{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:87262236-2de4-5ab3-989c-08c5e76a5622",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/io.netty/netty-codec@4.1.75.Final-tuxcare.2",
      "type": "library",
      "group": "io.netty",
      "name": "netty-codec",
      "version": "4.1.75.Final-tuxcare.2",
      "purl": "pkg:maven/io.netty/netty-codec@4.1.75.Final-tuxcare.2"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:7d444857-6058-5fb2-b52d-a15982c8291d",
      "id": "CVE-2022-24823",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-24823 is fixed in version 4.1.75.Final-tuxcare.2 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ad0887b4-5d94-5b7b-9fa9-e498a31a80d1",
      "id": "CVE-2022-41881",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-41881 is fixed in version 4.1.75.Final-tuxcare.2 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b04413ff-ddd1-50ed-9ba9-0cef611058d3",
      "id": "CVE-2022-41915",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-41915 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b23fc947-10c2-5aac-9288-278149687886",
      "id": "CVE-2023-34462",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-34462 is fixed in version 4.1.75.Final-tuxcare.2 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4e1f14a3-e085-529f-9249-87c6a6e2bb28",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-44487 is fixed in version 4.1.75.Final-tuxcare.2 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2ede258e-f4c0-5695-b126-453a1ffead5b",
      "id": "CVE-2023-4586",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2023-4586 is a false positive for io.netty:netty-codec 4.1.75.Final-tuxcare.2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:779d09ae-1cf5-5da4-95f4-bf841535bc9d",
      "id": "CVE-2024-29025",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-29025 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b967338f-3e03-5a0f-86a8-73a82c7f0ad7",
      "id": "CVE-2024-47535",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-47535 is fixed in version 4.1.75.Final-tuxcare.2 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5613ed67-a0b2-5b76-8f17-1b4a8ccfb3f2",
      "id": "CVE-2025-24970",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-24970 is fixed in version 4.1.75.Final-tuxcare.2 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9a03a788-a794-5e03-a712-103c352a7f19",
      "id": "CVE-2025-25193",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-25193 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9b7779b2-1df5-519c-ae49-3af38a5038de",
      "id": "CVE-2025-55163",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-55163 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6adecfc8-46d4-5b73-b008-579a8e8705a8",
      "id": "CVE-2025-58056",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-58056 is fixed in version 4.1.75.Final-tuxcare.2 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:63680202-2c37-5246-9206-01a96f5eb652",
      "id": "CVE-2025-58057",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58057 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b2236d2a-77bf-5388-9314-5ef93b62c584",
      "id": "CVE-2025-59419",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-59419 is fixed in version 4.1.75.Final-tuxcare.2 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8f69ea60-4ac1-5b59-9cff-fceab1f1996e",
      "id": "CVE-2025-67735",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-67735 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f9bff142-09a4-560c-8db7-cc26ca8dbab3",
      "id": "CVE-2026-33870",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33870 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ddd773fa-4588-53e9-8730-5248553f6636",
      "id": "CVE-2026-33871",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33871 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:40da67ad-4a16-552c-8ae3-f7acc77894fb",
      "id": "CVE-2026-41417",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41417 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6cdb6008-59c3-59b9-8467-86595ccc73c6",
      "id": "CVE-2026-42577",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42577 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a84ababc-2cac-5453-9cd8-40932b7fcd28",
      "id": "CVE-2026-42578",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42578 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bec72c8f-b9d5-51cf-9dab-bb87c9cd0a33",
      "id": "CVE-2026-42579",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42579 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:190bcfdc-bbf5-5f48-b775-765ae2c61e97",
      "id": "CVE-2026-42580",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42580 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0d790402-3013-5ee3-af7c-04ec24cf7f95",
      "id": "CVE-2026-42581",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42581 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:43367b4a-e2d0-5f41-b382-115efdf540ad",
      "id": "CVE-2026-42583",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42583 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:babf6ce3-5f22-55a8-9506-a5b5bce39059",
      "id": "CVE-2026-42584",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42584 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c83fb05a-8970-580c-bbf1-293106712504",
      "id": "CVE-2026-42585",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42585 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3061aad2-77e3-5ec2-9eda-689dda8ef497",
      "id": "CVE-2026-42586",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42586 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:62b2cd62-aaa7-5a27-95ce-bf168f140319",
      "id": "CVE-2026-42587",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42587 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4828289b-32f6-5abd-bd85-dbb50293bfb5",
      "id": "CVE-2026-44248",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44248 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8ca51b56-6c7e-5ba5-b09b-ad77b1423307",
      "id": "CVE-2026-44249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44249 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:aeb7cc48-ffb7-5bcd-901f-e956ba0d51d6",
      "id": "CVE-2026-44250",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44250 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b2468ab5-b3a6-5ce8-ace5-82ca5b89fd4b",
      "id": "CVE-2026-44890",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44890 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:979a7b6c-1d3d-5763-9d86-51e22353a4c7",
      "id": "CVE-2026-44891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44891 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e8b5b736-9916-52b1-a96b-5866887ec44f",
      "id": "CVE-2026-44893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44893 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:46ebae66-5aee-5c91-9664-f65c04b146c0",
      "id": "CVE-2026-45416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45416 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ea817587-7966-5209-979b-95c87491730e",
      "id": "CVE-2026-45536",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45536 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:90a3111b-cd74-5aac-b812-825adbebfe38",
      "id": "CVE-2026-45673",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45673 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dac82d11-e002-5180-9e90-5c4965caf048",
      "id": "CVE-2026-45674",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45674 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ac903242-8086-5632-829d-bdf76f247c9c",
      "id": "CVE-2026-46340",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-46340 is fixed in version 4.1.75.Final-tuxcare.2 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c66f11ac-2068-55a1-80d5-a06b5a830453",
      "id": "CVE-2026-47244",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47244 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:35e7acc4-ea24-557c-b9a7-216cfa721f2a",
      "id": "CVE-2026-47691",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47691 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:19e7b77b-2ff1-5f27-80b5-dfce7059bf33",
      "id": "CVE-2026-48006",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48006 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:87265d0d-fd95-5663-a847-7b5443044f45",
      "id": "CVE-2026-48043",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-48043 does not affect version 4.1.75.Final-tuxcare.2 of io.netty:netty-codec. already_fixed \u2014 The target repository (Netty 4.1.75.Final-tuxcare.1) already contains equivalent protection against CVE-2026-48043. While the upstream patch targets a newer architecture with a ChannelInboundHandlerAdapter tail handler (introduced in CVE-2025-58057 refactoring), the target's older architecture implements the same defensive pattern: a try-finally block ensuring ByteBuf.release() is called uncond..."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f0aa8d30-3293-5ad1-929d-9a88d235ab5d",
      "id": "CVE-2026-48059",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48059 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:312e9289-96fe-5e27-8e5d-02eeae2008cb",
      "id": "CVE-2026-50010",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50010 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:032792d2-0e02-5a3a-aacd-85895e1c642a",
      "id": "CVE-2026-50011",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50011 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dad20c17-9947-5e7b-962a-d30285dcd62d",
      "id": "CVE-2026-50020",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50020 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cc964426-9884-5c7a-862a-6664462d067c",
      "id": "CVE-2026-50560",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50560 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d5facb95-8328-55c6-bab8-38315707d6f4",
      "id": "CVE-2026-55831",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55831 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6e8e59ee-3495-5b07-b684-3f168afaf780",
      "id": "CVE-2026-55833",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55833 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b06d9f20-5214-50bf-a596-23fa8d952c8b",
      "id": "CVE-2026-55851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55851 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4d61934b-872c-5bde-acba-d794a790df0a",
      "id": "CVE-2026-56745",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56745 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0fb14b40-ab71-59c5-b4ac-1616b4daa323",
      "id": "CVE-2026-56746",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56746 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8b44332d-0d4b-5bdf-a78b-4b98e1c116e0",
      "id": "CVE-2026-56817",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56817 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0980fe55-8c95-5733-9aad-e9c9c93e4b38",
      "id": "CVE-2026-59898",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59898 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fca34cd3-2e76-5c65-bace-f9f0cf20df18",
      "id": "CVE-2026-59899",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59899 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c17e7a8e-88c6-59a6-a24a-24e5d699e95f",
      "id": "CVE-2026-59900",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59900 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c2d7c076-8461-5d68-940c-dd129a8cce09",
      "id": "CVE-2026-59901",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59901 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:33c14d00-588d-5b63-9c70-1bb5679382da",
      "id": "CVE-2026-59919",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59919 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:aee78ba7-e135-50b4-9e66-eed0d1f0afe1",
      "id": "CVE-2026-59920",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59920 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:732c001a-d42e-590d-b9d0-c0e248d7d85e",
      "id": "CVE-2026-59921",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59921 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d6d3226e-f48a-5b9e-b8b5-ee3f322181b2",
      "id": "GHSA-mfg7-5gfp-c4w3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d4e3078e-2914-5f3e-88f2-ee03bfcd55b3",
      "id": "GHSA-v74w-7mr3-4qg3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.75.Final-tuxcare.2 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.75.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a13da5ca-1bea-5ded-823e-6214ed41c305",
      "id": "GHSA-xpw8-rcwv-8f8p",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-xpw8-rcwv-8f8p is fixed in version 4.1.75.Final-tuxcare.2 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.75.Final-tuxcare.2"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.netty/netty-codec@4.1.75.Final-tuxcare.2"
    }
  ]
}