{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:5fd75805-fc5a-5a7e-834c-0ed08043eb7e",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/io.netty/netty-transport-blockhound-tests@4.1.63.Final-tuxcare.2",
      "type": "library",
      "group": "io.netty",
      "name": "netty-transport-blockhound-tests",
      "version": "4.1.63.Final-tuxcare.2",
      "purl": "pkg:maven/io.netty/netty-transport-blockhound-tests@4.1.63.Final-tuxcare.2"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:41ae69f6-5925-5757-85f9-4b068869b812",
      "id": "CVE-2021-37136",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-37136 is fixed in version 4.1.63.Final-tuxcare.2 of io.netty:netty-transport-blockhound-tests."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-blockhound-tests@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c2b227db-9a27-585b-ac26-e20aa5614faf",
      "id": "CVE-2021-37137",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-37137 is fixed in version 4.1.63.Final-tuxcare.2 of io.netty:netty-transport-blockhound-tests."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-blockhound-tests@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:238f5aad-44f4-5949-aa78-011b81cf91ec",
      "id": "CVE-2021-43797",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-43797 is fixed in version 4.1.63.Final-tuxcare.2 of io.netty:netty-transport-blockhound-tests."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-blockhound-tests@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:375e57de-5ef8-52a7-a2d5-9ca28773b750",
      "id": "CVE-2022-24823",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-24823 is fixed in version 4.1.63.Final-tuxcare.2 of io.netty:netty-transport-blockhound-tests."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-blockhound-tests@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4008ade1-1a63-567d-9552-9691bb321263",
      "id": "CVE-2022-41881",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-41881 is fixed in version 4.1.63.Final-tuxcare.2 of io.netty:netty-transport-blockhound-tests."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-blockhound-tests@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3096d6f4-20b2-5a46-9f53-047c3ca7a8e6",
      "id": "CVE-2022-41915",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-41915 is fixed in version 4.1.63.Final-tuxcare.2 of io.netty:netty-transport-blockhound-tests."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-blockhound-tests@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ab24c01a-cb71-55cb-99dd-aca4a8bbf4e1",
      "id": "CVE-2023-34462",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-34462 is fixed in version 4.1.63.Final-tuxcare.2 of io.netty:netty-transport-blockhound-tests."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-blockhound-tests@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a2517e06-915c-586b-a926-8710aaa7d54a",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-44487 is fixed in version 4.1.63.Final-tuxcare.2 of io.netty:netty-transport-blockhound-tests."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-blockhound-tests@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:714dafc0-2203-588c-9b40-98fdb97b0188",
      "id": "CVE-2023-4586",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2023-4586 is a false positive for io.netty:netty-transport-blockhound-tests 4.1.63.Final-tuxcare.2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-blockhound-tests@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:86af0498-4306-5b9f-813c-238f6c64cec0",
      "id": "CVE-2024-29025",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-29025 is fixed in version 4.1.63.Final-tuxcare.2 of io.netty:netty-transport-blockhound-tests."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-blockhound-tests@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6c8726f1-4afa-5a71-9744-bb8a7ea2dec3",
      "id": "CVE-2024-47535",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-47535 is fixed in version 4.1.63.Final-tuxcare.2 of io.netty:netty-transport-blockhound-tests."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-blockhound-tests@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:09fb037e-ecf7-5fce-9b53-d4574cb75cde",
      "id": "CVE-2025-24970",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-24970 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-transport-blockhound-tests."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-blockhound-tests@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:47d9127d-bd56-5034-aca7-83d1522cba09",
      "id": "CVE-2025-25193",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-25193 is fixed in version 4.1.63.Final-tuxcare.2 of io.netty:netty-transport-blockhound-tests."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-blockhound-tests@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ea8d5c64-e37c-58e3-85d1-ab2bd3af2f4e",
      "id": "CVE-2025-55163",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55163 is fixed in version 4.1.63.Final-tuxcare.2 of io.netty:netty-transport-blockhound-tests."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-blockhound-tests@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6587202e-d837-5ca5-952a-e6cba217c657",
      "id": "CVE-2025-58056",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58056 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-transport-blockhound-tests."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-blockhound-tests@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:58575148-2bc5-5eaf-b8ed-93f388371b64",
      "id": "CVE-2025-58057",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-58057 is fixed in version 4.1.63.Final-tuxcare.2 of io.netty:netty-transport-blockhound-tests."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-blockhound-tests@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f474eb4d-30b5-5ad2-aa24-2765040b2dfa",
      "id": "CVE-2025-59419",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-59419 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-transport-blockhound-tests."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-blockhound-tests@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:af8bf6d9-82ad-5b00-9222-86153ee1d143",
      "id": "CVE-2025-67735",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-67735 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-transport-blockhound-tests."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-blockhound-tests@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ad163471-6d76-5856-9a36-fbfa28fb6d06",
      "id": "CVE-2026-33870",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33870 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-transport-blockhound-tests."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-blockhound-tests@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:73b8c934-9c08-57fc-9565-94ac288eb3dc",
      "id": "CVE-2026-33871",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33871 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-transport-blockhound-tests."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-blockhound-tests@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9a9377a3-919c-55a4-a49f-6c0ed0d0d825",
      "id": "CVE-2026-41417",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41417 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-transport-blockhound-tests."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-blockhound-tests@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:25082bd3-afb1-5994-ac3d-ad2c5ccf1e47",
      "id": "CVE-2026-42577",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42577 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-transport-blockhound-tests."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-blockhound-tests@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:06e82f3f-27e1-55c1-8fd6-b4c5ac838b81",
      "id": "CVE-2026-42578",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42578 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-transport-blockhound-tests."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-blockhound-tests@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:83a7c298-14d0-53c2-8d1d-8a979b6ff428",
      "id": "CVE-2026-42579",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42579 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-transport-blockhound-tests."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-blockhound-tests@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9cfbe929-1d97-54bb-8a01-9781b0c4df27",
      "id": "CVE-2026-42580",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42580 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-transport-blockhound-tests."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-blockhound-tests@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3da61189-cbd0-5b2f-9af0-1c8d00037764",
      "id": "CVE-2026-42581",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42581 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-transport-blockhound-tests."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-blockhound-tests@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:63408a42-cfc0-5db9-b5b0-aba980245117",
      "id": "CVE-2026-42583",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42583 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-transport-blockhound-tests."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-blockhound-tests@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0714579d-f827-56ef-a008-c1558116121f",
      "id": "CVE-2026-42584",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42584 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-transport-blockhound-tests."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-blockhound-tests@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2955b26c-9b5d-5f0e-a482-c06732f4a2d1",
      "id": "CVE-2026-42585",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42585 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-transport-blockhound-tests."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-blockhound-tests@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:448ec65e-682c-5458-a485-3b6a084eb409",
      "id": "CVE-2026-42586",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42586 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-transport-blockhound-tests."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-blockhound-tests@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:852548b1-c38d-532d-be93-2cf1b20da5f5",
      "id": "CVE-2026-42587",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42587 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-transport-blockhound-tests."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-blockhound-tests@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f23438ad-0221-5419-a7d1-9d5cc739de70",
      "id": "CVE-2026-44248",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44248 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-transport-blockhound-tests."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-blockhound-tests@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:64714bef-1433-5e47-9bf3-053829a7de08",
      "id": "CVE-2026-44249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44249 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-transport-blockhound-tests."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-blockhound-tests@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:754175c3-0f1d-5503-9429-1280e2c1fe94",
      "id": "CVE-2026-44250",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44250 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-transport-blockhound-tests."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-blockhound-tests@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1f8c238f-cce6-5eaf-95c8-71b031b11630",
      "id": "CVE-2026-44890",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44890 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-transport-blockhound-tests."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-blockhound-tests@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6604cbf3-f06c-5410-81c0-34ac8d0acdf0",
      "id": "CVE-2026-44891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44891 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-transport-blockhound-tests."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-blockhound-tests@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1572dc43-6c77-5945-9c3e-b3caf1be7f1f",
      "id": "CVE-2026-44893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44893 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-transport-blockhound-tests."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-blockhound-tests@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ba0d63ed-0cee-5081-9195-99a66a158400",
      "id": "CVE-2026-45416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45416 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-transport-blockhound-tests."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-blockhound-tests@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:623b2534-f482-5eef-b8e9-dddf9e90e7e6",
      "id": "CVE-2026-45536",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45536 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-transport-blockhound-tests."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-blockhound-tests@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:179e8d49-1657-5189-8f36-639ae4695d40",
      "id": "CVE-2026-45673",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45673 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-transport-blockhound-tests."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-blockhound-tests@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:25323f92-e0bf-5fcb-9229-373730b0ea3c",
      "id": "CVE-2026-45674",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45674 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-transport-blockhound-tests."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-blockhound-tests@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:95836285-2d04-5ced-8f03-a13709e60f9a",
      "id": "CVE-2026-46340",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-46340 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-transport-blockhound-tests."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-blockhound-tests@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:40144a66-357c-53fb-a049-64ddbf0ac9f0",
      "id": "CVE-2026-47244",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47244 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-transport-blockhound-tests."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-blockhound-tests@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:17e4a13e-1158-5c11-96e3-2edc97e6e697",
      "id": "CVE-2026-47691",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47691 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-transport-blockhound-tests."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-blockhound-tests@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0b7c568b-6e31-583b-a132-d385c649695f",
      "id": "CVE-2026-48006",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48006 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-transport-blockhound-tests."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-blockhound-tests@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4d2effd0-3ffb-5d9b-b322-af40651f5872",
      "id": "CVE-2026-48043",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48043 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-transport-blockhound-tests."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-blockhound-tests@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a61bca82-2cce-5f06-b198-31fc692f0746",
      "id": "CVE-2026-48059",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48059 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-transport-blockhound-tests."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-blockhound-tests@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:450eb3d6-46e1-51b5-9a03-9bb17d645ca0",
      "id": "CVE-2026-50010",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50010 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-transport-blockhound-tests."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-blockhound-tests@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bb05e3ef-30f3-5777-b440-f4c149fda352",
      "id": "CVE-2026-50011",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50011 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-transport-blockhound-tests."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-blockhound-tests@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7db13714-6384-5267-aab1-7b01672d1b6c",
      "id": "CVE-2026-50020",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50020 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-transport-blockhound-tests."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-blockhound-tests@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:00686419-865c-55ce-aec2-529df950903e",
      "id": "CVE-2026-50560",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50560 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-transport-blockhound-tests."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-blockhound-tests@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fcf46ae7-e09b-5cbc-bf40-772ad9224caa",
      "id": "CVE-2026-55831",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55831 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-transport-blockhound-tests."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-blockhound-tests@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:34621c9f-2a1b-5174-93e4-4596e59dff23",
      "id": "CVE-2026-55833",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55833 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-transport-blockhound-tests."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-blockhound-tests@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:72fbeb22-bed5-5004-9b61-285b2eb98039",
      "id": "CVE-2026-55851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55851 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-transport-blockhound-tests."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-blockhound-tests@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a3818e30-13dd-5411-aa58-659d56fc7334",
      "id": "CVE-2026-56745",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56745 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-transport-blockhound-tests."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-blockhound-tests@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e0862a11-2964-5b64-8b4e-7a794e20e8df",
      "id": "CVE-2026-56746",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56746 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-transport-blockhound-tests."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-blockhound-tests@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f1cdb5b6-4114-59ec-bce8-abde091b96c6",
      "id": "CVE-2026-56817",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-56817 does not affect version 4.1.63.Final-tuxcare.2 of io.netty:netty-transport-blockhound-tests. not_affected \u2014 The Netty codec-xml module contains XmlDecoder, which instantiates an Aalto XML parser without security configuration (line 38: new InputFactoryImpl() with no XXE protection). However, this is a library component that Netty itself does not use in its own production code. The vulnerability only manifests when downstream applications explicitly add XmlDecoder to their Netty channel pipelines. Per..."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-blockhound-tests@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0b32610e-f9cf-5af1-bc0c-2643fa3081dd",
      "id": "CVE-2026-59898",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59898 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-transport-blockhound-tests."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-blockhound-tests@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cdc59ca9-6954-5482-82fa-f82eb82d7b43",
      "id": "CVE-2026-59899",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59899 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-transport-blockhound-tests."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-blockhound-tests@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ddaf7ef7-a07b-503c-bf3b-90fb23cc43bf",
      "id": "CVE-2026-59900",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59900 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-transport-blockhound-tests."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-blockhound-tests@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:44dd00a6-0eed-5c04-a2f6-5d31252aeb9c",
      "id": "CVE-2026-59901",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59901 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-transport-blockhound-tests."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-blockhound-tests@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:819da85a-85bf-5847-a5ff-a58424cb9bc1",
      "id": "CVE-2026-59919",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59919 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-transport-blockhound-tests."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-blockhound-tests@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:64e7e272-9d0f-599b-8dce-aef308cfd58a",
      "id": "CVE-2026-59920",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59920 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-transport-blockhound-tests."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-blockhound-tests@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1a1da3ab-2f75-5002-9cd6-8729a9fd25a8",
      "id": "CVE-2026-59921",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59921 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-transport-blockhound-tests."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-blockhound-tests@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ce620e61-2656-5401-b3c6-611386c48719",
      "id": "GHSA-mfg7-5gfp-c4w3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-transport-blockhound-tests."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-blockhound-tests@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5a774522-b392-514d-9b3f-54335097539f",
      "id": "GHSA-v74w-7mr3-4qg3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-transport-blockhound-tests."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-blockhound-tests@4.1.63.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b08ddd1a-0639-547a-a280-103b32bdecd1",
      "id": "GHSA-xpw8-rcwv-8f8p",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-xpw8-rcwv-8f8p affects version 4.1.63.Final-tuxcare.2 of io.netty:netty-transport-blockhound-tests."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-blockhound-tests@4.1.63.Final-tuxcare.2"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.netty/netty-transport-blockhound-tests@4.1.63.Final-tuxcare.2"
    }
  ]
}