{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:f41a37c2-e332-5f0c-b3b8-7576f272f8b0",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.92.Final-tuxcare.4",
      "type": "library",
      "group": "io.netty",
      "name": "netty-transport-sctp",
      "version": "4.1.92.Final-tuxcare.4",
      "purl": "pkg:maven/io.netty/netty-transport-sctp@4.1.92.Final-tuxcare.4"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:adf36c9c-93a6-5f57-934a-5789bfd8c4d5",
      "id": "CVE-2023-34462",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-34462 is fixed in version 4.1.92.Final-tuxcare.4 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.92.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:63a9094d-4ee2-5cb5-bdc0-c39d81618612",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-44487 is fixed in version 4.1.92.Final-tuxcare.4 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.92.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:804f662b-1ac3-56b9-a967-03bca2126a52",
      "id": "CVE-2023-4586",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2023-4586 is a false positive for io.netty:netty-transport-sctp 4.1.92.Final-tuxcare.4."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.92.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a707989a-87cc-57d3-bbd4-53cc6db213db",
      "id": "CVE-2024-29025",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-29025 is fixed in version 4.1.92.Final-tuxcare.4 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.92.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:86d65ef4-f322-5f21-914d-a5c2dd805b5f",
      "id": "CVE-2024-47535",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-47535 is fixed in version 4.1.92.Final-tuxcare.4 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.92.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b3376bc0-b119-5665-8fca-9888ccb2ba89",
      "id": "CVE-2025-24970",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-24970 is fixed in version 4.1.92.Final-tuxcare.4 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.92.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b133ecab-5744-5925-8ea8-3fe65ffba08e",
      "id": "CVE-2025-25193",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-25193 affects version 4.1.92.Final-tuxcare.4 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.92.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2702a339-a936-577a-b577-191efe45d111",
      "id": "CVE-2025-55163",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55163 is fixed in version 4.1.92.Final-tuxcare.4 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.92.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:04dddf62-89b5-519e-9d8f-36d2002a306c",
      "id": "CVE-2025-58056",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-58056 is fixed in version 4.1.92.Final-tuxcare.4 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.92.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:57d2b22c-bd88-5812-8055-d2a2c5ba3104",
      "id": "CVE-2025-58057",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58057 affects version 4.1.92.Final-tuxcare.4 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.92.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6a6d859c-8431-578f-afce-35b74e6de0be",
      "id": "CVE-2025-59419",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-59419 is fixed in version 4.1.92.Final-tuxcare.4 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.92.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5ae71e09-2b08-5119-9390-c91ff1115358",
      "id": "CVE-2025-67735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-67735 is fixed in version 4.1.92.Final-tuxcare.4 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.92.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2dbab0b8-9a7f-5b5e-be9e-aefbfafe08e7",
      "id": "CVE-2026-33870",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-33870 is fixed in version 4.1.92.Final-tuxcare.4 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.92.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cb3732e4-fed5-59d0-ab2c-e4ef3df2c2fd",
      "id": "CVE-2026-33871",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33871 affects version 4.1.92.Final-tuxcare.4 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.92.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5179194a-4f67-5a42-923d-d2a0c1babc13",
      "id": "CVE-2026-41417",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41417 affects version 4.1.92.Final-tuxcare.4 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.92.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ebdb6b22-ffc0-5e4c-84c0-e5c96177ac93",
      "id": "CVE-2026-42577",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42577 affects version 4.1.92.Final-tuxcare.4 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.92.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f250140f-5e47-5319-8227-2b851ef817bf",
      "id": "CVE-2026-42578",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42578 affects version 4.1.92.Final-tuxcare.4 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.92.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3e1e547c-8fdd-52b5-8e1b-80644288eb13",
      "id": "CVE-2026-42579",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42579 is fixed in version 4.1.92.Final-tuxcare.4 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.92.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:686f3837-831b-5020-badf-9752db51d21f",
      "id": "CVE-2026-42580",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42580 affects version 4.1.92.Final-tuxcare.4 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.92.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2a1987fd-3436-5422-a65f-7f72e6e901e2",
      "id": "CVE-2026-42581",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42581 is fixed in version 4.1.92.Final-tuxcare.4 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.92.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bd747a8a-90a3-5812-ad10-a2a76b8b4d86",
      "id": "CVE-2026-42583",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42583 affects version 4.1.92.Final-tuxcare.4 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.92.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f1903e37-628b-5418-a3d2-a00dd17c1c2d",
      "id": "CVE-2026-42584",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42584 affects version 4.1.92.Final-tuxcare.4 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.92.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0de8a617-af50-56cb-b5de-70e3715af89a",
      "id": "CVE-2026-42585",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42585 affects version 4.1.92.Final-tuxcare.4 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.92.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:670f4db0-ce22-5905-9c0c-1b22e916164f",
      "id": "CVE-2026-42586",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42586 affects version 4.1.92.Final-tuxcare.4 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.92.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f93b905c-2764-5317-adf4-b0f9ae2a7df7",
      "id": "CVE-2026-42587",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42587 affects version 4.1.92.Final-tuxcare.4 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.92.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ef260b2a-c9e5-5c7b-8fd3-b3bb899210d6",
      "id": "CVE-2026-44248",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44248 affects version 4.1.92.Final-tuxcare.4 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.92.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c57bf039-11c6-58dd-9f75-b91426be2b89",
      "id": "CVE-2026-44249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44249 affects version 4.1.92.Final-tuxcare.4 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.92.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cb65f5e9-0054-5f1a-b2b1-e425f01deea2",
      "id": "CVE-2026-44250",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44250 affects version 4.1.92.Final-tuxcare.4 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.92.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:178bd9a9-ddc5-59cb-a79e-cd65422f080c",
      "id": "CVE-2026-44890",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.92.Final-tuxcare.4 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.92.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d8158cc5-f2a5-5bb3-9286-337423182c19",
      "id": "CVE-2026-44891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44891 affects version 4.1.92.Final-tuxcare.4 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.92.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3fd07cfa-045b-593a-9f80-3e98071b6c4e",
      "id": "CVE-2026-44893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44893 affects version 4.1.92.Final-tuxcare.4 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.92.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c9519459-5033-5f21-874c-3b6ca581d8aa",
      "id": "CVE-2026-45416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45416 affects version 4.1.92.Final-tuxcare.4 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.92.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:91ac9fb4-e736-5869-9f42-d34f0603ca2f",
      "id": "CVE-2026-45536",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45536 affects version 4.1.92.Final-tuxcare.4 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.92.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3fc7c7dc-4fec-53f0-bbc9-aa6e0e37ca4a",
      "id": "CVE-2026-45673",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45673 affects version 4.1.92.Final-tuxcare.4 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.92.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6f556ec2-2aca-5df1-a2db-3a766eb74528",
      "id": "CVE-2026-45674",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45674 affects version 4.1.92.Final-tuxcare.4 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.92.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3d29b258-3aca-5eb5-b25c-f548ba93b221",
      "id": "CVE-2026-46340",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-46340 is fixed in version 4.1.92.Final-tuxcare.4 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.92.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:78f7bea9-ff40-5ff2-add9-0fd443079d16",
      "id": "CVE-2026-47244",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47244 affects version 4.1.92.Final-tuxcare.4 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.92.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:557d9dc0-1a6c-543e-9904-bc73a6386799",
      "id": "CVE-2026-47691",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47691 affects version 4.1.92.Final-tuxcare.4 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.92.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:66b6f01d-bc76-5608-b5af-a5f28fb75668",
      "id": "CVE-2026-48006",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48006 affects version 4.1.92.Final-tuxcare.4 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.92.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5d21ce4c-551b-5f34-a55c-db1a89551525",
      "id": "CVE-2026-48043",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-48043 does not affect version 4.1.92.Final-tuxcare.4 of io.netty:netty-transport-sctp. not_affected \u2014 The target repository (Netty 4.1.92.Final-tuxcare.3) is not affected by CVE-2026-48043. The vulnerability exists in a newer architectural pattern (ChannelInboundHandlerAdapter-based decompression handling) that was introduced after version 4.1.92. The target uses an older architecture that processes HTTP/2 decompression directly in the onDataRead() method with existing try-finally protection."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.92.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1defef59-e351-5a51-872d-a08bb140de1a",
      "id": "CVE-2026-48059",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48059 affects version 4.1.92.Final-tuxcare.4 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.92.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5c1e9e63-87b6-5489-b8e8-a2aba1cd3095",
      "id": "CVE-2026-50010",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50010 affects version 4.1.92.Final-tuxcare.4 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.92.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f6a050c5-26f5-52d1-ad91-8783d352f3b3",
      "id": "CVE-2026-50011",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50011 affects version 4.1.92.Final-tuxcare.4 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.92.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:31a3688c-7d13-5dd8-b81f-ff1fe650f5a7",
      "id": "CVE-2026-50020",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50020 affects version 4.1.92.Final-tuxcare.4 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.92.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7a4738a5-db5f-5001-90eb-92a4320f1664",
      "id": "CVE-2026-50560",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.92.Final-tuxcare.4 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.92.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ed64c322-e587-58dd-9f70-b3d8b45dabf6",
      "id": "CVE-2026-55831",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55831 affects version 4.1.92.Final-tuxcare.4 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.92.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:668b4c94-e5e8-5ffe-a89a-1115e83c75b2",
      "id": "CVE-2026-55833",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55833 affects version 4.1.92.Final-tuxcare.4 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.92.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2044945a-1794-5cf6-b939-c5a004bd21e0",
      "id": "CVE-2026-55851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55851 affects version 4.1.92.Final-tuxcare.4 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.92.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0b0983e3-6e68-5287-8b7a-02d27f2506ed",
      "id": "CVE-2026-56745",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56745 affects version 4.1.92.Final-tuxcare.4 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.92.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dd9f80e2-2b3c-5794-955b-37c7442d3ada",
      "id": "CVE-2026-56746",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56746 affects version 4.1.92.Final-tuxcare.4 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.92.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:222dcc6b-9401-5e3e-9184-f2eedf68b968",
      "id": "CVE-2026-56817",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56817 affects version 4.1.92.Final-tuxcare.4 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.92.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:715f21fe-e44d-5b39-af61-553a0eabee42",
      "id": "CVE-2026-56820",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56820 affects version 4.1.92.Final-tuxcare.4 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.92.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:18ecaea3-24e2-5b22-8d31-eaa350a44692",
      "id": "CVE-2026-56821",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56821 affects version 4.1.92.Final-tuxcare.4 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.92.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:31456339-f677-5519-a9a3-a6d8f06c326f",
      "id": "CVE-2026-56822",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56822 affects version 4.1.92.Final-tuxcare.4 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.92.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d63a2331-8bd0-5b78-84c3-663056645617",
      "id": "CVE-2026-59898",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59898 affects version 4.1.92.Final-tuxcare.4 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.92.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fe5674dd-670f-5cef-85c0-bf30c09562dd",
      "id": "CVE-2026-59899",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59899 affects version 4.1.92.Final-tuxcare.4 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.92.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a7b3c42b-c354-5205-8b6e-318d27b25c37",
      "id": "CVE-2026-59900",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59900 affects version 4.1.92.Final-tuxcare.4 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.92.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0bc6da52-8c02-5f9b-905a-e874c2051ab2",
      "id": "CVE-2026-59901",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59901 affects version 4.1.92.Final-tuxcare.4 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.92.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dc91a001-25ee-52e1-bd26-a15ab5eb5534",
      "id": "CVE-2026-59919",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59919 affects version 4.1.92.Final-tuxcare.4 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.92.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5da1b9b0-9528-55fd-8ffe-6666ace1dc99",
      "id": "CVE-2026-59920",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59920 affects version 4.1.92.Final-tuxcare.4 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.92.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e0979408-96af-5249-8009-fff6c75c8506",
      "id": "CVE-2026-59921",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59921 affects version 4.1.92.Final-tuxcare.4 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.92.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:116e5be2-a3df-5bee-9479-994e23dcb108",
      "id": "GHSA-mfg7-5gfp-c4w3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.92.Final-tuxcare.4 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.92.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1bad6601-8296-594f-983e-59443dabf700",
      "id": "GHSA-v74w-7mr3-4qg3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.92.Final-tuxcare.4 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.92.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3a1c4937-de7a-5bf9-9b76-4c65cfae1965",
      "id": "GHSA-xpw8-rcwv-8f8p",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability GHSA-xpw8-rcwv-8f8p does not affect version 4.1.92.Final-tuxcare.4 of io.netty:netty-transport-sctp. The version is not vulnerable. [terminalized not_affected from patch_application_manual/not_vulnerable]"
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.92.Final-tuxcare.4"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.92.Final-tuxcare.4"
    }
  ]
}