{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:c32afb84-9f9b-50e0-885a-4f7fa261e1b8", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.2", "type": "library", "group": "io.netty", "name": "netty-all", "version": "4.1.130.Final-tuxcare.2", "purl": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.2" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:1d95717a-b474-5c4d-9fa9-bb47808e04ee", "id": "CVE-2025-55163", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-55163 does not affect version 4.1.130.Final-tuxcare.2 of io.netty:netty-all. already_fixed \u2014 The target Netty 4.1.130.Final repository already contains the complete MadeYouReset (CVE-2025-55163) mitigation. The Http2MaxRstFrameLimitEncoder defense class is present, integrated into the HTTP/2 connection handler builder, and enabled by default for servers with a threshold of 200 RST_STREAM frames per 30-second window. All protocol-error-triggered RST writes route through the protected en..." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:9fbf126f-c9d8-559b-9960-b8bc796d452e", "id": "CVE-2026-33870", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33870 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:294d9ed2-7cd1-5441-82c7-180b5ba7377f", "id": "CVE-2026-33871", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33871 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:eda9f367-7d4c-5592-b458-de4d1cccc08c", "id": "CVE-2026-41417", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41417 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:4b6d0e44-afaa-5cc3-9124-6f55c3f96020", "id": "CVE-2026-42578", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42578 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:e5fce181-4160-544d-84dd-78f11ea691bf", "id": "CVE-2026-42579", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42579 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:47bac56d-4d61-529d-b5d1-00f3b1eb5348", "id": "CVE-2026-42580", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42580 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:8504a2d8-b379-5e7a-8efb-a56a564f73ae", "id": "CVE-2026-42581", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42581 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:7c3823e6-b8ae-5bd2-b012-1edeaa9e0f3a", "id": "CVE-2026-42583", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42583 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:1d5c9fd0-94e3-5cab-8d74-11c9a718e366", "id": "CVE-2026-42584", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42584 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:96a1e756-af8e-54fe-a7e7-cf6fdc9cf840", "id": "CVE-2026-42585", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42585 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:7d000997-976f-5911-85f7-21a6e4541a98", "id": "CVE-2026-42586", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42586 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:393c2ee1-40d3-5dac-a250-df2930058449", "id": "CVE-2026-42587", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42587 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:561928d7-8b72-5d4f-ac66-054663df9743", "id": "CVE-2026-44248", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44248 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:526cb398-9c22-5c19-84b0-0ceb0a89ae12", "id": "CVE-2026-44249", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44249 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:f4097650-9f6e-5a14-be63-c88a794a160e", "id": "CVE-2026-44250", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44250 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:e9214da5-d40f-5020-8710-68899d8a2119", "id": "CVE-2026-44890", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:21bc2499-afcf-544b-8324-02f06695e04a", "id": "CVE-2026-44891", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44891 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:5f07b114-d6d8-59a7-bd68-cc78a180487a", "id": "CVE-2026-44893", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44893 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:dff1f5a4-847c-5ba8-ba9f-628c750c613d", "id": "CVE-2026-45416", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45416 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:b7e7ee32-238a-537b-9651-ed859f542e73", "id": "CVE-2026-45536", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45536 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:6d3cad6d-3943-5359-a707-d1ade0de0635", "id": "CVE-2026-45673", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-45673 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:0a393649-3e33-5b88-baee-0aec4ad2bf9e", "id": "CVE-2026-45674", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-45674 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:7e795364-a230-5a39-82d7-7ec4be138d0e", "id": "CVE-2026-46340", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46340 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:12da4c86-aeb8-524b-b45a-208a2e872470", "id": "CVE-2026-47244", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47244 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:dd0c7635-c545-5c90-a094-d919241f5b68", "id": "CVE-2026-47691", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47691 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:7e26da88-78f2-53ec-bee9-fbec39454048", "id": "CVE-2026-48006", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48006 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:6816d49d-6759-59f7-abaa-065346a0e121", "id": "CVE-2026-48043", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48043 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:4dc731b3-7759-53f6-840e-9d86bcf95286", "id": "CVE-2026-48059", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48059 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:22f5ac52-5695-5719-b7b0-4283fc9fdbab", "id": "CVE-2026-50010", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50010 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:12ec05b0-4e54-5320-8b9f-3b1ea3bd79b2", "id": "CVE-2026-50011", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-50011 does not affect version 4.1.130.Final-tuxcare.2 of io.netty:netty-all. Patches already applied: bff98ee51b5d0b7ee25fd5005f2169f2a0467efa (already in target via d5b4e38845f5 'Backport CVE-2026-44890 to 4.1.130.Final')" }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:fab4f2e0-9ea4-5ce4-a0f0-05d9e665b8da", "id": "CVE-2026-50020", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50020 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:3b34afb7-cf20-5c9f-b3cb-9f94e836d7e7", "id": "CVE-2026-50560", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:68e3c4a8-b1d2-5dfb-a0b3-06fed5ea0382", "id": "CVE-2026-55831", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55831 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:aa341b4e-5e3e-54ae-b703-85f8c2a63530", "id": "CVE-2026-55833", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55833 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:f6d0ab6a-8491-53fd-9530-a5fe9b0c5f05", "id": "CVE-2026-55851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55851 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:9447d04d-4fd8-5b16-b98b-55baa72eeb41", "id": "CVE-2026-56745", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56745 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:7f0754a7-0c26-5d66-a4d3-5668d2640245", "id": "CVE-2026-56746", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56746 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:1184dfe1-a819-5056-9923-0cd68bda5d4f", "id": "CVE-2026-56817", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56817 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:264e7a91-9e07-53c0-9964-af6979102d93", "id": "CVE-2026-56818", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56818 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:3015a61e-0d57-5a37-8ba4-85b25d5548c8", "id": "CVE-2026-56819", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56819 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:882634f8-a7fb-5729-95f4-dff6f8121098", "id": "CVE-2026-56820", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56820 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:1bba7135-661d-5fd9-a02f-2aea77274c39", "id": "CVE-2026-56821", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56821 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:f184974d-8bd2-55ca-8bb9-b9cc625f3225", "id": "CVE-2026-56822", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56822 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:f2c2eaa5-cef1-5c4a-8d47-326cfd6a7183", "id": "CVE-2026-59898", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59898 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:2ffaa83f-0b38-5c8a-83e0-7afc39b7374a", "id": "CVE-2026-59899", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59899 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:86c8aafe-1d2d-5866-841a-a60a1706cea9", "id": "CVE-2026-59900", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59900 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:70ac5eeb-2580-5396-a15e-24c929dbba81", "id": "CVE-2026-59901", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59901 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:ef2de1ac-dca6-5c3c-b549-73276fc38cb8", "id": "CVE-2026-59902", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59902 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:8c2619f1-b8c9-57bf-8c97-790d012e159d", "id": "CVE-2026-59903", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59903 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:c511ed8a-6683-549c-ba70-1c72bc4bcc70", "id": "CVE-2026-59919", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59919 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:8e9448d9-ccc8-5431-93cb-e05130f18713", "id": "CVE-2026-59920", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59920 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:6761d2ff-4918-5789-b21e-cd92d2ffd8a6", "id": "CVE-2026-59921", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59921 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:22f7be7d-c022-5991-8c10-29ab60399371", "id": "CVE-2026-73507", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-73507 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:09f73381-e095-551f-96cc-96e7f9c4394f", "id": "CVE-2026-73508", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-73508 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:c4cf99eb-0f3f-51f4-8f92-6d10a70fc9cf", "id": "GHSA-mfg7-5gfp-c4w3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:42d7d130-4bdb-5fe1-bee7-428a2afab50c", "id": "GHSA-v74w-7mr3-4qg3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.2" } ] } ], "dependencies": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.2" } ] }