{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:94737c5b-2e19-5ed1-bdb3-eeff54f440c6", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/io.netty/netty-all@4.1.122.Final-tuxcare.2", "type": "library", "group": "io.netty", "name": "netty-all", "version": "4.1.122.Final-tuxcare.2", "purl": "pkg:maven/io.netty/netty-all@4.1.122.Final-tuxcare.2" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:25a7a1ca-10e7-5051-86e6-50b1b8cdd735", "id": "CVE-2025-55163", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55163 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:0cb57f31-c76b-5ebb-8aa0-5a3e77688f03", "id": "CVE-2025-58056", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-58056 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:c9c7f6f1-26f6-5e81-8f8c-6463f7dfa246", "id": "CVE-2025-58057", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-58057 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:52132ee3-418c-5524-b34a-5bb652d7676f", "id": "CVE-2025-59419", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59419 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:20c53d9e-42ad-5e5c-8d31-620aebb4f0c2", "id": "CVE-2025-67735", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-67735 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:01015742-b4a7-54a0-ac13-b84f72351b39", "id": "CVE-2026-33870", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33870 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:a83a7a52-5f8b-5e4e-9b64-0e5f99148e0f", "id": "CVE-2026-33871", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33871 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:ac065487-f1f5-582e-a207-90283d028a19", "id": "CVE-2026-41417", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41417 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:10b5cee8-1393-5be7-ad58-e596be5555e8", "id": "CVE-2026-42577", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-42577 does not affect version 4.1.122.Final-tuxcare.2 of io.netty:netty-all. CVE-2026-42577 affects Netty 4.2.x only (advisory range >= 4.2.0.Final, < 4.2.13.Final). An fd left registered with an epoll event mask of 0 is woken forever by the unmaskable EPOLLERR/EPOLLHUP after a RST on a half-closed connection. Target 4.1.122.Final is NOT affected due to architectural differences. The patch modifies EpollIoHandler.java and EpollIoOps.java, part of 4.2's IoHandler/IoOps abstraction. Neither file exists in 4.1.x, which registers via EpollEventLoop.modify() off AbstractEpollChannel.flags. That field is seeded Native.EPOLLET, and no read/close/half-close path clears it (only the explicit pre-registration setEpollMode(LEVEL_TRIGGERED) opt-in), so the registration stays edge-triggered and the RST is reported once per edge instead of on every epoll_wait. The chain from INPUT (connection state change) to GOAL (CPU busy-loop via empty event mask) is broken at step (ii): the target cannot produce an empty event mask. Verdict: not_affected. Justification: code_not_reachable (Rule 5 Type A2)." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:1c8f3e39-fada-5882-b74a-2a212bd70c61", "id": "CVE-2026-42578", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42578 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:3b9f8bcd-724c-55e4-9b92-98498acaaa51", "id": "CVE-2026-42579", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42579 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:f3714c31-cea7-566c-86eb-d86146cc0f85", "id": "CVE-2026-42580", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42580 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:1bf65c33-90fe-5d5c-832e-32cefd4a3f27", "id": "CVE-2026-42581", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42581 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:adb9df6c-95a0-548b-80c3-dfbe0cb860c1", "id": "CVE-2026-42583", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42583 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:122aae3c-a4ea-5241-a59b-31e3eb67e6a7", "id": "CVE-2026-42584", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42584 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:4cb14837-5571-59d5-876d-a32cc6df3dbd", "id": "CVE-2026-42585", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42585 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:8b5c725f-c7ec-5bc2-8b69-d67de45e6e35", "id": "CVE-2026-42586", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42586 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:818cc5ec-97b3-53f9-9fba-119ebc669740", "id": "CVE-2026-42587", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42587 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:60e832fc-f97b-5925-8c84-b3d8f34d38db", "id": "CVE-2026-44248", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44248 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:67d3eafe-e7d3-5521-9578-b4a9da4a0115", "id": "CVE-2026-44249", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44249 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:212bbcad-e872-55f6-88fc-229a6e2c4747", "id": "CVE-2026-44250", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44250 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:2cb60523-a670-5861-be1f-5ff0ff1d32db", "id": "CVE-2026-44890", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:ae9748ac-c47b-5298-9525-b33bf8d50f6a", "id": "CVE-2026-44891", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44891 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:d6362996-0664-5022-96aa-fba4b6416767", "id": "CVE-2026-44893", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44893 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:94076aba-cb75-5e0a-b190-719342c03c91", "id": "CVE-2026-45416", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-45416 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:a9130fe3-8fa9-55b9-b8bc-15270e2f78f2", "id": "CVE-2026-45536", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-45536 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:e4ff33cc-3928-5a96-96e8-bfb3184a32a1", "id": "CVE-2026-45673", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-45673 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:103d7b5c-d13c-53b6-ba3a-6a0ffb742bff", "id": "CVE-2026-45674", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-45674 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:9b239b1b-68aa-52e2-aece-4b9e9f6bfe85", "id": "CVE-2026-46340", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46340 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:ffccc88b-9729-513c-b83c-8c135df76248", "id": "CVE-2026-47244", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47244 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:e15e0f76-a8cf-5023-a266-04d58cb30ee9", "id": "CVE-2026-47691", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47691 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:c57d90d7-1861-586f-b394-e6cd523944b2", "id": "CVE-2026-48006", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48006 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:0568fcd0-b57a-5969-a118-2822c7666ee2", "id": "CVE-2026-48043", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48043 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:96b47483-65fd-5382-b762-8e9ddf10bf53", "id": "CVE-2026-48059", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48059 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:ef306602-7afb-5da8-b70c-44acbe436cc4", "id": "CVE-2026-50010", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50010 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:a7485e02-0c3d-55e3-8837-e7b279184dfe", "id": "CVE-2026-50011", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50011 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:847b10c1-05d0-5eaf-9256-3dcbbda9b7a0", "id": "CVE-2026-50020", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50020 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:6f80271c-4f2f-513a-b9d0-45e87bbc5ce3", "id": "CVE-2026-50560", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:103f2474-e7db-52e7-9c7e-1e9e5784c72e", "id": "CVE-2026-55831", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-55831 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:cb4efde9-2231-563f-adbd-72bb399b82c6", "id": "CVE-2026-55833", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-55833 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:e5441c1a-d48e-569c-8948-2c132493ed9e", "id": "CVE-2026-55851", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-55851 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:18122d0d-e168-5edf-8500-37e9abc6d156", "id": "CVE-2026-56745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56745 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:9edab4f8-a3cc-5b66-850e-03a8682178ac", "id": "CVE-2026-56746", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56746 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:c0464b92-6431-5818-b4f7-484aba11eb59", "id": "CVE-2026-56817", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56817 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:f1f5f72a-f913-5f40-94ec-c13a464bb9f2", "id": "CVE-2026-56818", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56818 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:0232648c-7d25-5a35-aad1-544e8870e014", "id": "CVE-2026-56819", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56819 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:92861654-4e80-5431-bd8b-8890fbdb2a99", "id": "CVE-2026-56820", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56820 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:e17a199f-7c6c-56b0-bfa0-4ee38a31ef77", "id": "CVE-2026-56821", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56821 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:a8986814-1d7c-582d-a3ae-70f496e43fdf", "id": "CVE-2026-56822", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56822 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:4221f0dc-a546-5912-ba2c-a9ba67c5ee25", "id": "CVE-2026-59898", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59898 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:d540e81c-ef83-539a-b5f3-56d7a5585ed4", "id": "CVE-2026-59899", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59899 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:4f27c591-383c-5d9a-b2dc-1970759c731a", "id": "CVE-2026-59900", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59900 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:abeb6732-0f26-5e9e-b815-dcd2baeb3e53", "id": "CVE-2026-59901", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59901 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:a6e2fd8d-d1a4-5fb0-816e-80309cccc72d", "id": "CVE-2026-59902", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59902 affects version 4.1.122.Final-tuxcare.2 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:56686af1-e289-5c64-8a39-8365a871642a", "id": "CVE-2026-59903", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59903 affects version 4.1.122.Final-tuxcare.2 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:fefd01a7-d4b4-5f41-84b3-21d06a94144f", "id": "CVE-2026-59919", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59919 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:04ded03c-593b-583d-b3b4-8d2535d783a8", "id": "CVE-2026-59920", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59920 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:5e4e7ce7-559a-57e1-8af4-a1bcf6bb83f0", "id": "CVE-2026-59921", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59921 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:bc92f587-8f4e-570f-a7cb-3588d8248c32", "id": "CVE-2026-73507", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-73507 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:6327ca3a-ed66-5625-85d2-3e5613622c6d", "id": "CVE-2026-73508", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-73508 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:f22ab37b-ba81-5115-b4c0-cdf60b2abfce", "id": "GHSA-mfg7-5gfp-c4w3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.122.Final-tuxcare.2 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:91c9d6c6-93b9-5faa-b5ca-db29c856050b", "id": "GHSA-v74w-7mr3-4qg3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.122.Final-tuxcare.2 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.122.Final-tuxcare.2" } ] } ], "dependencies": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.122.Final-tuxcare.2" } ] }