{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:4f5a775e-8d90-563f-96c5-303c7e5a49b3",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/io.netty/netty-transport-udt@4.1.63.Final-tuxcare.3",
      "type": "library",
      "group": "io.netty",
      "name": "netty-transport-udt",
      "version": "4.1.63.Final-tuxcare.3",
      "purl": "pkg:maven/io.netty/netty-transport-udt@4.1.63.Final-tuxcare.3"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:7c7b5f77-8ea0-55d2-afeb-b890d3722f9a",
      "id": "CVE-2021-37136",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-37136 is fixed in version 4.1.63.Final-tuxcare.3 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:93a2e3bc-e105-59e9-99ad-bdf48e2be7f6",
      "id": "CVE-2021-37137",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-37137 is fixed in version 4.1.63.Final-tuxcare.3 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8bfb446f-0b66-5c5b-bbe7-63b354cd664c",
      "id": "CVE-2021-43797",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-43797 is fixed in version 4.1.63.Final-tuxcare.3 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5ec9ab62-9544-5b09-a285-854747e0a3e7",
      "id": "CVE-2022-24823",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-24823 is fixed in version 4.1.63.Final-tuxcare.3 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a6da9607-8256-5c45-afe7-db4e465bc1f5",
      "id": "CVE-2022-41881",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-41881 is fixed in version 4.1.63.Final-tuxcare.3 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:925dcdf0-99fc-586d-b46e-dacba7d98d20",
      "id": "CVE-2022-41915",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-41915 is fixed in version 4.1.63.Final-tuxcare.3 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:db15c1e1-bb6a-534b-9785-6c0ae6164ba2",
      "id": "CVE-2023-34462",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-34462 is fixed in version 4.1.63.Final-tuxcare.3 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0fb3a961-32e6-5390-8f3b-132147ccbbc4",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-44487 is fixed in version 4.1.63.Final-tuxcare.3 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:db33da7b-f221-5079-9e16-8e4e7c6be9f3",
      "id": "CVE-2023-4586",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2023-4586 is a false positive for io.netty:netty-transport-udt 4.1.63.Final-tuxcare.3."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cd88f700-a5a5-58d6-b6c1-c9e25be4eadd",
      "id": "CVE-2024-29025",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-29025 is fixed in version 4.1.63.Final-tuxcare.3 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6b59214e-3fdc-53b9-be2c-fc914c82b7af",
      "id": "CVE-2024-47535",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-47535 is fixed in version 4.1.63.Final-tuxcare.3 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ea102781-930d-5296-8e94-05e4d6a2f546",
      "id": "CVE-2025-24970",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-24970 is fixed in version 4.1.63.Final-tuxcare.3 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:16feee69-92f8-5fdb-a952-59bde8cc84b2",
      "id": "CVE-2025-25193",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-25193 is fixed in version 4.1.63.Final-tuxcare.3 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:deee3616-dc2b-57f3-af90-d86604b75856",
      "id": "CVE-2025-55163",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55163 is fixed in version 4.1.63.Final-tuxcare.3 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:734ff39c-f8f9-52ba-ae95-cdcccbb1f0cd",
      "id": "CVE-2025-58056",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58056 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:af7edcd5-c80c-59f9-a253-3fa37b79dfe7",
      "id": "CVE-2025-58057",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-58057 is fixed in version 4.1.63.Final-tuxcare.3 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e2ba07a6-0634-5030-bc49-d882ded9bbd3",
      "id": "CVE-2025-59419",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-59419 is fixed in version 4.1.63.Final-tuxcare.3 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e37af4c3-8ae3-5e0f-9ae6-7439ed219cc9",
      "id": "CVE-2025-67735",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-67735 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f1c6665c-ef5d-5760-a1e8-954bc4b05c5a",
      "id": "CVE-2026-33870",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33870 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a74b2b53-4f3a-5e2e-ad57-1f1c45a47e4e",
      "id": "CVE-2026-33871",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33871 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a77eae88-97ca-5afb-b75f-876bf3b1085e",
      "id": "CVE-2026-41417",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41417 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f7af0867-428f-5a29-bece-3316b33a1582",
      "id": "CVE-2026-42577",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42577 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a7f186d7-043c-5596-8370-9d6e1e9e6b94",
      "id": "CVE-2026-42578",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42578 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ed99e580-1ac9-56e5-85ac-0f16582aa684",
      "id": "CVE-2026-42579",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42579 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9543bda6-9699-5ef3-9d65-2ab67a80ab65",
      "id": "CVE-2026-42580",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42580 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5b899886-655f-5faa-a318-364640b44f29",
      "id": "CVE-2026-42581",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42581 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f7274057-37e9-5695-a0a4-c1cb6cf8cd66",
      "id": "CVE-2026-42583",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42583 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ebd07d87-128a-5bf0-ac5b-998e3cc1d238",
      "id": "CVE-2026-42584",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42584 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a4cbb539-869a-5a50-a3ed-67e6036952f7",
      "id": "CVE-2026-42585",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42585 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:05fadbbe-b5ea-5edb-8e6f-ca12ff3eb992",
      "id": "CVE-2026-42586",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42586 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1b3f0788-c12d-50f0-84f4-1decad135c55",
      "id": "CVE-2026-42587",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42587 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4a836710-e677-5e90-aa05-9aa0ca26c671",
      "id": "CVE-2026-44248",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44248 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e24f91cc-405a-559d-98f9-06fe01fc516d",
      "id": "CVE-2026-44249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44249 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:403c98d2-4489-54ba-8a25-e8cfe640667a",
      "id": "CVE-2026-44250",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44250 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:60da11c0-c6f0-581d-84b7-519ee42ad3f0",
      "id": "CVE-2026-44890",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44890 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:02b949bd-b025-53f9-abc9-106adce94f9f",
      "id": "CVE-2026-44891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44891 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:94b57697-a962-5487-a9d5-54cd31c66e71",
      "id": "CVE-2026-44893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44893 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cc19af59-d686-5fae-b262-783a66acc703",
      "id": "CVE-2026-45416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45416 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:586d26cf-ebae-5606-ac75-fb0dd18ed97c",
      "id": "CVE-2026-45536",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45536 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2ba7a3c7-030a-5611-94fd-8ad3bc75bcc0",
      "id": "CVE-2026-45673",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45673 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:087071f2-0a2c-5beb-9619-c92a2066df2a",
      "id": "CVE-2026-45674",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45674 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5b83b2ec-ec99-59fc-9123-c4f1bc272be6",
      "id": "CVE-2026-46340",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-46340 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:93e48bf2-659c-5937-ac99-4c7087b656b1",
      "id": "CVE-2026-47244",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47244 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cdfae34a-7cc1-53d0-8614-362bff22ada6",
      "id": "CVE-2026-47691",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47691 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a87ac108-35d4-558c-bcf6-3636f36bbcf0",
      "id": "CVE-2026-48006",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48006 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3e84a1a9-7ce3-534c-83c0-c00e2872631b",
      "id": "CVE-2026-48043",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48043 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4c6275c0-563e-54b7-b068-5e11807fe924",
      "id": "CVE-2026-48059",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48059 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ef47189b-39cb-5fce-b7b0-12acccf01ed3",
      "id": "CVE-2026-50010",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50010 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:93a6577c-3f49-572e-b44d-320c77d733ca",
      "id": "CVE-2026-50011",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50011 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0686ed25-6762-5e1d-8a0e-589583578d1c",
      "id": "CVE-2026-50020",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50020 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fe154bdd-5631-516a-a4d7-d79ebb5738cb",
      "id": "CVE-2026-50560",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50560 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4209c5a8-f4a4-55a7-8000-4a23f965237a",
      "id": "CVE-2026-55831",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55831 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f6c8866f-e5c4-57db-aa88-78c38b6fa1a1",
      "id": "CVE-2026-55833",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55833 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:84d72261-22d2-52f6-b8bc-049d44bf47b9",
      "id": "CVE-2026-55851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55851 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:21200069-feee-5bd3-8973-f0479e802ad0",
      "id": "CVE-2026-56745",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56745 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e8ad68e3-e0f0-529e-a5d8-b33ceed21ee4",
      "id": "CVE-2026-56746",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56746 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:973eaeec-4de2-5d10-be91-6f473f55ebae",
      "id": "CVE-2026-56817",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-56817 does not affect version 4.1.63.Final-tuxcare.3 of io.netty:netty-transport-udt. not_affected \u2014 The Netty codec-xml module contains XmlDecoder, which instantiates an Aalto XML parser without security configuration (line 38: new InputFactoryImpl() with no XXE protection). However, this is a library component that Netty itself does not use in its own production code. The vulnerability only manifests when downstream applications explicitly add XmlDecoder to their Netty channel pipelines. Per..."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a9a09bb9-3c63-584a-8884-6c3717b4f9c3",
      "id": "CVE-2026-59898",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59898 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8c6b3b52-9203-5352-891b-ca3220dfabb4",
      "id": "CVE-2026-59899",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59899 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a3510954-41c1-5bf9-b025-c58fdbcaa10f",
      "id": "CVE-2026-59900",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59900 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cfad7976-152e-562c-85c6-d69dbc9f3948",
      "id": "CVE-2026-59901",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59901 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8b044583-e1e7-52d2-a1be-78943f155d08",
      "id": "CVE-2026-59919",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59919 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d9cece59-9bcc-546d-90a8-b0c3062fdb7d",
      "id": "CVE-2026-59920",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59920 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e76220f2-52f6-5fec-932e-0ab4994ca14d",
      "id": "CVE-2026-59921",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59921 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:02dcdde7-f04a-5855-a181-c6ebcabcb5e2",
      "id": "GHSA-mfg7-5gfp-c4w3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e9dc6a14-f363-5793-bc8b-d97d69ebca61",
      "id": "GHSA-v74w-7mr3-4qg3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.63.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5b4792da-7667-5bcd-aa74-a9f6dbc8902f",
      "id": "GHSA-xpw8-rcwv-8f8p",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-xpw8-rcwv-8f8p affects version 4.1.63.Final-tuxcare.3 of io.netty:netty-transport-udt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.63.Final-tuxcare.3"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.63.Final-tuxcare.3"
    }
  ]
}