{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:5b529ab7-418d-5c97-89e3-d6f3b110daf1", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3", "type": "library", "group": "io.netty", "name": "netty-all", "version": "4.1.130.Final-tuxcare.3", "purl": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:5790f91e-b59f-5d9e-9384-8ef971c8d3de", "id": "CVE-2025-55163", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-55163 does not affect version 4.1.130.Final-tuxcare.3 of io.netty:netty-all. already_fixed \u2014 The target Netty 4.1.130.Final repository already contains the complete MadeYouReset (CVE-2025-55163) mitigation. The Http2MaxRstFrameLimitEncoder defense class is present, integrated into the HTTP/2 connection handler builder, and enabled by default for servers with a threshold of 200 RST_STREAM frames per 30-second window. All protocol-error-triggered RST writes route through the protected en..." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:a32ecc21-000c-5083-a96e-24643043ecd7", "id": "CVE-2026-33870", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33870 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:cc588661-e189-509a-8522-3d33805380fd", "id": "CVE-2026-33871", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33871 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:03a9d994-aa19-5ac4-8abb-6f6728fbe4d5", "id": "CVE-2026-41417", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41417 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:a71a8230-abc6-581b-b185-6e8ed047c721", "id": "CVE-2026-42578", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42578 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:dea603e2-de89-57ef-b031-f92e8b9cfbc2", "id": "CVE-2026-42579", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42579 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:ccace4b3-091e-572c-a6ca-603527f50c3e", "id": "CVE-2026-42580", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42580 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:659024a5-7505-5da2-8f94-509a485eee1d", "id": "CVE-2026-42581", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42581 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:087b559e-39da-51e7-86a2-0ea60a7f14f8", "id": "CVE-2026-42583", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42583 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:5de21e75-e1ab-5be1-b712-1b851d214e96", "id": "CVE-2026-42584", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42584 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:21b200f9-bda2-510a-8907-ee2b00427725", "id": "CVE-2026-42585", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42585 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:46928369-c556-5901-a560-e5eb993ab686", "id": "CVE-2026-42586", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42586 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:c17692c3-49c7-542e-a35a-fcd61f460397", "id": "CVE-2026-42587", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42587 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:aa987308-0b31-5ba3-bc4a-11f0592c5168", "id": "CVE-2026-44248", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44248 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:de42adf5-6c51-55b8-9022-638ffb3502f6", "id": "CVE-2026-44249", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44249 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:f9da6da5-cbb1-5fdd-878a-75753ccbfeea", "id": "CVE-2026-44250", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44250 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:5a0c2388-8481-5b03-8be6-4140029c7e38", "id": "CVE-2026-44890", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:741f40b5-5d04-5505-8208-772043ecdab2", "id": "CVE-2026-44891", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44891 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:1733c0a5-5b8e-5cae-bb9f-587a57bdc6dd", "id": "CVE-2026-44893", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44893 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:a8d654b7-b737-5698-b74a-e8bcea517d19", "id": "CVE-2026-45416", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45416 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:63726f31-543b-5078-b99d-8c10d2cdec12", "id": "CVE-2026-45536", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45536 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:f8323145-b0e4-5aa2-ae1a-fb9a40e4d0eb", "id": "CVE-2026-45673", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-45673 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:4518de1a-1028-539b-84b6-6072d2918d51", "id": "CVE-2026-45674", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-45674 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:b9bb901d-8dff-5d5b-aa84-61e323234f4a", "id": "CVE-2026-46340", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46340 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:bdf33f21-b1ab-58f5-af34-88ec4a7997fc", "id": "CVE-2026-47244", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47244 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:b85326a4-8e4f-57c9-8407-d5f708bec4bc", "id": "CVE-2026-47691", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47691 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:3b0a9129-d7b2-5bed-b7bc-4a0bebc9f6c7", "id": "CVE-2026-48006", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48006 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:6432292f-909e-5a53-abd0-1de75b593bd4", "id": "CVE-2026-48043", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48043 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:0cba6066-21f2-5586-9048-ee889c5ebd94", "id": "CVE-2026-48059", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48059 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:026edb2e-ee10-5682-ac6c-47b0bfe1c2a8", "id": "CVE-2026-50010", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50010 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:9d517e66-6200-5482-8600-590b7a9f50d3", "id": "CVE-2026-50011", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-50011 does not affect version 4.1.130.Final-tuxcare.3 of io.netty:netty-all. Patches already applied: bff98ee51b5d0b7ee25fd5005f2169f2a0467efa (already in target via d5b4e38845f5 'Backport CVE-2026-44890 to 4.1.130.Final')" }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:82ffdc0b-7113-5589-893d-d64763f92fc7", "id": "CVE-2026-50020", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50020 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:e0877ab4-9c94-5ec4-92ad-4a6efa520a7a", "id": "CVE-2026-50560", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:d5a088d5-d25c-5ac0-b908-6839cffc96a4", "id": "CVE-2026-55831", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-55831 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:235575b0-d73b-543d-96a7-46b230e3f784", "id": "CVE-2026-55833", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-55833 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:f7d0cb82-3939-5e6d-820d-c18b7ec8b146", "id": "CVE-2026-55851", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-55851 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:38127ff8-67ee-5a28-8938-543ee32fc501", "id": "CVE-2026-56745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56745 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:2bb90bdb-80cf-5dad-b9ab-574a15104d74", "id": "CVE-2026-56746", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56746 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:d4472697-1f2b-583a-8d9d-7a3b5f210090", "id": "CVE-2026-56817", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56817 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:53961f8a-cbb9-50bd-98ff-f3056f43377c", "id": "CVE-2026-56818", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56818 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:b5237ee8-db6d-5ec1-95bd-cc41aadecea3", "id": "CVE-2026-56819", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56819 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:8dbbf815-b9ca-5547-8292-6d85e9447e06", "id": "CVE-2026-56820", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56820 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:d496b9b0-e792-5893-9273-ef7727d20936", "id": "CVE-2026-56821", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56821 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:b860d3fa-7d08-53be-8b7d-26e9c54dd648", "id": "CVE-2026-56822", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56822 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:7507d046-21f8-5755-81bb-1edae7313ce5", "id": "CVE-2026-59898", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59898 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:23822631-ca87-5416-b76e-eeb462c7b230", "id": "CVE-2026-59899", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59899 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:5145b29b-7a4e-5a74-80aa-a117e9b9690c", "id": "CVE-2026-59900", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59900 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:5ce215b2-8078-52d0-8af5-9e5fc780f988", "id": "CVE-2026-59901", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59901 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:4cf5d96c-9d14-538b-8c1c-36f5210f8b6d", "id": "CVE-2026-59902", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59902 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:5579bd7a-eaf2-55ce-b032-37369d1cd7ef", "id": "CVE-2026-59903", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59903 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:ba7b5841-1cf7-5fbe-a7d6-441008e37c5c", "id": "CVE-2026-59919", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59919 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:e66c823b-66bb-5372-baf5-3f7a2014b3e6", "id": "CVE-2026-59920", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59920 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:761cfaaf-c73c-54c1-bb4f-2b2f77b87cd6", "id": "CVE-2026-59921", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59921 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:b6783cd4-5523-5ea8-a4fc-6083e01086d4", "id": "CVE-2026-73507", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-73507 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:951d52bb-6b32-5c1d-9811-e720cac3a462", "id": "CVE-2026-73508", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-73508 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:8a580d01-2963-5db9-bb74-10de4623789c", "id": "GHSA-mfg7-5gfp-c4w3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:dd20275b-d2f0-5fe6-a9e2-091c8dd0167c", "id": "GHSA-v74w-7mr3-4qg3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3" } ] } ], "dependencies": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.3" } ] }