{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:833638f7-e1d1-59bf-83af-cbf9634d07bc", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.4", "type": "library", "group": "io.netty", "name": "netty-all", "version": "4.1.130.Final-tuxcare.4", "purl": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.4" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:4baa9344-e9f8-50b3-acf3-e6d01a3680ed", "id": "CVE-2025-55163", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-55163 does not affect version 4.1.130.Final-tuxcare.4 of io.netty:netty-all. already_fixed \u2014 The target Netty 4.1.130.Final repository already contains the complete MadeYouReset (CVE-2025-55163) mitigation. The Http2MaxRstFrameLimitEncoder defense class is present, integrated into the HTTP/2 connection handler builder, and enabled by default for servers with a threshold of 200 RST_STREAM frames per 30-second window. All protocol-error-triggered RST writes route through the protected en..." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:739de9e7-0f82-5c69-b74f-721996600d5d", "id": "CVE-2026-33870", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33870 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:d2c733bc-e08d-5d51-af15-64966cca27e3", "id": "CVE-2026-33871", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33871 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:4ef7cb53-fd45-5484-8f6f-04d9413ace5c", "id": "CVE-2026-41417", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41417 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:e61c969e-74e3-5d47-b61b-117c939285e1", "id": "CVE-2026-42578", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42578 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:ad778be8-2c62-5143-a6fa-0c879abb2327", "id": "CVE-2026-42579", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42579 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:98f8ddd1-14ed-5fc0-978f-eb535dcf8f42", "id": "CVE-2026-42580", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42580 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:6e80babb-45ed-593e-8897-4527e83ce36d", "id": "CVE-2026-42581", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42581 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:acbd7bb8-b097-5fa0-9439-9a8a6dc322f9", "id": "CVE-2026-42583", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42583 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:d319acf5-1b48-5db0-a1f9-b36368feecea", "id": "CVE-2026-42584", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42584 affects version 4.1.130.Final-tuxcare.4 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:d22f8624-bcc0-5df4-ac5d-e26d3749df6d", "id": "CVE-2026-42585", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42585 affects version 4.1.130.Final-tuxcare.4 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:66867f3b-36d7-54bc-8833-094badd43306", "id": "CVE-2026-42586", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42586 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:0e6fff47-7ebb-50dd-8997-d1a75aa3623d", "id": "CVE-2026-42587", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42587 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:8c3f4a28-58fb-57f2-8c4a-9751b1110177", "id": "CVE-2026-44248", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44248 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:c659ce99-5505-5033-bdad-5880106434d9", "id": "CVE-2026-44249", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44249 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:ca538b33-d485-5a97-b699-6d81f86aeea1", "id": "CVE-2026-44250", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44250 affects version 4.1.130.Final-tuxcare.4 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:ff213e75-eef2-5dc7-a8c7-bb493e4c98d1", "id": "CVE-2026-44890", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:d555572c-bb85-5413-8757-bdf2cc5d0f6d", "id": "CVE-2026-44891", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44891 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:9de41d75-6b6f-5cfd-8122-eae88c8a230a", "id": "CVE-2026-44893", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44893 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:2f27ba1c-aa68-5669-a4c2-34f57c5d930a", "id": "CVE-2026-45416", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-45416 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:9e7f0164-c641-5efd-95a0-1fee894c4dfb", "id": "CVE-2026-45536", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-45536 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:8814cf6d-092d-5980-8f64-3fb2136d82ac", "id": "CVE-2026-45673", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-45673 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:9aeaff98-6558-5583-96f4-ce77114e4d9f", "id": "CVE-2026-45674", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-45674 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:0a5bbe4b-ea38-5c6b-8db2-2bcc029d4626", "id": "CVE-2026-46340", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46340 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:9863d761-a02c-5f11-87e2-8ed8006764dc", "id": "CVE-2026-47244", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47244 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:5b84b981-b9c8-5ef5-9c00-198f212f7aa3", "id": "CVE-2026-47691", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47691 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:cd3fd4ad-e2e3-5c33-a427-2ca7c61a839e", "id": "CVE-2026-48006", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48006 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:56b60dc0-1e00-5821-9daa-701de0e52e9e", "id": "CVE-2026-48043", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48043 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:8347add2-81e1-5890-80d5-3347b31a42cb", "id": "CVE-2026-48059", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48059 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:836a05a8-d5c3-500a-97af-e273a90ba013", "id": "CVE-2026-50010", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50010 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:b396502d-8bdc-5179-905b-f6cdf6e1fd9f", "id": "CVE-2026-50011", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-50011 does not affect version 4.1.130.Final-tuxcare.4 of io.netty:netty-all. Patches already applied: bff98ee51b5d0b7ee25fd5005f2169f2a0467efa (already in target via d5b4e38845f5 'Backport CVE-2026-44890 to 4.1.130.Final')" }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:77dcf504-ff50-5343-92ad-12e478e206e1", "id": "CVE-2026-50020", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50020 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:fced9bf0-41e8-5496-b9e5-3ed87bc82bd8", "id": "CVE-2026-50560", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:43bb6e23-0727-5e1e-a47e-9bb954cb0f9b", "id": "CVE-2026-55831", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-55831 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:db1d7377-3d5a-59bc-9a81-68281d5fd010", "id": "CVE-2026-55833", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-55833 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:d4300204-b39f-59c3-be70-73f5523e0a57", "id": "CVE-2026-55851", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-55851 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:b2fdf483-4a33-56ad-b067-e983dabc2c90", "id": "CVE-2026-56745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56745 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:4bd74d8b-055b-5404-ab79-abc2df95fb00", "id": "CVE-2026-56746", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56746 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:a22e0e32-4acc-5ab0-85f1-98a9093b2f9c", "id": "CVE-2026-56817", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56817 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:582e7c66-9169-59c6-9a1c-11b047e1459b", "id": "CVE-2026-56818", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56818 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:fc712b13-9886-5b0d-a378-76fa168ab4a4", "id": "CVE-2026-56819", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56819 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:8bc0e861-b7a8-5140-83ee-f376d6f1b911", "id": "CVE-2026-56820", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56820 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:af3d7ae5-a762-5eeb-a6f4-09b85c209173", "id": "CVE-2026-56821", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56821 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:c9cce278-2402-5a61-b8f3-52f4f4be3a78", "id": "CVE-2026-56822", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56822 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:bb18b7ca-3750-5aaa-9482-b2d6d2515917", "id": "CVE-2026-59898", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59898 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:49f67188-cd80-5e20-833b-10cc05754d82", "id": "CVE-2026-59899", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59899 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:c1cd3515-3c42-5bd3-b1a1-a891cb6144de", "id": "CVE-2026-59900", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59900 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:137f53a4-f160-55f4-ab5b-943cb0d82237", "id": "CVE-2026-59901", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59901 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:96c48873-629a-5c76-8524-041fcbaa3a50", "id": "CVE-2026-59902", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59902 affects version 4.1.130.Final-tuxcare.4 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:ae113bc8-07a3-5f05-8586-4553c29a04dc", "id": "CVE-2026-59903", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59903 affects version 4.1.130.Final-tuxcare.4 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:5d5b9a7c-d7e1-5791-b4dd-ff8d0af96cc9", "id": "CVE-2026-59919", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59919 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:f9c68bff-8791-52c2-bd3f-97b2abf53d29", "id": "CVE-2026-59920", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59920 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:417fadc5-46a6-570f-8ceb-970883ec9194", "id": "CVE-2026-59921", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59921 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:cb652cc7-89bb-5dcb-9181-629be193ab0a", "id": "CVE-2026-73507", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-73507 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:956c9ba4-484d-56e8-a03c-4c4bd6940d5d", "id": "CVE-2026-73508", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-73508 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:ec242b13-d185-5260-ad6b-69e74446e054", "id": "GHSA-mfg7-5gfp-c4w3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.130.Final-tuxcare.4 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:37c3d760-ad44-53c7-8a51-8edc62696dc7", "id": "GHSA-v74w-7mr3-4qg3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.130.Final-tuxcare.4 of io.netty:netty-all." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.4" } ] } ], "dependencies": [ { "ref": "pkg:maven/io.netty/netty-all@4.1.130.Final-tuxcare.4" } ] }