{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:f896c5fc-3ad6-5492-b78c-178216f39c17",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/io.netty/netty-dev-tools@4.1.73.Final-tuxcare.2",
      "type": "library",
      "group": "io.netty",
      "name": "netty-dev-tools",
      "version": "4.1.73.Final-tuxcare.2",
      "purl": "pkg:maven/io.netty/netty-dev-tools@4.1.73.Final-tuxcare.2"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:2a2fad0f-fb9f-5d55-a09a-48c74b77dc1c",
      "id": "CVE-2022-24823",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-24823 is fixed in version 4.1.73.Final-tuxcare.2 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0074602b-a7f5-5d31-ba96-762302d28eb6",
      "id": "CVE-2022-41881",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-41881 is fixed in version 4.1.73.Final-tuxcare.2 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:74568879-edbc-5f9c-bbde-9dfff6e8dddf",
      "id": "CVE-2022-41915",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-41915 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f7848bff-4359-5742-9f47-37f9f32124ac",
      "id": "CVE-2023-34462",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-34462 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6d4d7768-7d49-510f-bf62-80bcee0cad29",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-44487 is fixed in version 4.1.73.Final-tuxcare.2 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6f01152d-d757-5090-8e8e-ef3393c2890b",
      "id": "CVE-2023-4586",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2023-4586 is a false positive for io.netty:netty-dev-tools 4.1.73.Final-tuxcare.2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1a570fdc-efa6-5433-8cf5-c36d4916fd0b",
      "id": "CVE-2024-29025",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-29025 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c75baeff-ac09-598d-a956-1f5c3df071e3",
      "id": "CVE-2024-47535",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-47535 is fixed in version 4.1.73.Final-tuxcare.2 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cf2c5b4e-c321-5552-8a38-1502fcf4f296",
      "id": "CVE-2025-24970",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-24970 is fixed in version 4.1.73.Final-tuxcare.2 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:61d42e89-a41f-5681-9730-8d5386656324",
      "id": "CVE-2025-25193",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-25193 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:604c91be-9a51-5d2f-aec7-4d58eb688aaa",
      "id": "CVE-2025-55163",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-55163 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f63da674-a053-5ac4-9bf2-6573ddee216a",
      "id": "CVE-2025-58056",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58056 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:eee366af-e239-5239-a5a8-8092815e0a60",
      "id": "CVE-2025-58057",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58057 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ad4d5e3f-7e69-5d44-b6ab-64adf0a27a0f",
      "id": "CVE-2025-59419",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-59419 is fixed in version 4.1.73.Final-tuxcare.2 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d97ec665-0572-51a6-b717-3608212c62bb",
      "id": "CVE-2025-67735",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-67735 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b52e8ba6-42f1-53e1-bc6c-a48531892abf",
      "id": "CVE-2026-33870",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33870 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5d8708fd-aae9-5e0b-ae61-9853f93023dc",
      "id": "CVE-2026-33871",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33871 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f78d9367-548e-505e-b5bc-bb5eee8e1553",
      "id": "CVE-2026-41417",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41417 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c2782643-86c4-5aea-8a9e-1836a765cdd7",
      "id": "CVE-2026-42577",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42577 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c83ac0a1-1074-534e-908a-a30fd3812f7c",
      "id": "CVE-2026-42578",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42578 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f67e83b9-8bce-5fda-85c5-4ac331e1c42c",
      "id": "CVE-2026-42579",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42579 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:92a7eedc-a9e2-5cb9-9501-ae92d3bbf73b",
      "id": "CVE-2026-42580",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42580 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2ee1f69b-3ec9-5887-b9f4-1fb35a149372",
      "id": "CVE-2026-42581",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42581 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2e64e7fa-d533-5a94-816e-83358d5a0240",
      "id": "CVE-2026-42583",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42583 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2a79b73c-b838-591f-b6d2-aaff13b72d00",
      "id": "CVE-2026-42584",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42584 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:223c7cf6-8d54-58e7-80f9-56e1487f6e38",
      "id": "CVE-2026-42585",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42585 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:486ce334-12e0-5d52-ba01-085821fe9d46",
      "id": "CVE-2026-42586",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42586 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:46d5209e-a3ad-5280-aff6-6c7bded24027",
      "id": "CVE-2026-42587",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42587 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7f9f58f0-1480-558f-9f03-2e293477a532",
      "id": "CVE-2026-44248",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44248 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1cce52a5-2b83-53df-b4e9-dca5f8edfd2b",
      "id": "CVE-2026-44249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44249 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9df06020-def9-5951-a2a4-4c3a71dc293b",
      "id": "CVE-2026-44250",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44250 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b71ce578-5f75-5a16-99a4-e4aec60d6ddb",
      "id": "CVE-2026-44890",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.73.Final-tuxcare.2 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3d0b8ca5-2244-5b8b-b695-37b8715ef04b",
      "id": "CVE-2026-44891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44891 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1debf99e-ab6b-5c22-a196-a7d4616f6e11",
      "id": "CVE-2026-44893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44893 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7b5058b2-00e2-503c-bf16-fac814444830",
      "id": "CVE-2026-45416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45416 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8fbe9ecd-5514-5f9d-a956-1aec570efb84",
      "id": "CVE-2026-45536",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45536 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:882b97cf-a68f-595a-959c-58823430b012",
      "id": "CVE-2026-45673",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45673 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d6d19229-b066-5a39-be24-d01da225d6b4",
      "id": "CVE-2026-45674",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45674 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d917eb15-93ec-5d91-8c62-99ce85a4194d",
      "id": "CVE-2026-46340",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-46340 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6cf31c70-d0fc-54f8-99cc-429ec572f8cc",
      "id": "CVE-2026-47244",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47244 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cef6b97a-93e6-51ed-a003-243f1850c42b",
      "id": "CVE-2026-47691",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47691 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:05b4e0ea-57ec-50a2-b67d-1c7efab1df29",
      "id": "CVE-2026-48006",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48006 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3a001a21-c6f1-53eb-8072-40443777b387",
      "id": "CVE-2026-48043",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-48043 does not affect version 4.1.73.Final-tuxcare.2 of io.netty:netty-dev-tools. not_affected \u2014 Version 4.1.73 is not affected by CVE-2026-48043. The target uses a loop-based architecture with try-finally protection (introduced in 2016) that prevents the buffer leak described in the CVE. The vulnerable ChannelInboundHandlerAdapter pattern that the upstream patch fixes does not exist in this version."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:93f55e05-0e05-5921-90f8-b8a2d38f9997",
      "id": "CVE-2026-48059",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48059 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bc531d83-4bdf-569a-b8c6-88ea420f80a7",
      "id": "CVE-2026-50010",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50010 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:93c04f57-7d99-5fb6-a674-f310f7b0e612",
      "id": "CVE-2026-50011",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50011 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c0455182-329b-593f-af6f-a7f51a0de214",
      "id": "CVE-2026-50020",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50020 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d48b63b8-bf21-5db9-8224-06f9a0a85d45",
      "id": "CVE-2026-50560",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.73.Final-tuxcare.2 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:765b3997-56ad-5528-9c16-b709405f9c96",
      "id": "CVE-2026-55831",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55831 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:281e5897-2302-5b7f-8ce8-aa8c0e6ad74c",
      "id": "CVE-2026-55833",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55833 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:88ad0a3b-004c-5a39-bfb7-d4cf4900cafb",
      "id": "CVE-2026-55851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55851 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:585650c0-f51d-5109-b04d-832e29387537",
      "id": "CVE-2026-56745",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56745 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:08ecf674-39f5-5560-ad41-22df200a8c2c",
      "id": "CVE-2026-56746",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56746 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a9a1429a-b55c-5130-9d89-8c943de19897",
      "id": "CVE-2026-56817",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56817 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fc9deb3b-74a9-5565-aea8-d1f7ce6e58e0",
      "id": "CVE-2026-59898",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59898 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:da4b6eb2-3865-5efc-bbf8-e52b14d2bfc4",
      "id": "CVE-2026-59899",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59899 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a78f8d3c-eb6f-5c19-9e16-6be404eafa83",
      "id": "CVE-2026-59900",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59900 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a1a2fe8c-d968-56b7-bb2d-243b995c916e",
      "id": "CVE-2026-59901",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59901 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7dc6befe-04b1-5d94-86c3-f64f8a1b1a2f",
      "id": "CVE-2026-59919",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59919 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5d548a02-af42-592c-b36c-158ff6f5c391",
      "id": "CVE-2026-59920",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59920 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:70292201-e878-56cf-9651-f0c06710b033",
      "id": "CVE-2026-59921",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59921 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:77679953-bfe6-575b-92bf-a3f44b97b985",
      "id": "GHSA-mfg7-5gfp-c4w3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6108f8b2-f8ff-5c54-bf77-6fd128845bb0",
      "id": "GHSA-v74w-7mr3-4qg3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.73.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7c05b090-c4ab-51bb-944f-b86c6b601a7a",
      "id": "GHSA-xpw8-rcwv-8f8p",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-xpw8-rcwv-8f8p affects version 4.1.73.Final-tuxcare.2 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.73.Final-tuxcare.2"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.73.Final-tuxcare.2"
    }
  ]
}