{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:266cae36-55ec-5b17-ae17-83cdb988910f",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/io.netty/netty-tarball@4.1.63.Final-tuxcare.1",
      "type": "library",
      "group": "io.netty",
      "name": "netty-tarball",
      "version": "4.1.63.Final-tuxcare.1",
      "purl": "pkg:maven/io.netty/netty-tarball@4.1.63.Final-tuxcare.1"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:45daa4a9-a25c-5b1d-85e8-e637e24eabc4",
      "id": "CVE-2021-37136",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-37136 is fixed in version 4.1.63.Final-tuxcare.1 of io.netty:netty-tarball."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-tarball@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1d156997-49dd-574d-b9c5-40595e1c4f88",
      "id": "CVE-2021-37137",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-37137 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-tarball."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-tarball@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:982087c9-b911-59fa-aadd-caac7fefa762",
      "id": "CVE-2021-43797",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-43797 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-tarball."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-tarball@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:837a7dc8-1d7f-566a-87c6-08f02738b2e4",
      "id": "CVE-2022-24823",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-24823 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-tarball."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-tarball@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7df3eb60-4d63-5721-8609-e11b7016af7d",
      "id": "CVE-2022-41881",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-41881 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-tarball."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-tarball@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b881b469-2b61-5f8f-a852-f80b5c4b57f3",
      "id": "CVE-2022-41915",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-41915 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-tarball."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-tarball@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2079f121-4ddc-57d9-99b7-f8a86014f639",
      "id": "CVE-2023-34462",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-34462 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-tarball."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-tarball@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fda563aa-9c18-5a13-bdc1-4c1fc07fbe70",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-44487 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-tarball."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-tarball@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:39c58650-b990-5380-9724-17e1405d3596",
      "id": "CVE-2023-4586",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2023-4586 is a false positive for io.netty:netty-tarball 4.1.63.Final-tuxcare.1."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-tarball@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:42e8bc6f-a60a-52c7-bf61-42b88d373422",
      "id": "CVE-2024-29025",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-29025 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-tarball."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-tarball@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3249a3cf-7844-5811-a8f5-71eea5f9abec",
      "id": "CVE-2024-47535",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-47535 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-tarball."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-tarball@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:aa58e0dd-2bed-5afe-8794-41e492463169",
      "id": "CVE-2025-24970",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-24970 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-tarball."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-tarball@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5933142b-fe20-57de-b63a-3b7f77a4cc49",
      "id": "CVE-2025-25193",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-25193 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-tarball."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-tarball@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0fa0a335-1083-5d24-bcfb-e85f952fe372",
      "id": "CVE-2025-55163",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-55163 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-tarball."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-tarball@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a1f049c7-fc71-59f6-89c4-e6a1207753ab",
      "id": "CVE-2025-58056",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58056 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-tarball."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-tarball@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:04418c1a-de97-5510-b26e-46bc6c41de6e",
      "id": "CVE-2025-58057",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58057 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-tarball."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-tarball@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:40d0396b-7502-5e29-a9d0-16aff4a66a54",
      "id": "CVE-2025-59419",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-59419 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-tarball."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-tarball@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:29a9760a-b6f4-5af3-bc4a-6f209d9212d3",
      "id": "CVE-2025-67735",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-67735 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-tarball."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-tarball@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d557a2d9-6319-5a2b-b47f-644b3a2a7272",
      "id": "CVE-2026-33870",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33870 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-tarball."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-tarball@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0b1c31db-d3a2-5f50-96a2-7615c6604416",
      "id": "CVE-2026-33871",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33871 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-tarball."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-tarball@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:92af575f-8d24-5716-a8e8-a2a49501fe32",
      "id": "CVE-2026-41417",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41417 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-tarball."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-tarball@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7f9c4f8f-7b89-5cc5-bce0-e21bc6f285ea",
      "id": "CVE-2026-42577",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42577 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-tarball."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-tarball@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ce7618aa-87bc-5afa-9441-fb614c1990a5",
      "id": "CVE-2026-42578",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42578 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-tarball."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-tarball@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0926321a-bc68-5a89-91ef-42f7d1604ebd",
      "id": "CVE-2026-42579",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42579 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-tarball."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-tarball@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ebab2f14-4198-57d9-98ee-e031ddb87ed9",
      "id": "CVE-2026-42580",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42580 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-tarball."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-tarball@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:32e06e93-187f-5a85-ab96-06a446e0c455",
      "id": "CVE-2026-42581",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42581 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-tarball."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-tarball@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fafd8f7f-4e0c-5637-8bf2-156ad42f229c",
      "id": "CVE-2026-42583",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42583 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-tarball."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-tarball@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5c03f85f-99f1-53db-9461-1137cd52b6cd",
      "id": "CVE-2026-42584",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42584 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-tarball."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-tarball@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c1c91315-e69e-5e75-a99d-44ef55ddd563",
      "id": "CVE-2026-42585",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42585 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-tarball."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-tarball@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b9d0d6a5-5b21-5f79-97d4-ad0cd8cc99c9",
      "id": "CVE-2026-42586",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42586 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-tarball."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-tarball@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2e7955f7-c053-57f1-821f-a0df89ca2565",
      "id": "CVE-2026-42587",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42587 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-tarball."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-tarball@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:203304a8-d814-5edc-a190-017f38d69c05",
      "id": "CVE-2026-44248",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44248 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-tarball."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-tarball@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6c391a23-05bd-552c-9613-94ffbc73c67d",
      "id": "CVE-2026-44249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44249 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-tarball."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-tarball@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5b858050-dce7-5f94-84c6-250984a5e988",
      "id": "CVE-2026-44250",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44250 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-tarball."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-tarball@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3a627a59-c6cf-5455-8df8-ddbcbfe6c059",
      "id": "CVE-2026-44890",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44890 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-tarball."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-tarball@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2cda785b-9d48-5493-8559-b5d0c577d34c",
      "id": "CVE-2026-44891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44891 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-tarball."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-tarball@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c812ef57-53ef-5d0b-992c-9c780cd59d55",
      "id": "CVE-2026-44893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44893 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-tarball."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-tarball@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:00ead349-6be2-5d9d-8835-e97c338fcb15",
      "id": "CVE-2026-45416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45416 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-tarball."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-tarball@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e9a1eaa6-2871-5ab3-81cb-fec6d47a8c1e",
      "id": "CVE-2026-45536",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45536 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-tarball."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-tarball@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:46216f56-ae96-5614-a2e6-3a5cdf2c7e79",
      "id": "CVE-2026-45673",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45673 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-tarball."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-tarball@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ab1dcdbe-98c5-58e9-a185-775e77fb0758",
      "id": "CVE-2026-45674",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45674 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-tarball."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-tarball@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d2de9927-55c9-5c27-ba60-cee8d6a52547",
      "id": "CVE-2026-46340",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-46340 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-tarball."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-tarball@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3e4cff92-12c2-5670-9bba-9cdde99fecc5",
      "id": "CVE-2026-47244",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47244 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-tarball."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-tarball@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:40747de0-54d7-5d0d-99c1-3a058af837a4",
      "id": "CVE-2026-47691",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47691 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-tarball."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-tarball@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9fa82b01-33b3-5db5-ab66-d91a90df0510",
      "id": "CVE-2026-48006",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48006 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-tarball."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-tarball@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4a771c68-c807-512c-b222-43b255750574",
      "id": "CVE-2026-48043",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48043 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-tarball."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-tarball@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7c8d11c9-fead-5488-9d7f-046aeee0b148",
      "id": "CVE-2026-48059",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48059 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-tarball."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-tarball@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d73a57b4-5bc5-525b-815b-29768a82076b",
      "id": "CVE-2026-50010",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50010 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-tarball."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-tarball@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7a2361d9-5a15-5740-8b8a-36e94bb040e1",
      "id": "CVE-2026-50011",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50011 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-tarball."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-tarball@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a74f0c71-6451-531d-aba5-449b33a67776",
      "id": "CVE-2026-50020",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50020 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-tarball."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-tarball@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b607e8f0-d614-51c7-a080-8e608dbedf58",
      "id": "CVE-2026-50560",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50560 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-tarball."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-tarball@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5715fa49-dd16-57e3-bb7d-88c29a14d4e1",
      "id": "CVE-2026-55831",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55831 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-tarball."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-tarball@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4deac9a4-614e-58f5-ba5a-c14c44d602ae",
      "id": "CVE-2026-55833",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55833 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-tarball."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-tarball@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fbacc458-70e0-58df-b205-a478020192d1",
      "id": "CVE-2026-55851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55851 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-tarball."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-tarball@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f1552491-13dc-5386-af49-397a7f669997",
      "id": "CVE-2026-56745",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56745 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-tarball."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-tarball@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:779bf691-71d8-547d-b84f-eba8d046ffcd",
      "id": "CVE-2026-56746",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56746 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-tarball."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-tarball@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:605e4d65-29e1-5b38-bf6e-d391e5465e7b",
      "id": "CVE-2026-56817",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-56817 does not affect version 4.1.63.Final-tuxcare.1 of io.netty:netty-tarball. not_affected \u2014 The Netty codec-xml module contains XmlDecoder, which instantiates an Aalto XML parser without security configuration (line 38: new InputFactoryImpl() with no XXE protection). However, this is a library component that Netty itself does not use in its own production code. The vulnerability only manifests when downstream applications explicitly add XmlDecoder to their Netty channel pipelines. Per..."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-tarball@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0aa0e150-ab8c-5b2d-a8bf-fa2b2dcbc37c",
      "id": "CVE-2026-59898",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59898 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-tarball."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-tarball@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b99ffce4-356f-5700-97fa-add07fd90f50",
      "id": "CVE-2026-59899",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59899 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-tarball."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-tarball@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7156e3ef-1f40-539e-8df4-06caa781fd7b",
      "id": "CVE-2026-59900",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59900 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-tarball."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-tarball@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a497b8de-6afc-521b-90ef-aa9e8139e090",
      "id": "CVE-2026-59901",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59901 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-tarball."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-tarball@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bc372d74-26fc-55c4-85c3-aca8adeb5f1e",
      "id": "CVE-2026-59919",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59919 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-tarball."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-tarball@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5b34c310-c1c4-5034-885a-3e88964e0294",
      "id": "CVE-2026-59920",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59920 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-tarball."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-tarball@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:96f0e3cd-ddc1-524e-925c-759e12e293ab",
      "id": "CVE-2026-59921",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59921 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-tarball."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-tarball@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:92aaf6ac-ea9c-5bad-ba99-518a8cd17745",
      "id": "GHSA-mfg7-5gfp-c4w3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-tarball."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-tarball@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4f4adf04-5a81-5903-bfe4-d815eb565b16",
      "id": "GHSA-v74w-7mr3-4qg3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-tarball."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-tarball@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e6d7fbf7-ceff-5798-bbf3-86eac39eb8a1",
      "id": "GHSA-xpw8-rcwv-8f8p",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-xpw8-rcwv-8f8p affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-tarball."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-tarball@4.1.63.Final-tuxcare.1"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.netty/netty-tarball@4.1.63.Final-tuxcare.1"
    }
  ]
}