{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:65a75a29-08fd-5f28-9368-1ffad2fedc68", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/io.netty/netty-all@4.1.122.Final-tuxcare.1", "type": "library", "group": "io.netty", "name": "netty-all", "version": "4.1.122.Final-tuxcare.1", "purl": "pkg:maven/io.netty/netty-all@4.1.122.Final-tuxcare.1" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:170f731a-7c6b-54b9-bb6c-e065fe053ff8", "id": "CVE-2025-55163", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-55163 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:da75b3e9-c76a-51d5-87c6-18723e0d27fc", "id": "CVE-2025-58056", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-58056 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:4ad05d53-8416-5632-972e-83f7f535cf83", "id": "CVE-2025-58057", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-58057 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:402c39cb-652d-5353-a10c-3b205818c3eb", "id": "CVE-2025-59419", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-59419 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:8ce458b6-73ae-5089-bac0-2b9adcd230b6", "id": "CVE-2025-67735", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-67735 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:e64192db-3a15-5f8a-b71c-ce799a2eb475", "id": "CVE-2026-33870", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33870 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:b3cb1e20-883a-5127-9dce-3ba67dd0c0d8", "id": "CVE-2026-33871", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33871 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:cc5195a6-b1ac-5b18-88f0-a288e1e207cc", "id": "CVE-2026-41417", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41417 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:760e1b68-dfa4-51c2-88fa-0f24f38cb951", "id": "CVE-2026-42577", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-42577 does not affect version 4.1.122.Final-tuxcare.1 of io.netty:netty-all. CVE-2026-42577 affects Netty 4.2.x only (advisory range >= 4.2.0.Final, < 4.2.13.Final). An fd left registered with an epoll event mask of 0 is woken forever by the unmaskable EPOLLERR/EPOLLHUP after a RST on a half-closed connection. Target 4.1.122.Final is NOT affected due to architectural differences. The patch modifies EpollIoHandler.java and EpollIoOps.java, part of 4.2's IoHandler/IoOps abstraction. Neither file exists in 4.1.x, which registers via EpollEventLoop.modify() off AbstractEpollChannel.flags. That field is seeded Native.EPOLLET, and no read/close/half-close path clears it (only the explicit pre-registration setEpollMode(LEVEL_TRIGGERED) opt-in), so the registration stays edge-triggered and the RST is reported once per edge instead of on every epoll_wait. The chain from INPUT (connection state change) to GOAL (CPU busy-loop via empty event mask) is broken at step (ii): the target cannot produce an empty event mask. Verdict: not_affected. Justification: code_not_reachable (Rule 5 Type A2)." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:1ddfe333-a68c-5b5d-81bd-239f5a81be3a", "id": "CVE-2026-42578", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42578 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:ed422340-06c8-5cef-976a-7c02ad36248c", "id": "CVE-2026-42579", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42579 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:a8e7a210-9bae-58e3-9250-df6c3299c3bc", "id": "CVE-2026-42580", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42580 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:fb2fe42d-c91a-584f-84b7-c09036daf523", "id": "CVE-2026-42581", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42581 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:e41ea0fc-0787-5709-803c-2fe928391065", "id": "CVE-2026-42583", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42583 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:4a90995b-b967-5930-8260-7d5d8fd13b3b", "id": "CVE-2026-42584", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42584 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:3164dc11-cadd-59e4-a8be-8c98cbfc00ed", "id": "CVE-2026-42585", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42585 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:0116d306-71ed-59cc-890d-ed0f96caf30e", "id": "CVE-2026-42586", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42586 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:4f9b4dcb-7b95-5608-9129-b81b81928f42", "id": "CVE-2026-42587", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42587 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:87ca2d1a-ee09-5c78-a1a8-89ae8a592eb4", "id": "CVE-2026-44248", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44248 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:2e3a2c35-a80a-5360-8809-b71ed5239cef", "id": "CVE-2026-44249", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44249 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:983d4772-bb83-5315-8c27-a60abf9ac4aa", "id": "CVE-2026-44250", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44250 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:a6659f85-2fa0-580f-96cd-b6966008e886", "id": "CVE-2026-44890", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44890 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:b11c6b35-1354-5598-878c-7262b7e86845", "id": "CVE-2026-44891", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44891 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:ca0b6d53-6502-572f-adf7-c2bebbaf242d", "id": "CVE-2026-44893", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44893 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:7ef86041-fa93-5b32-9aa8-0c55e9af7522", "id": "CVE-2026-45416", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45416 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:08797824-f688-562f-9eeb-c864f2de22fe", "id": "CVE-2026-45536", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45536 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:b488901e-8fd0-57e7-9369-f3a2cfeb02a8", "id": "CVE-2026-45673", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45673 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:34325f17-8911-53a5-96ac-efe25b152d21", "id": "CVE-2026-45674", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45674 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:81da56df-fd03-585b-80a4-b335fcc40074", "id": "CVE-2026-46340", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-46340 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:44cbe63a-5ef3-5910-9f3b-7f91941071ef", "id": "CVE-2026-47244", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47244 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:de807073-1ae7-5ac3-ac4b-35093a44848d", "id": "CVE-2026-47691", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47691 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:50f58746-1478-564e-948e-694c9b5d7126", "id": "CVE-2026-48006", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-48006 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:689446a6-5da9-5af0-a522-bef94d5dac31", "id": "CVE-2026-48043", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-48043 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:9be97a68-710f-546b-bff2-c968979a2c05", "id": "CVE-2026-48059", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-48059 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:4548573e-b12f-5451-bb4d-1f784df11906", "id": "CVE-2026-50010", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50010 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:0456b04c-afcd-597b-8d79-ab585fc90847", "id": "CVE-2026-50011", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50011 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:c4040890-f42d-5bb2-8833-4a9368b436ba", "id": "CVE-2026-50020", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50020 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:cab90947-f5ee-5af9-9e51-ca380130a5fd", "id": "CVE-2026-50560", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50560 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:faa344f0-3790-5fe3-b996-06fee299a380", "id": "CVE-2026-55831", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55831 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:4288b5b1-019e-53e1-a7e6-27e384475a45", "id": "CVE-2026-55833", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55833 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:9eab0a0a-d58e-5d11-9982-2ae595f7faba", "id": "CVE-2026-55851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55851 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:bba21197-7766-5989-a240-50ffaf7f6930", "id": "CVE-2026-56745", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56745 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:30f9d087-0b2c-5a0e-9d50-45af97666698", "id": "CVE-2026-56746", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56746 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:31ed8786-6373-538e-b3b3-e8774c93604d", "id": "CVE-2026-56817", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56817 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:9fe01209-7c87-5406-bbda-e38b53651e51", "id": "CVE-2026-56818", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56818 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:c12b9404-66ad-585d-a3b1-badc043da1a4", "id": "CVE-2026-56819", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56819 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:902cf3f9-e848-5c74-8930-9fc48e8da792", "id": "CVE-2026-56820", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56820 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:e4bb48b6-7c65-5fc5-a048-98b93f57ab99", "id": "CVE-2026-56821", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56821 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:dd6f5019-0e6f-53ea-9204-4b164124e78f", "id": "CVE-2026-56822", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56822 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:ec7bfa39-1c62-59b7-8481-b7cdb115afa3", "id": "CVE-2026-59898", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59898 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:9e3a4b52-ab0c-545d-b524-8321a994cf5e", "id": "CVE-2026-59899", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59899 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:387bb2b1-68be-5129-9d76-3b025ed692ef", "id": "CVE-2026-59900", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59900 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:b3a0c6c8-ade6-5776-8dfc-5871fb678c49", "id": "CVE-2026-59901", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59901 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:a3cd4f65-1589-5173-a6d8-b05a8dd21d75", "id": "CVE-2026-59902", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59902 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:19d4f751-4772-5188-8214-111a23bb87a0", "id": "CVE-2026-59903", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59903 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:2594d061-ce5f-514d-b903-6fed65ff9f42", "id": "CVE-2026-59919", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59919 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:af0bd6a7-eeb8-5c63-b8fe-6e334228f0a5", "id": "CVE-2026-59920", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59920 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:4b17ede2-7577-55e8-a516-8a9f712ea58d", "id": "CVE-2026-59921", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59921 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:fd43d410-d2cf-5e0f-bbf5-3cbadcfa9c25", "id": "CVE-2026-73507", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-73507 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:6780cddd-b87c-5683-b8ba-542136acf37b", "id": "CVE-2026-73508", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-73508 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:7e61b732-1765-5df8-a25a-16dd4b9d4c70", "id": "GHSA-mfg7-5gfp-c4w3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:3766f890-cea8-5f8d-912e-f783199d3b98", "id": "GHSA-v74w-7mr3-4qg3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.122.Final-tuxcare.1" } ] } ], "dependencies": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.122.Final-tuxcare.1" } ] }