{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:a2aba70e-9e63-5664-b63e-8d6ba3440693",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/io.netty/netty-codec@4.1.112.Final-tuxcare.3",
      "type": "library",
      "group": "io.netty",
      "name": "netty-codec",
      "version": "4.1.112.Final-tuxcare.3",
      "purl": "pkg:maven/io.netty/netty-codec@4.1.112.Final-tuxcare.3"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:5aa151c3-bf37-51c5-9e1e-8ec57e1d7e5e",
      "id": "CVE-2024-47535",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-47535 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.112.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:38c62743-9b8d-5f32-b528-aefe90844869",
      "id": "CVE-2025-24970",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-24970 is fixed in version 4.1.112.Final-tuxcare.3 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.112.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:66ec5797-a462-5ba5-ab5b-423dabea7c27",
      "id": "CVE-2025-25193",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-25193 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.112.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a0b0aee8-2ae6-5224-afdd-cb3220e6f92e",
      "id": "CVE-2025-55163",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55163 is fixed in version 4.1.112.Final-tuxcare.3 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.112.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c93c8326-9f94-53ea-8478-570c75987bbf",
      "id": "CVE-2025-58056",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-58056 is fixed in version 4.1.112.Final-tuxcare.3 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.112.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d52052af-8c04-5041-86fd-eadc5eace9e3",
      "id": "CVE-2025-58057",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-58057 is fixed in version 4.1.112.Final-tuxcare.3 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.112.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5e01f28c-e140-594e-895b-858fc8110755",
      "id": "CVE-2025-59419",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-59419 is fixed in version 4.1.112.Final-tuxcare.3 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.112.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:64a0b1dd-40dc-5a91-9cdb-c9d1de55b3d9",
      "id": "CVE-2025-67735",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-67735 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.112.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5253767f-800b-5c5e-8a1f-195172e488be",
      "id": "CVE-2026-33870",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33870 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.112.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c832e827-5b02-5319-87e1-2ee70a8b5115",
      "id": "CVE-2026-33871",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-33871 is fixed in version 4.1.112.Final-tuxcare.3 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.112.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f551afcd-692b-537e-8e97-b4ce81984d16",
      "id": "CVE-2026-41417",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41417 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.112.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3b630a0f-f3bf-556e-97f5-ca324c0f973b",
      "id": "CVE-2026-42577",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42577 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.112.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3ac01c9e-6805-5c8b-8888-132ecc212c21",
      "id": "CVE-2026-42578",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42578 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.112.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4a5f9daf-bbb8-59ab-9429-ea4ffc2d1eed",
      "id": "CVE-2026-42579",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42579 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.112.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:52992332-5f47-594b-9bc5-b90cadcc1546",
      "id": "CVE-2026-42580",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42580 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.112.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7531f5a0-88c7-5759-9546-57e0fbf8bf9f",
      "id": "CVE-2026-42581",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42581 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.112.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:502aea69-ec9c-5f19-9063-034e8577a48f",
      "id": "CVE-2026-42583",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42583 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.112.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:32329f35-4c66-5742-ba9d-2d5f3fbc2dfc",
      "id": "CVE-2026-42584",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42584 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.112.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1e58490b-3bad-5657-bcb1-592d3e35ab87",
      "id": "CVE-2026-42585",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42585 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.112.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1e6f71a2-1d75-5177-ab71-b531432d8650",
      "id": "CVE-2026-42586",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42586 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.112.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6d27e123-3447-59b0-b22d-8e690af8d625",
      "id": "CVE-2026-42587",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42587 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.112.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:38925bd2-33b5-59d2-9422-ca84031e4e4f",
      "id": "CVE-2026-44248",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44248 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.112.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3372931c-dd46-5e4f-8a5b-82113959e9fe",
      "id": "CVE-2026-44249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44249 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.112.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b95029c1-bf1a-5ad7-b0dc-9f91a17d304d",
      "id": "CVE-2026-44250",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44250 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.112.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9d328685-66dd-52ca-96cd-c5a56b7fa889",
      "id": "CVE-2026-44890",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44890 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.112.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:480309be-b2c7-587f-86f6-1130a5f610d3",
      "id": "CVE-2026-44891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44891 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.112.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7429496e-8548-59df-a1e9-f6ec8350cfb7",
      "id": "CVE-2026-44893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44893 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.112.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:25c28742-d3b2-510a-9da8-ba7699dd0622",
      "id": "CVE-2026-45416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45416 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.112.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c1d9ce02-081b-5211-befe-480494a49f15",
      "id": "CVE-2026-45536",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45536 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.112.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:17a56b7a-0764-591f-a28d-51750232ac66",
      "id": "CVE-2026-45673",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45673 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.112.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:84cf8659-fd31-573f-a36a-70b36d83387f",
      "id": "CVE-2026-45674",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45674 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.112.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4f5ade56-fc55-5973-99e0-9b92f6ea1eb6",
      "id": "CVE-2026-46340",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-46340 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.112.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bd3c58ef-2f05-595a-b32a-d67a8678c27e",
      "id": "CVE-2026-47244",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47244 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.112.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:46d58896-2898-5d70-8b2d-1239d43387e7",
      "id": "CVE-2026-47691",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-47691 does not affect version 4.1.112.Final-tuxcare.3 of io.netty:netty-codec. Patches already applied: fb9fbe974b57430ee439636bf576c93a2759364f (already in target via b391226387d3 'Backport CVE-2026-45674 to 4.1.112.Final'); 6f19adf36863712f96b16d768d92f0c2f78cf315 (already in target via b391226387d3 'Backport CVE-2026-45674 to 4.1.112.Final')"
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.112.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f4f975c0-ff01-5d95-a10d-74ec6fe3da5c",
      "id": "CVE-2026-48006",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48006 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.112.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2ae8fb3e-2ce1-5b73-9d54-45778e1d53ae",
      "id": "CVE-2026-48043",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48043 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.112.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cde6f699-fbbc-5cb2-a002-2bf767eca29b",
      "id": "CVE-2026-48059",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48059 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.112.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:645673ef-bc37-5fa1-a3c4-754f9894105a",
      "id": "CVE-2026-50010",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50010 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.112.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a11dd5d2-0dce-5f4b-a42f-e8f6330fe349",
      "id": "CVE-2026-50011",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50011 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.112.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1645505b-74d3-5991-b60b-cd1526694ff9",
      "id": "CVE-2026-50020",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50020 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.112.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c124b1a6-8e3e-5c46-ad9c-2f07e2a519ef",
      "id": "CVE-2026-50560",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50560 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.112.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a60534e1-933d-51f9-bd28-19c4f6203899",
      "id": "CVE-2026-55831",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55831 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.112.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:30008cac-9012-50a2-8e78-04284ff3f11c",
      "id": "CVE-2026-55833",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55833 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.112.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b768c2a6-e460-5ce9-a503-1d982a74cf72",
      "id": "CVE-2026-55851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55851 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.112.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:edba28e7-e202-5189-8827-0cd40de9c56c",
      "id": "CVE-2026-56745",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56745 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.112.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:34778f47-e1ed-5e71-9595-0d2ef04f9b45",
      "id": "CVE-2026-56746",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56746 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.112.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:97ebeda5-7bd6-5f31-8e59-017b79c07486",
      "id": "CVE-2026-56817",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56817 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.112.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a50ad6a3-a229-54e9-97ad-352d69144570",
      "id": "CVE-2026-56820",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56820 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.112.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bbb7ba20-11b0-5734-be4f-831da799dd24",
      "id": "CVE-2026-56821",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56821 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.112.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6050ab97-db1b-591b-a628-0a8318c7cf13",
      "id": "CVE-2026-56822",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56822 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.112.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3ca32f72-2949-53f6-af83-91fbb377bdc6",
      "id": "CVE-2026-59898",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59898 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.112.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0c15acb5-9698-5670-8a23-17c2a0720485",
      "id": "CVE-2026-59899",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59899 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.112.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:752d6b9b-b5ae-5a45-8050-4c8d540311c8",
      "id": "CVE-2026-59900",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59900 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.112.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:eac919f1-5576-57a6-8147-7a1a274f2f24",
      "id": "CVE-2026-59901",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59901 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.112.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4cfffca8-ac56-552d-a021-57dac40c6fb8",
      "id": "CVE-2026-59919",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59919 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.112.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:86254257-e812-538a-8286-e49c4d8e7ccb",
      "id": "CVE-2026-59920",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59920 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.112.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7e8d1c84-dadd-5d8f-bffc-bb98cceeaf40",
      "id": "CVE-2026-59921",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59921 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.112.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:091b3f5a-e736-5121-89da-393f97cb3b5a",
      "id": "GHSA-mfg7-5gfp-c4w3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.112.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:590f6953-f623-5f48-919d-faad2d6a6b99",
      "id": "GHSA-v74w-7mr3-4qg3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.112.Final-tuxcare.3 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.112.Final-tuxcare.3"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.netty/netty-codec@4.1.112.Final-tuxcare.3"
    }
  ]
}