540-af1e-07c665b1ee02",
      "id": "CVE-2025-58057",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58057 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8907adb5-b72b-5ca3-b5ef-082a46fc9cdb",
      "id": "CVE-2025-59419",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-59419 is fixed in version 4.1.75.Final-tuxcare.3 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fe4fed3c-c2ca-52f3-aaa8-6cbfb0a8a12a",
      "id": "CVE-2025-67735",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-67735 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b0236d4a-aa96-5dff-b629-90e4ce8909f6",
      "id": "CVE-2026-33870",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33870 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:800539fe-76cd-50ed-b235-8c1b38b5f7d4",
      "id": "CVE-2026-33871",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33871 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:eca53056-0590-53fd-8d53-e5ac9404d1ca",
      "id": "CVE-2026-41417",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41417 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c01507cd-2b7e-5ad4-bb7d-0bf7f1c598cc",
      "id": "CVE-2026-42577",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42577 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:25015986-b67c-5830-bc19-3842d4a7ab3d",
      "id": "CVE-2026-42578",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42578 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ac8a472e-9d2c-5ef3-a073-e70bddcb4d3b",
      "id": "CVE-2026-42579",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42579 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:919d6fdb-d9b9-570b-8e06-3cf6a2abbad5",
      "id": "CVE-2026-42580",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42580 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b1d5c109-4191-5b81-926a-8075023f4f81",
      "id": "CVE-2026-42581",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42581 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f5eb6297-19c7-501e-a29d-831d6ed7486b",
      "id": "CVE-2026-42583",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42583 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a9a376d8-249e-5bc2-8a79-3881e6ef3ea0",
      "id": "CVE-2026-42584",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42584 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:21709d0b-3a73-5aa0-9dec-afe15b0620b3",
      "id": "CVE-2026-42585",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42585 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2d5ae4b3-0bcb-503f-988f-d122c27b34a5",
      "id": "CVE-2026-42586",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42586 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5e3d4757-f107-5b67-9819-fc21e776f2df",
      "id": "CVE-2026-42587",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42587 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b51ab9ec-2faf-5411-a182-f21e07b94539",
      "id": "CVE-2026-44248",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44248 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:31ad988a-fe4a-5ed0-b22a-a758b407c94a",
      "id": "CVE-2026-44249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44249 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ba9df6e3-5192-5d9d-a72e-96022bd0f388",
      "id": "CVE-2026-44250",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44250 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:40330552-2ff2-5946-ba23-afab70be39e8",
      "id": "CVE-2026-44890",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.75.Final-tuxcare.3 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d87171e9-1cde-5744-a988-afc0a526cc51",
      "id": "CVE-2026-44891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44891 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ef14abef-dad4-515a-b0cf-8a43524b2755",
      "id": "CVE-2026-44893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44893 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6b25e94c-0e92-587a-8876-f4ffdbf0d452",
      "id": "CVE-2026-45416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45416 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:438181b9-daa1-5390-bebc-4551015dba26",
      "id": "CVE-2026-45536",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45536 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5334bae3-8eb4-50c9-a882-768a2feb03a4",
      "id": "CVE-2026-45673",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45673 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dfe1cba6-8ab7-55ca-82ab-168b40c0f317",
      "id": "CVE-2026-45674",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45674 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4fbfb558-8bdb-5633-aac7-624c200ca2b7",
      "id": "CVE-2026-46340",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-46340 is fixed in version 4.1.75.Final-tuxcare.3 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3610b80d-e0a6-50a3-8a85-39c82e265050",
      "id": "CVE-2026-47244",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47244 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:146e3eab-5910-58d0-a03f-f567c5465fcb",
      "id": "CVE-2026-47691",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47691 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:96a27754-0465-57dc-beec-d0ad36a841c8",
      "id": "CVE-2026-48006",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48006 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9581b743-1355-586e-8c4f-879e93afc039",
      "id": "CVE-2026-48043",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-48043 does not affect version 4.1.75.Final-tuxcare.3 of io.netty:netty-codec-xml. already_fixed \u2014 The target repository (Netty 4.1.75.Final-tuxcare.1) already contains equivalent protection against CVE-2026-48043. While the upstream patch targets a newer architecture with a ChannelInboundHandlerAdapter tail handler (introduced in CVE-2025-58057 refactoring), the target's older architecture implements the same defensive pattern: a try-finally block ensuring ByteBuf.release() is called uncond..."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8474e8bb-a491-5a7c-a6bf-5dceae000964",
      "id": "CVE-2026-48059",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48059 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:626ae1de-6015-5d82-9898-1e740bfba91c",
      "id": "CVE-2026-50010",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50010 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9aed5c8e-dfa9-53be-a475-339947c065ad",
      "id": "CVE-2026-50011",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50011 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:90569c0b-78f2-58f2-a737-f6b7544a091a",
      "id": "CVE-2026-50020",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50020 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a200b186-ebd9-5f33-802e-86103035b2d3",
      "id": "CVE-2026-50560",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.75.Final-tuxcare.3 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a190388c-783b-58b2-b026-5ebc2fb92368",
      "id": "CVE-2026-55831",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55831 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dc68824c-aac8-5af4-b28d-db28f7a6966a",
      "id": "CVE-2026-55833",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55833 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d8f69c85-3441-57ea-8b76-880ce6b1d153",
      "id": "CVE-2026-55851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55851 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c7595016-3fab-511f-8219-35de36d2d0d3",
      "id": "CVE-2026-56745",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56745 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7ea5cb2e-79d8-5655-8fb9-904aad90cf7c",
      "id": "CVE-2026-56746",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56746 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:65b73817-b97b-5e03-a99c-148b475b3a1f",
      "id": "CVE-2026-56817",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56817 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9be148d3-898e-58ec-9b93-efe83edf4aee",
      "id": "CVE-2026-59898",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59898 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:931365ff-c17d-564c-93d8-6d7116ac7e6d",
      "id": "CVE-2026-59899",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59899 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:87aedb40-9eef-5634-83c3-1a7127388f5c",
      "id": "CVE-2026-59900",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59900 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:07fab747-75cf-5a67-a7de-1392263aef75",
      "id": "CVE-2026-59901",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59901 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:51c1fbbb-a3d8-56ca-837b-241699cbcb8a",
      "id": "CVE-2026-59919",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59919 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b7dc9026-c717-54ac-942b-67295817c765",
      "id": "CVE-2026-59920",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59920 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0d675bcb-6f08-5673-82cd-20b731c4c227",
      "id": "CVE-2026-59921",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59921 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8b017951-f934-5f9e-b3ff-2818001ab3b3",
      "id": "GHSA-mfg7-5gfp-c4w3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f1bc73b8-4842-5a4a-ae9a-00a3c9c1e4ca",
      "id": "GHSA-v74w-7mr3-4qg3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.75.Final-tuxcare.3 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.75.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6b0e77e5-c6da-5da7-9012-d68ca4d14f90",
      "id": "GHSA-xpw8-rcwv-8f8p",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-xpw8-rcwv-8f8p is fixed in version 4.1.75.Final-tuxcare.3 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.75.Final-tuxcare.3"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.75.Final-tuxcare.3"
    }
  ]
}