{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:c5cc64bb-5cc3-5718-a444-491a859673b0", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/io.netty/netty-bom@4.1.122.Final-tuxcare.1", "type": "library", "group": "io.netty", "name": "netty-bom", "version": "4.1.122.Final-tuxcare.1", "purl": "pkg:maven/io.netty/netty-bom@4.1.122.Final-tuxcare.1" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:fa8489d5-45d2-5c87-9003-591ba19cdf33", "id": "CVE-2025-55163", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-55163 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:f392c9a0-9fda-5260-9b71-3850d5b4ed09", "id": "CVE-2025-58056", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-58056 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:4339949e-4823-5aa4-b912-5bfbd9cc9710", "id": "CVE-2025-58057", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-58057 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:aa66920c-45b7-50e1-a11c-e9a3e8a41c7c", "id": "CVE-2025-59419", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-59419 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:47ba5017-626b-5f8c-9ac6-629e87385eed", "id": "CVE-2025-67735", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-67735 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:d2745dc0-93df-5457-8e31-200ffd27a4c0", "id": "CVE-2026-33870", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33870 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:fccc6cf6-554f-5ab2-ab81-6b34acf87082", "id": "CVE-2026-33871", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33871 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:55653b04-de31-56ce-b385-0cf09f268e44", "id": "CVE-2026-41417", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41417 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:5bf75126-1d1d-529c-b00e-6edaba430a2a", "id": "CVE-2026-42577", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-42577 does not affect version 4.1.122.Final-tuxcare.1 of io.netty:netty-bom. CVE-2026-42577 affects Netty 4.2.x only (advisory range >= 4.2.0.Final, < 4.2.13.Final). An fd left registered with an epoll event mask of 0 is woken forever by the unmaskable EPOLLERR/EPOLLHUP after a RST on a half-closed connection. Target 4.1.122.Final is NOT affected due to architectural differences. The patch modifies EpollIoHandler.java and EpollIoOps.java, part of 4.2's IoHandler/IoOps abstraction. Neither file exists in 4.1.x, which registers via EpollEventLoop.modify() off AbstractEpollChannel.flags. That field is seeded Native.EPOLLET, and no read/close/half-close path clears it (only the explicit pre-registration setEpollMode(LEVEL_TRIGGERED) opt-in), so the registration stays edge-triggered and the RST is reported once per edge instead of on every epoll_wait. The chain from INPUT (connection state change) to GOAL (CPU busy-loop via empty event mask) is broken at step (ii): the target cannot produce an empty event mask. Verdict: not_affected. Justification: code_not_reachable (Rule 5 Type A2)." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:4f1fee4b-3a72-5548-b803-986937342a8f", "id": "CVE-2026-42578", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42578 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:d06b03f9-369c-584a-b4e4-1cb54babd2ce", "id": "CVE-2026-42579", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42579 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:92a1160c-e4bd-52d1-9d85-726587b1c7f1", "id": "CVE-2026-42580", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42580 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:164020a7-a6d0-59a8-9327-83414ebac2be", "id": "CVE-2026-42581", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42581 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:6c7e532c-72d0-5a29-a288-448dd9ff3b4f", "id": "CVE-2026-42583", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42583 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:3d0fb4a7-9d0d-5502-aa87-0132b47f2273", "id": "CVE-2026-42584", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42584 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:1ddd1d2e-2b95-5ffe-bc15-7fb7f3ece7ca", "id": "CVE-2026-42585", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42585 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:4f3acac4-503e-52c9-895b-78d5c17b1194", "id": "CVE-2026-42586", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42586 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:51b5f406-a0b7-5f93-9440-b32d5cd2ba28", "id": "CVE-2026-42587", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42587 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:569c54d5-c678-5c46-867b-cac13c52e093", "id": "CVE-2026-44248", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44248 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:41584c4b-50a5-5556-a660-cc5a9137925a", "id": "CVE-2026-44249", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44249 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:d4a8232c-8aca-592a-b29f-877a416bcabb", "id": "CVE-2026-44250", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44250 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:de0070e6-99fc-595e-a26b-588123ab2a62", "id": "CVE-2026-44890", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44890 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:851a234e-ad57-5820-b922-2cc23493bf29", "id": "CVE-2026-44891", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44891 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:362a95dc-d49a-5db6-8333-d458d96be7f4", "id": "CVE-2026-44893", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44893 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:1c8562f4-1800-5bbd-b80f-fc61cf280077", "id": "CVE-2026-45416", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45416 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:bc45cf72-d089-567a-9ec3-ffa7518a2bdc", "id": "CVE-2026-45536", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45536 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:2c0b44d2-dbe8-5926-a70b-f7eac9986311", "id": "CVE-2026-45673", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45673 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:0c903981-7287-5257-aa42-14681f2230b0", "id": "CVE-2026-45674", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45674 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:fb6d8e44-5aa3-5e61-8a24-a3148505229d", "id": "CVE-2026-46340", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-46340 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:3866ac84-00d1-5c71-af2f-003faac59032", "id": "CVE-2026-47244", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47244 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:8b281f44-58dc-52fd-9c53-8c13496ac041", "id": "CVE-2026-47691", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47691 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:61e1249d-df0e-5675-af4a-b5ebde191117", "id": "CVE-2026-48006", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-48006 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:d781927c-aa3b-5e70-9781-c183a60498bf", "id": "CVE-2026-48043", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-48043 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:c920c48e-4111-5cb5-ba64-193edf7cc675", "id": "CVE-2026-48059", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-48059 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:5d971af8-88af-5c27-a9c4-48860f7ddb80", "id": "CVE-2026-50010", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50010 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:eb6be76f-f556-5f59-9004-4eeec3fb1fb4", "id": "CVE-2026-50011", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50011 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:30e47a41-8125-58ec-86c4-866f3aa656ea", "id": "CVE-2026-50020", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50020 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:341018cf-c6bf-5e4f-994d-7113b5b57941", "id": "CVE-2026-50560", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50560 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:1cf66db9-5ca1-5ff0-8732-8fadda66111c", "id": "CVE-2026-55831", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55831 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:e1c4845e-95fa-5efa-9dac-646d998fe944", "id": "CVE-2026-55833", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55833 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:a2d4485a-36da-5321-ad1a-658c3daac08f", "id": "CVE-2026-55851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55851 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:0fc4bbbe-532a-5517-b963-fd9099c8f827", "id": "CVE-2026-56745", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56745 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:a02abe32-fc59-536f-89da-ae5f089c7452", "id": "CVE-2026-56746", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56746 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:d1876788-8845-5b7c-9095-95b2be550e0b", "id": "CVE-2026-56817", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56817 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:ab1c0458-35eb-5485-aab6-bd1eeb4fea9c", "id": "CVE-2026-56818", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56818 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:0edab258-c941-5315-a98e-cbf554f83422", "id": "CVE-2026-56819", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56819 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:12e16d07-ada4-5a7d-8b6b-ff2ae9264de4", "id": "CVE-2026-56820", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56820 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:f24da11c-2339-5bfc-bbe9-c965d1cc28c1", "id": "CVE-2026-56821", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56821 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:5aa5c067-e3de-5b57-948a-5fe761f0ec80", "id": "CVE-2026-56822", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56822 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:cb2440c7-2029-59d8-b530-7783a1a05896", "id": "CVE-2026-59898", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59898 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:beafce59-1968-5344-906d-6cf8d35a992a", "id": "CVE-2026-59899", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59899 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:f1a35ab3-7392-5983-8861-c23c23ed6c4d", "id": "CVE-2026-59900", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59900 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:09947eb0-3656-58a4-b802-c1328042023e", "id": "CVE-2026-59901", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59901 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:1d97bad3-3408-51c4-80f3-74842679678a", "id": "CVE-2026-59902", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59902 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:f5bcd089-62c6-5138-ab0e-cd37072bc90a", "id": "CVE-2026-59903", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59903 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:1732af8c-b069-523f-aff6-0ffc2e02953d", "id": "CVE-2026-59919", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59919 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:f6fbc171-064b-59d3-96c2-16df57b57585", "id": "CVE-2026-59920", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59920 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:a0be85ae-3708-5470-82c1-dcbb49e4cd94", "id": "CVE-2026-59921", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59921 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:bb84d910-0269-5103-bb86-f8539fd1e082", "id": "CVE-2026-73507", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-73507 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:e3b25910-5946-5d93-a824-23c05d29562b", "id": "CVE-2026-73508", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-73508 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:0e590fe5-ba87-5101-a8d9-f76125c2ea14", "id": "GHSA-mfg7-5gfp-c4w3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:51b18325-69b7-5805-9b05-2ed38a24d470", "id": "GHSA-v74w-7mr3-4qg3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.122.Final-tuxcare.1" } ] } ], "dependencies": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.122.Final-tuxcare.1" } ] }