{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:03954b33-3c10-5197-a865-91db76eff789",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.3",
      "type": "library",
      "group": "io.netty",
      "name": "netty-example",
      "version": "4.1.63.Final-tuxcare.3",
      "purl": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.3"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:a1c1b4ab-a785-56fd-aadc-bc8789029d73",
      "id": "CVE-2021-37136",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-37136 is fixed in version 4.1.63.Final-tuxcare.3 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:38b339d2-6e49-5b30-bfa0-8d8bbfa7df31",
      "id": "CVE-2021-37137",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-37137 is fixed in version 4.1.63.Final-tuxcare.3 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:820dcb90-9af0-556a-9eaa-7426df061e4b",
      "id": "CVE-2021-43797",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-43797 is fixed in version 4.1.63.Final-tuxcare.3 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:368f419a-8925-51e6-8fe7-ffe0e9a837b6",
      "id": "CVE-2022-24823",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-24823 is fixed in version 4.1.63.Final-tuxcare.3 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e7e5226a-2416-5dca-ac8d-d4ce7c65a24e",
      "id": "CVE-2022-41881",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-41881 is fixed in version 4.1.63.Final-tuxcare.3 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:eae87a70-3397-52e4-90ec-55f8c7c483fc",
      "id": "CVE-2022-41915",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-41915 is fixed in version 4.1.63.Final-tuxcare.3 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:85ed1570-43e4-538c-b5d5-51d3398437f8",
      "id": "CVE-2023-34462",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-34462 is fixed in version 4.1.63.Final-tuxcare.3 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:85d630a6-e67f-558e-8eb1-efc0bb57b8ba",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-44487 is fixed in version 4.1.63.Final-tuxcare.3 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8b69726e-8ae4-5cbd-9076-c5b6f711c076",
      "id": "CVE-2023-4586",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2023-4586 is a false positive for io.netty:netty-example 4.1.63.Final-tuxcare.3."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:86a5c4af-73a4-51af-a544-14d391adcfe1",
      "id": "CVE-2024-29025",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-29025 is fixed in version 4.1.63.Final-tuxcare.3 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c2e40021-093e-574b-b92f-979e372a0d4e",
      "id": "CVE-2024-47535",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-47535 is fixed in version 4.1.63.Final-tuxcare.3 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3908cd98-79b7-525c-bdf0-0caffefa573b",
      "id": "CVE-2025-24970",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-24970 is fixed in version 4.1.63.Final-tuxcare.3 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:863af331-838e-5f81-bde5-3bda4bf02c91",
      "id": "CVE-2025-25193",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-25193 is fixed in version 4.1.63.Final-tuxcare.3 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:da1490e8-5b71-5b57-8ac6-f168db8dcfbb",
      "id": "CVE-2025-55163",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55163 is fixed in version 4.1.63.Final-tuxcare.3 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:16164f94-45d0-5f90-9799-a8c5d0fffba1",
      "id": "CVE-2025-58056",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58056 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:60655d3f-eb27-5db9-9da4-39abc8e47fed",
      "id": "CVE-2025-58057",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-58057 is fixed in version 4.1.63.Final-tuxcare.3 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6271c252-259b-5982-b3a7-eb1474ade171",
      "id": "CVE-2025-59419",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-59419 is fixed in version 4.1.63.Final-tuxcare.3 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:10f2313e-f0c5-5a3c-ae9c-b6e9ab0e3b9d",
      "id": "CVE-2025-67735",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-67735 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0f3ea1d0-fdd0-5f3c-8a82-d5739229795f",
      "id": "CVE-2026-33870",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33870 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1c06e352-690d-53fd-9f1d-5fb47280362f",
      "id": "CVE-2026-33871",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33871 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6862741d-253b-5c3f-8f00-2851f9ffc597",
      "id": "CVE-2026-41417",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41417 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bb24c8e9-7a4e-5e45-adad-1835f1745f8f",
      "id": "CVE-2026-42577",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42577 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:448358d4-a98e-5ffc-9f61-8670b08a07cd",
      "id": "CVE-2026-42578",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42578 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ca680559-28cd-50b5-88a6-b9af2c232e36",
      "id": "CVE-2026-42579",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42579 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2aff2a02-348a-5c50-bb32-26cd894c788b",
      "id": "CVE-2026-42580",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42580 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cd5d7e0b-76c8-5af9-85e8-44d87ae370b6",
      "id": "CVE-2026-42581",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42581 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cfb15a8f-d5ed-5b79-8935-ac181905c9fe",
      "id": "CVE-2026-42583",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42583 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cbe3f403-624f-5cf2-a896-2bea6ed2937f",
      "id": "CVE-2026-42584",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42584 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5aaf6c88-7145-5481-bdec-c92dbba61408",
      "id": "CVE-2026-42585",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42585 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:59ba0af6-6206-5724-9828-22b6dce6c13b",
      "id": "CVE-2026-42586",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42586 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1a263bfd-fc89-5c85-b432-6e8473278919",
      "id": "CVE-2026-42587",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42587 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4b337ce8-3c18-5059-84c4-f28a71a65d9e",
      "id": "CVE-2026-44248",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44248 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:662f9f0f-2559-521a-a890-02be73f71e3d",
      "id": "CVE-2026-44249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44249 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0ab1516b-6b57-5b94-8ff5-2469abe33705",
      "id": "CVE-2026-44250",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44250 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3527f4b2-8f02-51e8-ae23-fcfc900f3a54",
      "id": "CVE-2026-44890",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44890 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:201cd314-bbed-5d33-bd0e-c7a76a6ea140",
      "id": "CVE-2026-44891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44891 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:27f84b05-446f-5db0-95af-da9231d66fb3",
      "id": "CVE-2026-44893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44893 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4d639c3b-8b98-59d8-99fd-a2479082d989",
      "id": "CVE-2026-45416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45416 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b09c53c4-d0ec-5da8-be27-b4a93fa7582b",
      "id": "CVE-2026-45536",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45536 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:76ac7dbe-8379-5d15-bb38-dd46190110ba",
      "id": "CVE-2026-45673",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45673 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c0291666-07a5-58b3-9a8f-8d4151f8d2d6",
      "id": "CVE-2026-45674",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45674 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3be7bd80-2e72-5aa0-9f4f-ed10b0941a47",
      "id": "CVE-2026-46340",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-46340 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9c26c84a-64e2-5319-8c28-0f8e3f29ed36",
      "id": "CVE-2026-47244",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47244 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b711a40c-4e2f-5563-a471-1429fa82d84f",
      "id": "CVE-2026-47691",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47691 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3968affe-4295-5f21-a3c6-1bc97a2b3397",
      "id": "CVE-2026-48006",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48006 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1c722aa5-548c-5ca9-a80d-b9cf384f0d98",
      "id": "CVE-2026-48043",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48043 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:12852c90-ab0e-5a2f-bbbc-3037a2387695",
      "id": "CVE-2026-48059",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48059 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:72bf3705-957c-54c0-a7fb-3896e2e130cf",
      "id": "CVE-2026-50010",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50010 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d1f62932-dc48-5a32-a071-6be516f13a44",
      "id": "CVE-2026-50011",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50011 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fda4f191-7f5f-53f8-83bd-0574ccc07e6b",
      "id": "CVE-2026-50020",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50020 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e555f64e-ecec-523b-9cb0-aa94192cd132",
      "id": "CVE-2026-50560",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50560 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:27eb3daf-dc3d-5fcb-b177-9c7c0b091806",
      "id": "CVE-2026-55831",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55831 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:da1257f7-8935-5014-b6fe-c58b6a2ae507",
      "id": "CVE-2026-55833",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55833 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:17b11115-a9ed-5dc0-a736-1600fa70d4fb",
      "id": "CVE-2026-55851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55851 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0624c142-aa82-591f-80f8-eee0649ec74a",
      "id": "CVE-2026-56745",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56745 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:319b0357-62ba-5725-a145-4a16acf33ee2",
      "id": "CVE-2026-56746",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56746 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:588f5532-12c4-565e-8eb0-86bd838c7867",
      "id": "CVE-2026-56817",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-56817 does not affect version 4.1.63.Final-tuxcare.3 of io.netty:netty-example. not_affected \u2014 The Netty codec-xml module contains XmlDecoder, which instantiates an Aalto XML parser without security configuration (line 38: new InputFactoryImpl() with no XXE protection). However, this is a library component that Netty itself does not use in its own production code. The vulnerability only manifests when downstream applications explicitly add XmlDecoder to their Netty channel pipelines. Per..."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cc754572-b2d4-5dc9-9fd8-d5d4e095ae18",
      "id": "CVE-2026-59898",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59898 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d5a91e38-1145-5719-b65a-ab6a048cb0fd",
      "id": "CVE-2026-59899",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59899 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ba73990b-a155-5253-b86f-77e6cff4a596",
      "id": "CVE-2026-59900",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59900 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fe4b2b88-88d2-5970-bd2e-ad1e25465492",
      "id": "CVE-2026-59901",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59901 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:196254b7-1145-56dc-b3b2-8c28de2339d5",
      "id": "CVE-2026-59919",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59919 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:43517a2b-37f4-5e1c-aee6-3b0af96be60a",
      "id": "CVE-2026-59920",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59920 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4e30ab60-4b9e-5859-80e7-8eae4002588a",
      "id": "CVE-2026-59921",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59921 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9947dab3-02f7-5ff3-9030-51fe24e44ecb",
      "id": "GHSA-mfg7-5gfp-c4w3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f1a389e7-43ee-5b79-8363-e3ffb22f422f",
      "id": "GHSA-v74w-7mr3-4qg3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:99a6b0f6-5bc7-5245-8955-d1fa10c773bd",
      "id": "GHSA-xpw8-rcwv-8f8p",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-xpw8-rcwv-8f8p affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-example."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.3"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.netty/netty-example@4.1.63.Final-tuxcare.3"
    }
  ]
}