{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:3a7554ff-3d2b-5fcd-ac6b-94bb719e9b28", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.1", "type": "library", "group": "io.netty", "name": "netty-all", "version": "4.1.130.Final-tuxcare.1", "purl": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.1" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:0c60ba21-a121-5cea-a707-1de67d649eb9", "id": "CVE-2025-55163", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-55163 does not affect version 4.1.130.Final-tuxcare.1 of io.netty:netty-all. already_fixed \u2014 The target Netty 4.1.130.Final repository already contains the complete MadeYouReset (CVE-2025-55163) mitigation. The Http2MaxRstFrameLimitEncoder defense class is present, integrated into the HTTP/2 connection handler builder, and enabled by default for servers with a threshold of 200 RST_STREAM frames per 30-second window. All protocol-error-triggered RST writes route through the protected en..." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:8ce0126b-4f92-5a1e-b321-32d8fe55717a", "id": "CVE-2026-33870", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33870 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:667e250e-43dc-5009-9aec-792282827e6f", "id": "CVE-2026-33871", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33871 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:0828b947-8606-5ab3-99a5-025a7954e023", "id": "CVE-2026-41417", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41417 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:a06845d0-2a5f-58b6-b629-a6b5c9884bb3", "id": "CVE-2026-42578", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42578 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:8c624b39-11c7-55c5-9a7f-7c1da3d25399", "id": "CVE-2026-42579", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42579 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:05893435-31ae-5d74-95e4-62c5bb7c8aba", "id": "CVE-2026-42580", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42580 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:8c127cd8-9f68-5680-81e7-262af1fe77bc", "id": "CVE-2026-42581", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42581 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:28bdef2a-ad30-5a6e-b954-bc8a6bbfff70", "id": "CVE-2026-42583", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42583 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:fea66abc-50d5-5dd6-a535-0f30bbba5cb6", "id": "CVE-2026-42584", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42584 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:f8e67d57-d4b6-5f65-8978-9873cc04cdfd", "id": "CVE-2026-42585", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42585 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:754caf7f-2573-5485-ab12-e2ac9a7ca03d", "id": "CVE-2026-42586", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42586 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:5d706227-bba7-5d46-803c-fb917870e268", "id": "CVE-2026-42587", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42587 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:b79a7fd5-d579-5193-9295-44db1ac62bf5", "id": "CVE-2026-44248", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44248 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:3c7062ac-8487-5f2f-b105-ac6d31f6d415", "id": "CVE-2026-44249", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44249 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:314a9ac7-8c0c-53ac-a700-8e732dd1420b", "id": "CVE-2026-44250", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44250 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:804039df-c10c-5b60-838b-e853f34476a0", "id": "CVE-2026-44890", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:6699676b-4367-553e-84ce-ceb506d2b6ab", "id": "CVE-2026-44891", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44891 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:36365887-50c1-51fb-9247-db7fb1cf86a9", "id": "CVE-2026-44893", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44893 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:ce448118-5e34-5a7e-8f00-4c5e5898135f", "id": "CVE-2026-45416", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45416 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:58fd1710-4466-5268-a2c2-0527c4c40352", "id": "CVE-2026-45536", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45536 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:ba9edfd6-4e45-54ba-9c64-f43115a54bd6", "id": "CVE-2026-45673", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45673 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:9f295ac7-c313-5603-a2eb-c4cb178ec3c9", "id": "CVE-2026-45674", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45674 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:6f407e8a-d3ba-5abb-a5ea-408f0dde1a62", "id": "CVE-2026-46340", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-46340 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:6d9af6e5-65c8-58f5-b4a2-54941d9aa3fb", "id": "CVE-2026-47244", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47244 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:bb85416a-8406-5723-a170-7221ec0778a1", "id": "CVE-2026-47691", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47691 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:eed56ba3-a3ee-5c57-83a0-e251808d9604", "id": "CVE-2026-48006", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-48006 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:86c57b66-4e23-5cea-829d-a1cdd14ea7bc", "id": "CVE-2026-48043", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48043 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:a3f316c2-99fa-5860-b4c0-137f0dc29d74", "id": "CVE-2026-48059", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48059 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:c8d92818-f0b4-556b-9683-d28856d37c3b", "id": "CVE-2026-50010", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50010 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:f5de3c3c-5c5b-50a3-8f14-19553f4d1138", "id": "CVE-2026-50011", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-50011 does not affect version 4.1.130.Final-tuxcare.1 of io.netty:netty-all. Patches already applied: bff98ee51b5d0b7ee25fd5005f2169f2a0467efa (already in target via d5b4e38845f5 'Backport CVE-2026-44890 to 4.1.130.Final')" }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:aa147443-7942-5142-be68-05ea702c8b60", "id": "CVE-2026-50020", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50020 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:3d1deaf2-41c9-595c-88a1-98d3a7fa81a5", "id": "CVE-2026-50560", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:d9693540-eb76-535c-a620-d1dae9ec177e", "id": "CVE-2026-55831", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55831 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:423afe57-aac8-59d2-b2c2-d02dca505582", "id": "CVE-2026-55833", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55833 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:b1baf889-3b88-50b7-9025-f162eaba473c", "id": "CVE-2026-55851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55851 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:83a82bc6-c64e-590a-85d4-72f2d02f7a82", "id": "CVE-2026-56745", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56745 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:6a92f2c3-37f5-50e6-b2f2-7f921a48238f", "id": "CVE-2026-56746", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56746 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:cd9437f0-4274-51ab-af6f-234bf84dbb81", "id": "CVE-2026-56817", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56817 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:7715af76-717a-5605-9173-c17ac46a88d3", "id": "CVE-2026-56818", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56818 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:c3237b18-72de-5507-8b74-c873d03fabd0", "id": "CVE-2026-56819", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56819 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:29991ef2-a61b-513c-9bb4-6e2c5271c8a8", "id": "CVE-2026-56820", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56820 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:16778133-2544-5034-a30b-da5a0fc4d1ac", "id": "CVE-2026-56821", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56821 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:6ff8fa42-119d-5e21-b59d-996d124f93c1", "id": "CVE-2026-56822", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56822 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:2ddb7c91-553e-5609-8455-d2e7f689f149", "id": "CVE-2026-59898", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59898 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:b7e33ee5-32bc-53fe-ae14-171cdf126eb7", "id": "CVE-2026-59899", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59899 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:9a67ee64-f816-5434-b305-cc36f07da8bd", "id": "CVE-2026-59900", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59900 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:fa4af9ea-2c8a-5796-834f-94d398d8a5a2", "id": "CVE-2026-59901", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59901 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:2463dc39-7776-5521-ae6c-57465823f039", "id": "CVE-2026-59902", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59902 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:b99a0879-56b6-5e6c-99b7-9af6b51aeee7", "id": "CVE-2026-59903", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59903 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:4bc8ce45-71b6-5247-8af0-21e03d20c253", "id": "CVE-2026-59919", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59919 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:a4985e13-122a-57c3-b654-5c81b0ea38c6", "id": "CVE-2026-59920", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59920 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:dd7557cd-048c-5067-8bc6-11619d49d914", "id": "CVE-2026-59921", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59921 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:0f64a42e-a62a-57fe-9ab2-a785450a68b1", "id": "CVE-2026-73507", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-73507 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:08534a26-e399-5f5b-869b-cae4eda1e05c", "id": "CVE-2026-73508", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-73508 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:ab65e379-d3c5-5cd4-ac37-d3f93e556ac8", "id": "GHSA-mfg7-5gfp-c4w3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:b2d23e58-a066-5f49-804b-7b924a2b7c26", "id": "GHSA-v74w-7mr3-4qg3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.1" } ] } ], "dependencies": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.1" } ] }