{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:2c8ba039-3a4e-55f1-8f26-8eeb18c15077",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/io.netty/netty-parent@4.1.117.Final-tuxcare.1",
      "type": "library",
      "group": "io.netty",
      "name": "netty-parent",
      "version": "4.1.117.Final-tuxcare.1",
      "purl": "pkg:maven/io.netty/netty-parent@4.1.117.Final-tuxcare.1"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:14eb5c32-eed9-52a8-82f6-65bf8007d956",
      "id": "CVE-2025-24970",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-24970 affects version 4.1.117.Final-tuxcare.1 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.117.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2a7af07b-d019-564f-93be-d6d6cf848e5e",
      "id": "CVE-2025-25193",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-25193 is fixed in version 4.1.117.Final-tuxcare.1 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.117.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2b09269a-0eb8-5e96-96a6-ba8403e91619",
      "id": "CVE-2026-33871",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-33871 is fixed in version 4.1.117.Final-tuxcare.1 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.117.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e5d7db28-f2e2-5493-86c8-9bb19d7be302",
      "id": "CVE-2026-42579",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42579 is fixed in version 4.1.117.Final-tuxcare.1 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.117.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0a230fcb-68f4-5e6b-9ac6-520163ca63b3",
      "id": "CVE-2026-42580",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42580 affects version 4.1.117.Final-tuxcare.1 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.117.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fd6e4a60-b39a-5a89-a49b-e4b37cb2e9f1",
      "id": "CVE-2026-42583",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42583 affects version 4.1.117.Final-tuxcare.1 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.117.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:068fbe91-622c-507f-badf-148fbd3f1a7b",
      "id": "CVE-2026-42586",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42586 affects version 4.1.117.Final-tuxcare.1 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.117.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4a13b92f-897c-534f-8611-7633d5d031b1",
      "id": "CVE-2026-44249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44249 affects version 4.1.117.Final-tuxcare.1 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.117.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:69f0dbbd-44c6-5343-87a6-fb72c17c207d",
      "id": "CVE-2026-44890",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.117.Final-tuxcare.1 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.117.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8baf618b-d5c1-5183-80c7-d6d46c5b2841",
      "id": "CVE-2026-48059",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48059 affects version 4.1.117.Final-tuxcare.1 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.117.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e6fe5641-26ba-57bd-a38b-3b28eb67c9eb",
      "id": "CVE-2026-50010",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50010 affects version 4.1.117.Final-tuxcare.1 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.117.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3592de70-2e3d-51db-9c59-ea249ac2abed",
      "id": "CVE-2026-50020",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50020 affects version 4.1.117.Final-tuxcare.1 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.117.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1be4aa89-f1e9-5642-b555-6195c9674f68",
      "id": "CVE-2026-50560",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.117.Final-tuxcare.1 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.117.Final-tuxcare.1"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.netty/netty-parent@4.1.117.Final-tuxcare.1"
    }
  ]
}