{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:9c792a6b-120d-5a5e-90ce-c5a177f73d24", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/io.netty/netty-bom@4.1.122.Final-tuxcare.2", "type": "library", "group": "io.netty", "name": "netty-bom", "version": "4.1.122.Final-tuxcare.2", "purl": "pkg:maven/io.netty/netty-bom@4.1.122.Final-tuxcare.2" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:84266abb-85fc-5980-aadf-2efc71452dc7", "id": "CVE-2025-55163", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55163 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:d927559b-2276-5d7f-9cfb-8998c915ef11", "id": "CVE-2025-58056", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-58056 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:447804ca-67b2-5014-8165-138e5f39fb80", "id": "CVE-2025-58057", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-58057 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:3f324fed-4de7-5814-96d7-f6c8beed02aa", "id": "CVE-2025-59419", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59419 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:6b3532a6-36b2-5dd5-8b2e-305fbb5f007e", "id": "CVE-2025-67735", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-67735 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:6494cecf-68e3-5757-9cab-1f80a32dcdce", "id": "CVE-2026-33870", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33870 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:2de90d1c-c3fe-5dbe-ac0b-c4382335f513", "id": "CVE-2026-33871", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33871 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:4b98102b-033b-5eb7-bff9-e46b42ae537e", "id": "CVE-2026-41417", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41417 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:6b572c70-e6fb-5d65-b0e6-25273259cb51", "id": "CVE-2026-42577", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-42577 does not affect version 4.1.122.Final-tuxcare.2 of io.netty:netty-bom. CVE-2026-42577 affects Netty 4.2.x only (advisory range >= 4.2.0.Final, < 4.2.13.Final). An fd left registered with an epoll event mask of 0 is woken forever by the unmaskable EPOLLERR/EPOLLHUP after a RST on a half-closed connection. Target 4.1.122.Final is NOT affected due to architectural differences. The patch modifies EpollIoHandler.java and EpollIoOps.java, part of 4.2's IoHandler/IoOps abstraction. Neither file exists in 4.1.x, which registers via EpollEventLoop.modify() off AbstractEpollChannel.flags. That field is seeded Native.EPOLLET, and no read/close/half-close path clears it (only the explicit pre-registration setEpollMode(LEVEL_TRIGGERED) opt-in), so the registration stays edge-triggered and the RST is reported once per edge instead of on every epoll_wait. The chain from INPUT (connection state change) to GOAL (CPU busy-loop via empty event mask) is broken at step (ii): the target cannot produce an empty event mask. Verdict: not_affected. Justification: code_not_reachable (Rule 5 Type A2)." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:99059c99-216a-5bc8-a1f2-9711ffb77338", "id": "CVE-2026-42578", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42578 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:06f68b4f-98ab-5aea-9fbd-e19e31aefa21", "id": "CVE-2026-42579", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42579 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:ce945ca1-e631-544e-8369-f393a521f121", "id": "CVE-2026-42580", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42580 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:d6434fc0-80e2-529d-bb96-3ed358afc4ab", "id": "CVE-2026-42581", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42581 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:35a765f3-2d93-5517-86c1-06c97375ea6d", "id": "CVE-2026-42583", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42583 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:dc939737-4353-533c-9db0-87d6e623c5d2", "id": "CVE-2026-42584", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42584 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:68ad6e6b-4467-54fa-b700-71dea1013947", "id": "CVE-2026-42585", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42585 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:2da8ab91-2642-54bc-861d-b026ea48b2e2", "id": "CVE-2026-42586", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42586 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:89368ce1-48a2-59e2-8739-f4118b3e9c30", "id": "CVE-2026-42587", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42587 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:6f305f28-2795-5c49-b04b-68ec332c7d9d", "id": "CVE-2026-44248", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44248 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:6a3fadae-2719-5d79-ab7a-ba7ffb0d9732", "id": "CVE-2026-44249", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44249 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:33c21683-84a1-5d2d-817c-696873b6684a", "id": "CVE-2026-44250", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44250 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:f693beb6-4d01-55a3-b7cd-32e896aaa6b2", "id": "CVE-2026-44890", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:1eaaaead-67d7-5dfb-aeef-63eeff87b49c", "id": "CVE-2026-44891", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44891 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:ad4d719f-18cc-54f1-ad94-07b6dd2dca98", "id": "CVE-2026-44893", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44893 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:1fd98cdb-9d82-599a-9fea-eeb3ddceb312", "id": "CVE-2026-45416", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-45416 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:a673987a-80ff-5e9e-80ee-6aae2594e2f7", "id": "CVE-2026-45536", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-45536 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:b9375774-1c26-5ebe-8d9c-202e9cf74fe7", "id": "CVE-2026-45673", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-45673 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:73ca55d1-f4c5-56a7-a4c7-02d32af69a58", "id": "CVE-2026-45674", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-45674 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:c967bfd1-26f2-5e2f-b233-ee4e986692be", "id": "CVE-2026-46340", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46340 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:3725c17e-e938-5f92-a285-fb56218fca96", "id": "CVE-2026-47244", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47244 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:e933aa26-6839-542c-92df-5c871ec9225d", "id": "CVE-2026-47691", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47691 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:7b7961c9-f0b6-5047-9eeb-4a33c957f950", "id": "CVE-2026-48006", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48006 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:8cc57f16-1ff2-5c62-bf40-c12fb96b1e37", "id": "CVE-2026-48043", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48043 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:24604dee-1613-55a2-afbe-34b79af6261d", "id": "CVE-2026-48059", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48059 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:7a5b7e48-c643-56e2-8e91-b324180c3916", "id": "CVE-2026-50010", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50010 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:6f06801b-38f1-5048-a52d-d691caffefd8", "id": "CVE-2026-50011", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50011 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:d9b4a8d4-0f54-58ed-89d9-11d5bfc6ee09", "id": "CVE-2026-50020", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50020 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:76546c7e-f173-5eaa-bf68-c784f812bfbb", "id": "CVE-2026-50560", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:0ef7abdf-7810-509d-bd74-70830e85c100", "id": "CVE-2026-55831", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-55831 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:f77a4e47-1588-5b97-aed4-e72bf0ebff22", "id": "CVE-2026-55833", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-55833 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:253c43c1-b336-51fe-bd57-80e2e10044ca", "id": "CVE-2026-55851", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-55851 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:1b397170-0244-5815-9145-3c7247c7d407", "id": "CVE-2026-56745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56745 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:1de41787-6f0e-5fd6-a910-e7bb3deedb93", "id": "CVE-2026-56746", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56746 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:00d07adb-1752-508c-9b82-fbbf4521c88c", "id": "CVE-2026-56817", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56817 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:1fab53e6-a6e2-520d-b21a-0f0ad652143e", "id": "CVE-2026-56818", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56818 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:3e3d18bc-41ed-5094-bcf6-ea52686fc9db", "id": "CVE-2026-56819", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56819 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:fb2a0272-ed2b-5f09-8a3c-5a0ec335e3c8", "id": "CVE-2026-56820", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56820 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:a429e2e2-4df5-5d09-a4e3-9348c757db28", "id": "CVE-2026-56821", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56821 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:01b98651-f442-561f-b513-f9d846e1eff1", "id": "CVE-2026-56822", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56822 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:d0f2105f-2dac-56b8-ad44-e3ce0648779b", "id": "CVE-2026-59898", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59898 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:e6a0e8d4-2b76-5084-8428-98c6875f8f9d", "id": "CVE-2026-59899", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59899 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:eb19b2bd-9138-5588-a496-84838258a297", "id": "CVE-2026-59900", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59900 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:fb39d22e-0c64-5e1a-91d8-66e580c85d8e", "id": "CVE-2026-59901", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59901 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:55aa0b3f-5af5-53f7-8954-2841ad5f7bdd", "id": "CVE-2026-59902", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59902 affects version 4.1.122.Final-tuxcare.2 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:5b2a8472-031d-587f-8568-70232f9acf2e", "id": "CVE-2026-59903", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59903 affects version 4.1.122.Final-tuxcare.2 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:30bd9736-282f-5a98-8289-e2156d5e98b0", "id": "CVE-2026-59919", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59919 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:cfa522fe-387e-511f-9357-497ee3da907f", "id": "CVE-2026-59920", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59920 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:d4bce5a1-de12-5734-8f89-b2446af48d75", "id": "CVE-2026-59921", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59921 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:3cbe1264-5f63-5a4a-ba1f-65cd1ba17766", "id": "CVE-2026-73507", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-73507 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:c94e96f6-b2ce-5cfa-872a-73881c639890", "id": "CVE-2026-73508", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-73508 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:604b5937-fe7d-5d73-babb-7e815d6cba2f", "id": "GHSA-mfg7-5gfp-c4w3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.122.Final-tuxcare.2 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:b86f7cbd-3cbf-57d5-a136-567ee6a54d7a", "id": "GHSA-v74w-7mr3-4qg3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.122.Final-tuxcare.2 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.122.Final-tuxcare.2" } ] } ], "dependencies": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.122.Final-tuxcare.2" } ] }