{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:0b1106a7-008a-565a-942b-423c8244a3c7",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/io.netty/netty-codec@4.1.73.Final-tuxcare.2",
      "type": "library",
      "group": "io.netty",
      "name": "netty-codec",
      "version": "4.1.73.Final-tuxcare.2",
      "purl": "pkg:maven/io.netty/netty-codec@4.1.73.Final-tuxcare.2"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:971cba83-31e4-5382-8cc6-f53ab81e1d58",
      "id": "CVE-2022-24823",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-24823 is fixed in version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b6718e07-cb14-5e62-9444-3408a0aed360",
      "id": "CVE-2022-41881",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-41881 is fixed in version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bc64c12c-ecec-567e-bd61-82edc06d55f0",
      "id": "CVE-2022-41915",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-41915 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:28e02589-df04-51e5-ab73-d2e87cb39688",
      "id": "CVE-2023-34462",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-34462 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a7e0f0f8-672f-5f40-bd66-fb6372f85f2b",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-44487 is fixed in version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:edfd0768-382f-5a56-b800-346f04297ee9",
      "id": "CVE-2023-4586",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2023-4586 is a false positive for io.netty:netty-codec 4.1.73.Final-tuxcare.2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d7447ec4-35c2-5d43-bfed-275d64d330e9",
      "id": "CVE-2024-29025",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-29025 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c62854a4-18f2-5f31-b753-f28ad42ecc36",
      "id": "CVE-2024-47535",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-47535 is fixed in version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:128c530f-316a-521f-a033-f60be7353ad9",
      "id": "CVE-2025-24970",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-24970 is fixed in version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a1ce7653-1318-53c2-a673-e6e762b8c3c8",
      "id": "CVE-2025-25193",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-25193 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0812da59-14d3-5f59-85bf-e1a0b67fce03",
      "id": "CVE-2025-55163",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-55163 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b6765498-6d8f-5d18-97ab-9b597b198802",
      "id": "CVE-2025-58056",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58056 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a20e7672-608a-52dd-87bb-a0fe4b7ac94d",
      "id": "CVE-2025-58057",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58057 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:eb808841-93e6-5e30-a7fe-3b5d74e9e706",
      "id": "CVE-2025-59419",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-59419 is fixed in version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:183ce433-0be2-52f7-bbce-a13693cf33f3",
      "id": "CVE-2025-67735",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-67735 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:25bfe888-a399-50a9-993a-1e65a1d02fa7",
      "id": "CVE-2026-33870",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33870 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:acb0feeb-7e1e-57cf-b4e9-bfdf7779f306",
      "id": "CVE-2026-33871",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33871 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1b21c083-37cc-50a8-a0d2-700b868eb783",
      "id": "CVE-2026-41417",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41417 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b6d8d137-c6e3-5692-b1ae-17f93fe137e5",
      "id": "CVE-2026-42577",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42577 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cfcbbb2b-6bd5-51b0-90c8-37f648e31cef",
      "id": "CVE-2026-42578",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42578 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:651532ea-0200-5906-b434-add9d444e360",
      "id": "CVE-2026-42579",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42579 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c70c962d-b769-54eb-89a6-1a6b14b8d534",
      "id": "CVE-2026-42580",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42580 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6e61f9a6-a7f7-5b6c-9f35-cca0190dab1a",
      "id": "CVE-2026-42581",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42581 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5cfce837-0aee-54a2-9cc9-f9c900ab8712",
      "id": "CVE-2026-42583",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42583 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:57802c62-0da4-5834-880b-27b06302eb6e",
      "id": "CVE-2026-42584",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42584 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bb0d2536-7df4-53fe-b352-b10e9b6de02f",
      "id": "CVE-2026-42585",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42585 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ef7784ee-0e7d-53e7-a0a2-466cca79425f",
      "id": "CVE-2026-42586",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42586 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:189d17dd-41a6-50a1-bc9c-6dff9631188f",
      "id": "CVE-2026-42587",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42587 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1a5152ad-c50f-5b85-979e-57efc7ab5d03",
      "id": "CVE-2026-44248",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44248 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a52d1101-cd17-5725-aa11-b57e839cdf65",
      "id": "CVE-2026-44249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44249 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8f219405-2067-508c-a616-4de4257dbbfa",
      "id": "CVE-2026-44250",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44250 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:12e83c28-e5f9-554b-b1dc-0fd4d6d36d19",
      "id": "CVE-2026-44890",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bfdce8ba-432d-5c22-af83-3c3513ed86e2",
      "id": "CVE-2026-44891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44891 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c84338b5-1025-5f90-8c04-f4c7210cfd4a",
      "id": "CVE-2026-44893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44893 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a947fe51-dedb-54cb-9629-82bcdc622b34",
      "id": "CVE-2026-45416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45416 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c5cd38e7-fa54-5959-b0b7-e8b2f0469b56",
      "id": "CVE-2026-45536",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45536 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1bf27f64-db7a-5ad2-8d4b-ced3c8e8bbed",
      "id": "CVE-2026-45673",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45673 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9a411b5c-ed4e-57a0-8a22-b63b0cf3610c",
      "id": "CVE-2026-45674",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45674 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c52c92da-e231-5661-8a4d-e691f4ad548e",
      "id": "CVE-2026-46340",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-46340 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1f7824c1-e234-5966-83ba-109e89f6d980",
      "id": "CVE-2026-47244",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47244 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d1e80cb5-b90f-552c-83b5-4e3a823cd99e",
      "id": "CVE-2026-47691",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47691 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fa952397-2d1d-5ba6-8a1f-f38e365909fb",
      "id": "CVE-2026-48006",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48006 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:43c57801-b987-53b9-8dfb-e8b3c4701749",
      "id": "CVE-2026-48043",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-48043 does not affect version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec. not_affected \u2014 Version 4.1.73 is not affected by CVE-2026-48043. The target uses a loop-based architecture with try-finally protection (introduced in 2016) that prevents the buffer leak described in the CVE. The vulnerable ChannelInboundHandlerAdapter pattern that the upstream patch fixes does not exist in this version."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:87181e6d-6259-5ae9-9deb-e9a25f90404a",
      "id": "CVE-2026-48059",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48059 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b6ac7e51-c49b-5e5a-9e74-2e64ff88f38d",
      "id": "CVE-2026-50010",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50010 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:be73f14c-c384-5637-9036-b5c0ba6407f7",
      "id": "CVE-2026-50011",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50011 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e90bb815-db9c-5bcd-8cc4-af73868ad4b3",
      "id": "CVE-2026-50020",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50020 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6927ca0b-bc12-5d8f-b9e2-60dadc149388",
      "id": "CVE-2026-50560",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4e0e9e13-aa1c-56e4-8a92-040ce6896d9d",
      "id": "CVE-2026-55831",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55831 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d2cc3e97-1785-5f33-bfff-8eda8e80fd4b",
      "id": "CVE-2026-55833",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55833 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6a76ab0a-7b5b-5a65-8b0f-0a86f89deb92",
      "id": "CVE-2026-55851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55851 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0b5a0efc-4b2c-501f-acb2-649ea28d3e97",
      "id": "CVE-2026-56745",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56745 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a2e0ab58-4bf0-5dbf-b741-325ea1e3168b",
      "id": "CVE-2026-56746",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56746 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cc1596a2-7e43-5ea4-81a2-c7ff3e1d5fd7",
      "id": "CVE-2026-56817",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56817 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cd535c5a-1b34-5d48-8bf7-6ff726c709b1",
      "id": "CVE-2026-59898",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59898 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f0d1537a-7066-5897-83bd-32f5870f9880",
      "id": "CVE-2026-59899",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59899 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:64960961-823e-5327-a0ef-888adfca1a00",
      "id": "CVE-2026-59900",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59900 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d64530dc-94f4-5049-8d6e-ed0951bfad8e",
      "id": "CVE-2026-59901",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59901 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:813294aa-823f-51d1-87b6-e8754757e2a9",
      "id": "CVE-2026-59919",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59919 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4cb76ca3-6069-57d4-ab03-a9268ccda175",
      "id": "CVE-2026-59920",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59920 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:98d9b7fb-0bc0-5e83-9e6a-c013135af4b2",
      "id": "CVE-2026-59921",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59921 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6c38ce6f-e04b-5a9d-b59e-9e1e1455c24e",
      "id": "GHSA-mfg7-5gfp-c4w3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:14f660ee-90a0-5bdb-9e49-956eabe9080b",
      "id": "GHSA-v74w-7mr3-4qg3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a7a54dca-05e1-53a6-8ef3-2217d8aff071",
      "id": "GHSA-xpw8-rcwv-8f8p",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-xpw8-rcwv-8f8p affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.73.Final-tuxcare.2"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.netty/netty-codec@4.1.73.Final-tuxcare.2"
    }
  ]
}