{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:b88a7bd4-2be6-555a-8dc8-94e6067cf3fb",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/io.netty/netty-testsuite-native-image@4.1.63.Final-tuxcare.2",
      "type": "library",
      "group": "io.netty",
      "name": "netty-testsuite-native-image",
      "version": "4.1.63.Final-tuxcare.2",
      "purl": "pkg:maven/io.netty/netty-testsuite-native-image@4.1.63.Final-tuxcare.2"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:bc3ce614-8e61-5378-a526-a5cce71c01f7",
      "id": "CVE-2021-37136",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-37136 is fixed in version 4.1.63.Final-tuxcare.2 of io.netty:netty-testsuite-native-image."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e4bf273b-8071-5eb2-9df4-c9e9603ded1d",
      "id": "CVE-2021-37137",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-37137 is fixed in version 4.1.63.Final-tuxcare.2 of io.netty:netty-testsuite-native-image."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6effcdb8-c9c3-5d90-848b-0688db17e76e",
      "id": "CVE-2021-43797",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-43797 is fixed in version 4.1.63.Final-tuxcare.2 of io.netty:netty-testsuite-native-image."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:301f86f1-e855-5758-8df2-60150058dbe1",
      "id": "CVE-2022-24823",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-24823 is fixed in version 4.1.63.Final-tuxcare.2 of io.netty:netty-testsuite-native-image."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4c657c92-f155-5e7f-86f8-861937bf9051",
      "id": "CVE-2022-41881",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-41881 is fixed in version 4.1.63.Final-tuxcare.2 of io.netty:netty-testsuite-native-image."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e96679f0-585f-5534-8f39-8edd61701b37",
      "id": "CVE-2022-41915",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-41915 is fixed in version 4.1.63.Final-tuxcare.2 of io.netty:netty-testsuite-native-image."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9fbc8168-9ad9-5721-b3ec-76a44f0e4955",
      "id": "CVE-2023-34462",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-34462 is fixed in version 4.1.63.Final-tuxcare.2 of io.netty:netty-testsuite-native-image."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f914a09e-64a5-5db7-8325-3507d14f7277",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-44487 is fixed in version 4.1.63.Final-tuxcare.2 of io.netty:netty-testsuite-native-image."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:647e093b-6145-5da4-b8f8-9b64a5874e6e",
      "id": "CVE-2023-4586",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2023-4586 is a false positive for io.netty:netty-testsuite-native-image 4.1.63.Final-tuxcare.2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5b79e23b-2a6e-53ed-93c4-1331fec18a4e",
      "id": "CVE-2024-29025",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-29025 is fixed in version 4.1.63.Final-tuxcare.2 of io.netty:netty-testsuite-native-image."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:590e5909-61e0-5e69-84cc-022235c34700",
      "id": "CVE-2024-47535",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-47535 is fixed in version 4.1.63.Final-tuxcare.2 of io.netty:netty-testsuite-native-image."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8b539992-737a-52da-a7a5-93dde74fda88",
      "id": "CVE-2025-24970",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-24970 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-testsuite-native-image."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:96de95eb-2a6a-52b9-b09e-a3a944176377",
      "id": "CVE-2025-25193",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-25193 is fixed in version 4.1.63.Final-tuxcare.2 of io.netty:netty-testsuite-native-image."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ee0ce280-72e3-5212-a30f-409f333fb866",
      "id": "CVE-2025-55163",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55163 is fixed in version 4.1.63.Final-tuxcare.2 of io.netty:netty-testsuite-native-image."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ec563a48-7a4b-5345-a86b-4abb2af17ba9",
      "id": "CVE-2025-58056",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58056 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-testsuite-native-image."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:598e8a78-dc21-5d67-82bb-8f49640defa6",
      "id": "CVE-2025-58057",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-58057 is fixed in version 4.1.63.Final-tuxcare.2 of io.netty:netty-testsuite-native-image."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7b500147-7072-5ef1-950c-c4fb2ed2c8b2",
      "id": "CVE-2025-59419",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-59419 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-testsuite-native-image."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f1709dd4-45f3-55e1-a503-598f7a7b7205",
      "id": "CVE-2025-67735",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-67735 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-testsuite-native-image."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0a7272b3-3ba5-5a58-93ea-bccd18a3c0d1",
      "id": "CVE-2026-33870",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33870 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-testsuite-native-image."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2fe9cae0-bd9e-5ffc-88d4-5fa5a6fd6352",
      "id": "CVE-2026-33871",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33871 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-testsuite-native-image."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:717990b9-819e-50c8-8f38-12bfdc648871",
      "id": "CVE-2026-41417",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41417 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-testsuite-native-image."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f914a6c3-9336-5ca5-8e48-21b2d6e562c1",
      "id": "CVE-2026-42577",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42577 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-testsuite-native-image."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1baa1040-04f2-5506-b118-883743d14192",
      "id": "CVE-2026-42578",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42578 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-testsuite-native-image."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0fe63130-241c-5234-beb1-9c58b98fe351",
      "id": "CVE-2026-42579",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42579 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-testsuite-native-image."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6ecb79e9-d793-5700-9557-539aa331d78c",
      "id": "CVE-2026-42580",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42580 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-testsuite-native-image."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d9abeb98-1ecd-55f0-a970-43b443e4e8da",
      "id": "CVE-2026-42581",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42581 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-testsuite-native-image."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e74fe7f7-059b-5662-99ec-72388674e589",
      "id": "CVE-2026-42583",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42583 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-testsuite-native-image."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:24ed5d18-cc9b-5764-b5d8-a08de28505ec",
      "id": "CVE-2026-42584",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42584 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-testsuite-native-image."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:da2d1005-a683-5056-b86e-62db1a5e4ae6",
      "id": "CVE-2026-42585",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42585 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-testsuite-native-image."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2d600635-090d-56bc-9ba5-8e43bb675cb1",
      "id": "CVE-2026-42586",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42586 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-testsuite-native-image."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5de191b4-ad73-5e4b-aeb6-39243ed88aa0",
      "id": "CVE-2026-42587",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42587 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-testsuite-native-image."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:efb2ea69-f484-504e-b718-cc65c396b552",
      "id": "CVE-2026-44248",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44248 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-testsuite-native-image."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:994fd6c7-2e2b-52ef-b93b-4c931eed3dba",
      "id": "CVE-2026-44249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44249 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-testsuite-native-image."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e04ae1ff-a834-5d80-a8f0-6c95617c7b9d",
      "id": "CVE-2026-44250",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44250 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-testsuite-native-image."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:76e84d92-f221-522e-a134-ecf0b6688321",
      "id": "CVE-2026-44890",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44890 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-testsuite-native-image."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:22435ec7-68fa-5648-a742-4571040de268",
      "id": "CVE-2026-44891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44891 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-testsuite-native-image."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a831bc98-b79b-543c-a809-1292dd1c9fd4",
      "id": "CVE-2026-44893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44893 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-testsuite-native-image."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1d091ae1-832b-5a0d-8962-0b45434d21e6",
      "id": "CVE-2026-45416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45416 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-testsuite-native-image."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e02ee865-7d7b-53b7-b962-de626e4e26e1",
      "id": "CVE-2026-45536",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45536 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-testsuite-native-image."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8d26031a-9f73-5676-8e0a-416150fec1c9",
      "id": "CVE-2026-45673",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45673 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-testsuite-native-image."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:eca32cf3-c2fb-5e66-822c-38e97e9bdb68",
      "id": "CVE-2026-45674",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45674 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-testsuite-native-image."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:49006381-fe7e-5b14-9ba9-a086fe7e127a",
      "id": "CVE-2026-46340",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-46340 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-testsuite-native-image."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9b7781ad-9609-5ee9-a6e2-ce082c022398",
      "id": "CVE-2026-47244",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47244 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-testsuite-native-image."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:53539274-3c68-572c-8ca7-674156295948",
      "id": "CVE-2026-47691",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47691 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-testsuite-native-image."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fa8f37bf-524a-530d-827a-b7f54d51ed68",
      "id": "CVE-2026-48006",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48006 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-testsuite-native-image."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:45c3feaa-afa3-5917-bd30-412a0c0949d5",
      "id": "CVE-2026-48043",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48043 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-testsuite-native-image."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:99bf56fe-ace0-5275-8314-a8e2386fd9d5",
      "id": "CVE-2026-48059",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48059 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-testsuite-native-image."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:93488218-9606-5bef-87bf-60820245bd64",
      "id": "CVE-2026-50010",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50010 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-testsuite-native-image."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:49476f1c-ba7b-500b-8712-d8b9988ae379",
      "id": "CVE-2026-50011",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50011 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-testsuite-native-image."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:59703069-b63a-56b7-b3e4-90bbe04fa82e",
      "id": "CVE-2026-50020",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50020 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-testsuite-native-image."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1ea90fc3-ca55-5e0a-8f42-ddfa27db3d13",
      "id": "CVE-2026-50560",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50560 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-testsuite-native-image."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c035d7f7-4366-5f91-859e-6cd0af43ff9b",
      "id": "CVE-2026-55831",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55831 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-testsuite-native-image."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8a3e80f5-b102-5a01-be9c-f0f32dd475c3",
      "id": "CVE-2026-55833",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55833 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-testsuite-native-image."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dce5ed37-529c-56b8-9b7e-30b979428cf4",
      "id": "CVE-2026-55851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55851 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-testsuite-native-image."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:aa9f5f35-faf4-55cd-ab29-c6f95d745bab",
      "id": "CVE-2026-56745",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56745 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-testsuite-native-image."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:59b604b4-dcd3-50fe-a1b8-b430642733e9",
      "id": "CVE-2026-56746",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56746 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-testsuite-native-image."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3b3fcd9d-545f-529e-8e58-f233f567b19c",
      "id": "CVE-2026-56817",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-56817 does not affect version 4.1.63.Final-tuxcare.2 of io.netty:netty-testsuite-native-image. not_affected \u2014 The Netty codec-xml module contains XmlDecoder, which instantiates an Aalto XML parser without security configuration (line 38: new InputFactoryImpl() with no XXE protection). However, this is a library component that Netty itself does not use in its own production code. The vulnerability only manifests when downstream applications explicitly add XmlDecoder to their Netty channel pipelines. Per..."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0dbca5e5-12a8-5a6e-a373-d3bec3b12044",
      "id": "CVE-2026-59898",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59898 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-testsuite-native-image."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1a04ee27-cfef-50ab-bf25-c400f5ba8623",
      "id": "CVE-2026-59899",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59899 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-testsuite-native-image."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e6f44cb2-60d8-574b-b3dc-ed752fb65e59",
      "id": "CVE-2026-59900",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59900 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-testsuite-native-image."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:00088415-9f89-5163-9043-6a852b0ff253",
      "id": "CVE-2026-59901",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59901 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-testsuite-native-image."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2795ac24-788b-5386-b78a-4f423bc80dfc",
      "id": "CVE-2026-59919",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59919 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-testsuite-native-image."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3c663f18-0226-5d24-8aa1-82dc1bd76a4b",
      "id": "CVE-2026-59920",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59920 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-testsuite-native-image."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a5f6288c-3285-56e0-a2f1-2e8fe99da548",
      "id": "CVE-2026-59921",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59921 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-testsuite-native-image."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7b54e92b-6d76-51d5-996f-4edf3b9e3d18",
      "id": "GHSA-mfg7-5gfp-c4w3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-testsuite-native-image."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b15e2e6d-08d2-5231-8c39-501d91ce5ec2",
      "id": "GHSA-v74w-7mr3-4qg3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-testsuite-native-image."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0430cca4-42cd-5477-a212-0c35b4484e1e",
      "id": "GHSA-xpw8-rcwv-8f8p",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-xpw8-rcwv-8f8p affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-testsuite-native-image."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-native-image@4.1.63.Final-tuxcare.2"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.netty/netty-testsuite-native-image@4.1.63.Final-tuxcare.2"
    }
  ]
}