{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:41f2434d-6b8f-5350-8cdc-f27d3c621cb6",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.2",
      "type": "library",
      "group": "io.netty",
      "name": "netty-example",
      "version": "4.1.63.Final-tuxcare.2",
      "purl": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.2"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:4d5222d1-b4d3-5a53-a9a9-5ab7613c148a",
      "id": "CVE-2021-37136",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-37136 is fixed in version 4.1.63.Final-tuxcare.2 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8d6b86c7-4d5a-5d24-bfc7-76909860745d",
      "id": "CVE-2021-37137",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-37137 is fixed in version 4.1.63.Final-tuxcare.2 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:48f63f91-468e-5e3c-98f3-aa95a7bc549a",
      "id": "CVE-2021-43797",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-43797 is fixed in version 4.1.63.Final-tuxcare.2 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b7dd3ee0-86c4-55df-bdaf-90ea5adb52a3",
      "id": "CVE-2022-24823",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-24823 is fixed in version 4.1.63.Final-tuxcare.2 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f6ce6b8b-03a5-5fae-a676-46c7835f3dcb",
      "id": "CVE-2022-41881",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-41881 is fixed in version 4.1.63.Final-tuxcare.2 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bd9ce7ff-6cbd-5862-9709-6f90f6995939",
      "id": "CVE-2022-41915",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-41915 is fixed in version 4.1.63.Final-tuxcare.2 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:44d3ab5b-7a0d-5358-a40d-daf037738292",
      "id": "CVE-2023-34462",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-34462 is fixed in version 4.1.63.Final-tuxcare.2 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0cb42306-20f6-55c6-ac05-bb890fa9dc1d",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-44487 is fixed in version 4.1.63.Final-tuxcare.2 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5ed6528e-07c6-56cf-a178-b56dc348e2f9",
      "id": "CVE-2023-4586",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2023-4586 is a false positive for io.netty:netty-example 4.1.63.Final-tuxcare.2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ff635a1a-f92f-5412-9e36-d95fa8759373",
      "id": "CVE-2024-29025",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-29025 is fixed in version 4.1.63.Final-tuxcare.2 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0b014fa4-12bc-5ae2-8be5-ffd1f8ba35fa",
      "id": "CVE-2024-47535",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-47535 is fixed in version 4.1.63.Final-tuxcare.2 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:306e378b-a9bc-5dad-9a89-02bfc5331ba1",
      "id": "CVE-2025-24970",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-24970 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:395adbbc-2d26-56da-8a80-c23a0c5e8198",
      "id": "CVE-2025-25193",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-25193 is fixed in version 4.1.63.Final-tuxcare.2 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c5870621-4aca-5a9a-b2db-ba5507e40bd0",
      "id": "CVE-2025-55163",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55163 is fixed in version 4.1.63.Final-tuxcare.2 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:72aa28e6-318d-5fe2-8150-b9e9ee694665",
      "id": "CVE-2025-58056",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58056 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7bf0cf06-d797-5aa8-89fc-cf7b99fd903b",
      "id": "CVE-2025-58057",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-58057 is fixed in version 4.1.63.Final-tuxcare.2 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6e16937d-d52d-5c73-a668-240799e1e5cc",
      "id": "CVE-2025-59419",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-59419 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e53c18c3-ef0e-5992-a490-8d694f252184",
      "id": "CVE-2025-67735",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-67735 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c3e5d75c-9155-565d-8967-d45cb5e14fd8",
      "id": "CVE-2026-33870",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33870 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fced6e5a-badd-5084-824e-6f0a13e5cbac",
      "id": "CVE-2026-33871",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33871 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:079c42cd-5d25-5f08-a2c8-c8d44ac5af9c",
      "id": "CVE-2026-41417",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41417 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ac055da2-18ca-59b3-bc20-cdff2818c000",
      "id": "CVE-2026-42577",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42577 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:971096d3-75dd-5f9f-9b47-3827d917ae6e",
      "id": "CVE-2026-42578",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42578 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4648c9b1-9ade-55f9-ba46-31a86a1bbee9",
      "id": "CVE-2026-42579",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42579 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d090a61d-4788-5d30-a533-343024c28c6f",
      "id": "CVE-2026-42580",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42580 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c0d4c119-9209-566d-9b20-0da4c2a493ea",
      "id": "CVE-2026-42581",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42581 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:78204aec-b6c8-57f4-beb9-3db65d90df4e",
      "id": "CVE-2026-42583",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42583 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:22a1789f-0261-5fe5-9896-3aefb71e2694",
      "id": "CVE-2026-42584",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42584 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:90aa8afe-e79c-5ba0-ad3a-d43e8d9b0c8b",
      "id": "CVE-2026-42585",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42585 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5ce61442-25d0-5498-bf68-a748b9c94b12",
      "id": "CVE-2026-42586",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42586 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2ed876f7-ec8c-557b-9636-8e3becaddd34",
      "id": "CVE-2026-42587",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42587 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bc6da677-3093-5f0b-b606-b5efebc0d22e",
      "id": "CVE-2026-44248",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44248 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fd4af267-ccc2-5287-9e62-ec5ccec9af62",
      "id": "CVE-2026-44249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44249 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:38036450-28e4-5651-9273-3fc4248e5a27",
      "id": "CVE-2026-44250",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44250 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:68d64391-a18d-5161-9bd7-c1d60795eb59",
      "id": "CVE-2026-44890",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44890 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c0dde74c-645c-5937-9e32-ddc1b21f9d10",
      "id": "CVE-2026-44891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44891 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:91ae5154-a75d-5e66-9a49-55f190b683f0",
      "id": "CVE-2026-44893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44893 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9c639c82-5b18-5249-91b8-574796442546",
      "id": "CVE-2026-45416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45416 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d4d69d9b-d79b-58dc-a4f0-6dc962459069",
      "id": "CVE-2026-45536",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45536 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8d302047-6b3b-5044-9bf8-9245551ed7c5",
      "id": "CVE-2026-45673",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45673 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:09275ec3-7819-55c9-aab3-8c9455497df9",
      "id": "CVE-2026-45674",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45674 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bd18e691-5847-5023-9921-bdf53314e187",
      "id": "CVE-2026-46340",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-46340 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9a75d69b-1517-55dc-8344-c394ed02f5d7",
      "id": "CVE-2026-47244",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47244 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bef27036-3dec-55d0-9b10-fde46c05339f",
      "id": "CVE-2026-47691",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47691 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0109c72d-e198-5857-8eb4-b6c3a9268799",
      "id": "CVE-2026-48006",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48006 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2529c828-1358-583d-8e4f-82ebc7c77eaa",
      "id": "CVE-2026-48043",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48043 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3b70ccbd-bd9c-5b83-9111-82aef6c48d7c",
      "id": "CVE-2026-48059",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48059 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bdff4cea-93df-5b38-9095-fbbeaadeae60",
      "id": "CVE-2026-50010",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50010 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7174635c-de4f-5d83-9ca1-5bca513dd76a",
      "id": "CVE-2026-50011",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50011 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3397b5e2-2a3e-5f5e-8e6b-77ba9a1e5fa2",
      "id": "CVE-2026-50020",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50020 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fa6ef2bf-635a-5b78-bd84-e7e3bdf6ae7e",
      "id": "CVE-2026-50560",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50560 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f0c5141a-0375-5440-beac-72ec06114b9e",
      "id": "CVE-2026-55831",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55831 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d90a12a3-2c59-5cdf-bfe2-578ea047a2f4",
      "id": "CVE-2026-55833",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55833 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f72c1d6b-b702-5d23-9f9c-3e50a3b46de1",
      "id": "CVE-2026-55851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55851 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:571e7f52-2b0d-5057-96c7-54a088356a20",
      "id": "CVE-2026-56745",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56745 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:97a57249-a6d2-5bf2-8d3c-7e9e1e5aa36d",
      "id": "CVE-2026-56746",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56746 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c6a10b4c-cc00-5b0c-b067-cecbea40d8ca",
      "id": "CVE-2026-56817",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-56817 does not affect version 4.1.63.Final-tuxcare.2 of io.netty:netty-example. not_affected \u2014 The Netty codec-xml module contains XmlDecoder, which instantiates an Aalto XML parser without security configuration (line 38: new InputFactoryImpl() with no XXE protection). However, this is a library component that Netty itself does not use in its own production code. The vulnerability only manifests when downstream applications explicitly add XmlDecoder to their Netty channel pipelines. Per..."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:938c46ec-5ee5-5140-b89b-31ad177ca5e4",
      "id": "CVE-2026-59898",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59898 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:591db6a8-8bd5-5009-b5a5-20bb3330ecf7",
      "id": "CVE-2026-59899",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59899 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8e4bd644-e0f9-5004-96a8-28ab638f556b",
      "id": "CVE-2026-59900",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59900 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1b0ccd89-fa67-5615-b539-7bbdef845451",
      "id": "CVE-2026-59901",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59901 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9f3d4162-d79f-5046-80e9-825b26882761",
      "id": "CVE-2026-59919",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59919 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:516fd797-3415-5a7d-86eb-25c17e062b63",
      "id": "CVE-2026-59920",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59920 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4febda5e-7ad7-5117-ba6a-b85761ec014a",
      "id": "CVE-2026-59921",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59921 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1b9fe73e-48ac-5e75-8b55-d490a9fde318",
      "id": "GHSA-mfg7-5gfp-c4w3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dad8dd47-5e62-567e-93c5-f5d7bd36c8ed",
      "id": "GHSA-v74w-7mr3-4qg3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:14c2a7de-f32d-53fa-847a-1c306b0f784f",
      "id": "GHSA-xpw8-rcwv-8f8p",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-xpw8-rcwv-8f8p affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.2"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.2"
    }
  ]
}