{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:88f56db5-dd8f-5274-95a5-25aaa5797401",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.1",
      "type": "library",
      "group": "io.netty",
      "name": "netty-transport-rxtx",
      "version": "4.1.63.Final-tuxcare.1",
      "purl": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.1"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:925b0fbb-af0d-5df5-82ac-fbf3069a2108",
      "id": "CVE-2021-37136",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-37136 is fixed in version 4.1.63.Final-tuxcare.1 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b335674e-6d88-5579-a4fd-1cc00573a66d",
      "id": "CVE-2021-37137",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-37137 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cc4bab97-5b86-5f88-82ef-83b305299919",
      "id": "CVE-2021-43797",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-43797 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8c245e26-e854-53fa-9b07-30019c5e5395",
      "id": "CVE-2022-24823",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-24823 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:613a60e4-34b6-5a75-88e5-ee497bc63ddf",
      "id": "CVE-2022-41881",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-41881 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2dfa1fa0-4211-59b0-9670-b4197d39237c",
      "id": "CVE-2022-41915",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-41915 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:347b58b6-e42f-5756-b983-9bcff867d27f",
      "id": "CVE-2023-34462",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-34462 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:78c3ac9b-2a07-5ada-bf99-a8d7ca139e59",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-44487 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ae60aa02-f41b-54f2-9d08-2867781b7fd5",
      "id": "CVE-2023-4586",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2023-4586 is a false positive for io.netty:netty-transport-rxtx 4.1.63.Final-tuxcare.1."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f2fcbd82-0507-54e3-9161-87e4e329c5c5",
      "id": "CVE-2024-29025",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-29025 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2537a83a-da36-5e84-ae0c-613393260b46",
      "id": "CVE-2024-47535",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-47535 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9208898c-8d52-581a-8ef5-543a68f705ea",
      "id": "CVE-2025-24970",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-24970 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:329e42bf-8a44-5de0-b562-8ec38881885e",
      "id": "CVE-2025-25193",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-25193 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:587f4fbd-0d55-527d-8cd2-e05670da9499",
      "id": "CVE-2025-55163",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-55163 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6ee626af-bd6d-5bba-805d-539b911c4350",
      "id": "CVE-2025-58056",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58056 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:087031f2-05d7-5295-8c64-245b349c99c5",
      "id": "CVE-2025-58057",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58057 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:30471a49-e31f-5cad-870a-dfa9d0dd9d80",
      "id": "CVE-2025-59419",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-59419 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a2da9ca4-cf69-580b-9330-d9b11a2027c2",
      "id": "CVE-2025-67735",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-67735 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:632de383-b8be-54a6-94a1-cee571e027ed",
      "id": "CVE-2026-33870",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33870 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0ba5bf73-0bdd-578f-aae4-6fe33fd78d17",
      "id": "CVE-2026-33871",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33871 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:605eb4d6-8c36-572f-82e8-a5d415c37919",
      "id": "CVE-2026-41417",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41417 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1e7e8a83-42e3-5ef0-b8ad-7e13bfa21f37",
      "id": "CVE-2026-42577",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42577 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:51dd6936-4a72-5773-bc9b-ed1804a20c81",
      "id": "CVE-2026-42578",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42578 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ce675641-e1fb-5263-8c4f-28234e67b07e",
      "id": "CVE-2026-42579",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42579 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:db055212-9319-5b5a-87d4-10dcbd7f8502",
      "id": "CVE-2026-42580",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42580 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c08e6232-c738-543d-b0b1-236ec21a083d",
      "id": "CVE-2026-42581",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42581 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cb63c17b-1c8b-58c7-8aa8-c36946acd1ca",
      "id": "CVE-2026-42583",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42583 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7150f630-fe90-591e-9fe4-696ea366a831",
      "id": "CVE-2026-42584",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42584 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:83220da8-b364-5736-a761-eb041321a24a",
      "id": "CVE-2026-42585",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42585 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:27476733-1b74-55bd-bf85-ce6d6a95fee0",
      "id": "CVE-2026-42586",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42586 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2aaf317f-2d68-5845-b1b6-50c6a66574d3",
      "id": "CVE-2026-42587",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42587 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4ce8167d-d39e-56a8-8d20-91afe7c9ebaa",
      "id": "CVE-2026-44248",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44248 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:99d72f66-066b-57d9-ae43-5bec5aa65682",
      "id": "CVE-2026-44249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44249 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:42cfd10b-ab7c-5748-811e-cb735aaa762e",
      "id": "CVE-2026-44250",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44250 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b6ced1f7-796e-5048-a8f4-6b9e5c2e4ef3",
      "id": "CVE-2026-44890",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44890 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:70de9bda-1495-5c44-a7fc-cb09acda5678",
      "id": "CVE-2026-44891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44891 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:76d33d55-3882-53c3-a038-321ab86f238a",
      "id": "CVE-2026-44893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44893 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:37fbdde3-f276-5ead-b3a9-e5b04642ffc9",
      "id": "CVE-2026-45416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45416 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4887cee4-c7d5-53e5-a0a1-e1b7f6823b9b",
      "id": "CVE-2026-45536",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45536 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2d9c5252-e994-5284-8b82-6dde023f7671",
      "id": "CVE-2026-45673",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45673 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a9838a93-302b-5dbd-804e-d73ecbf1336c",
      "id": "CVE-2026-45674",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45674 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8785742f-090d-5af4-9ee9-4492b65ef71c",
      "id": "CVE-2026-46340",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-46340 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:df5356ff-7add-5158-b844-6e611860ac7a",
      "id": "CVE-2026-47244",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47244 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cc94562a-b730-51e1-9942-c13b5f5dc1d0",
      "id": "CVE-2026-47691",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47691 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7065d89f-92ce-5360-b2f3-3eedba9d6fef",
      "id": "CVE-2026-48006",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48006 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6e27a782-7b2b-51bf-99e1-8a873f1161b3",
      "id": "CVE-2026-48043",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48043 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8df7de7a-e33f-59e6-b461-740b1bfff5b7",
      "id": "CVE-2026-48059",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48059 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fa51dc2d-c30d-5a03-9aae-c9a750631761",
      "id": "CVE-2026-50010",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50010 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:42bd2c01-42d3-5cbf-b160-44c214131112",
      "id": "CVE-2026-50011",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50011 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:96f410f5-de1f-52e3-9ea3-bd77922d3861",
      "id": "CVE-2026-50020",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50020 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:628c469e-ef52-5925-805b-599607e9ef2e",
      "id": "CVE-2026-50560",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50560 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:89153efe-eab3-58ad-87d5-4512218592e4",
      "id": "CVE-2026-55831",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55831 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7c4141cb-a0b9-5160-aa61-3b2248f55d83",
      "id": "CVE-2026-55833",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55833 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4cd6ff0a-0cf9-512a-ac70-eb2e46f2ccf3",
      "id": "CVE-2026-55851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55851 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5bdbe2f6-6881-5393-8fef-ce82ed26c981",
      "id": "CVE-2026-56745",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56745 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e177f86a-2dfe-5716-bf86-5eb9283ed161",
      "id": "CVE-2026-56746",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56746 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a3d057f2-d949-5491-b816-bea5ffe9c858",
      "id": "CVE-2026-56817",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-56817 does not affect version 4.1.63.Final-tuxcare.1 of io.netty:netty-transport-rxtx. not_affected \u2014 The Netty codec-xml module contains XmlDecoder, which instantiates an Aalto XML parser without security configuration (line 38: new InputFactoryImpl() with no XXE protection). However, this is a library component that Netty itself does not use in its own production code. The vulnerability only manifests when downstream applications explicitly add XmlDecoder to their Netty channel pipelines. Per..."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5c4d8932-0109-59f3-b3ba-1f9ce412ad3a",
      "id": "CVE-2026-59898",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59898 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:add3e7a8-a046-58da-9f53-9bc71878c341",
      "id": "CVE-2026-59899",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59899 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c5f46261-f1bd-5c7b-8c13-e29b1abc08b6",
      "id": "CVE-2026-59900",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59900 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f893925b-c928-5e45-83b6-2c2b8cf39cb4",
      "id": "CVE-2026-59901",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59901 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5d5d53b7-b8bb-5fbf-ba1d-d4d07b777f18",
      "id": "CVE-2026-59919",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59919 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6ee9c4c7-ea08-5c0d-8178-514cc2b8d17a",
      "id": "CVE-2026-59920",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59920 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ed008582-24f3-50ec-9022-f30bf0a5e350",
      "id": "CVE-2026-59921",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59921 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b74437eb-3aae-5ec7-9d29-c5f69142397b",
      "id": "GHSA-mfg7-5gfp-c4w3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:674fe357-2abd-509f-b5a6-90b4b4d9ad60",
      "id": "GHSA-v74w-7mr3-4qg3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:90128e62-645a-5e92-8a6d-edb11a6b33af",
      "id": "GHSA-xpw8-rcwv-8f8p",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-xpw8-rcwv-8f8p affects version 4.1.63.Final-tuxcare.1 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.1"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.1"
    }
  ]
}