{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:1b2de81c-0b00-53b4-9632-fd9f06d8bf96", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.1", "type": "library", "group": "io.netty", "name": "netty-bom", "version": "4.1.130.Final-tuxcare.1", "purl": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.1" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:e0c555d9-7908-5080-8c10-d5fedabfa528", "id": "CVE-2025-55163", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-55163 does not affect version 4.1.130.Final-tuxcare.1 of io.netty:netty-bom. already_fixed \u2014 The target Netty 4.1.130.Final repository already contains the complete MadeYouReset (CVE-2025-55163) mitigation. The Http2MaxRstFrameLimitEncoder defense class is present, integrated into the HTTP/2 connection handler builder, and enabled by default for servers with a threshold of 200 RST_STREAM frames per 30-second window. All protocol-error-triggered RST writes route through the protected en..." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:931e6368-3251-5a4e-81ef-9450a0b83825", "id": "CVE-2026-33870", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33870 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:149d0e6b-347d-50d8-937f-c29b2ea242e7", "id": "CVE-2026-33871", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33871 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:5fa4b73f-0e2b-5c16-a6ed-0835fb743a74", "id": "CVE-2026-41417", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41417 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:b88b9907-74d5-5256-a658-dcb1fffca94f", "id": "CVE-2026-42578", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42578 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:09befbae-2a31-52e4-a8f0-f7c430a16a04", "id": "CVE-2026-42579", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42579 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:161b35c6-c366-56a8-8c72-621d2b470c7d", "id": "CVE-2026-42580", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42580 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:5b555b96-52cf-5f0e-8630-1ad56e6ad1ed", "id": "CVE-2026-42581", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42581 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:1486a56f-946b-5958-ae15-e94626fc43a9", "id": "CVE-2026-42583", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42583 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:ca9c442a-b063-589a-951e-fb774ec0da2f", "id": "CVE-2026-42584", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42584 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:2faf13d5-1f23-5c02-b1e8-3ca3727d874d", "id": "CVE-2026-42585", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42585 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:3bdbdf93-fa11-58c3-8db4-a6bfe26d9bf3", "id": "CVE-2026-42586", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42586 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:106ee45d-b37d-5007-b6a8-279137d21b04", "id": "CVE-2026-42587", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42587 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:05eafd60-f528-5c56-b1e4-08eac80df3bd", "id": "CVE-2026-44248", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44248 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:45c5048f-1570-51a1-a8c5-d6bb72d532fe", "id": "CVE-2026-44249", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44249 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:6ee78f6f-f82b-501d-9833-a814a4be71b7", "id": "CVE-2026-44250", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44250 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:2100619a-7de8-53a9-94b9-3a4b12074a71", "id": "CVE-2026-44890", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:d6e1c33b-37a0-5432-817f-47374feda54b", "id": "CVE-2026-44891", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44891 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:0fd92ff6-5cd4-5521-8bea-c2e7c4b80b2b", "id": "CVE-2026-44893", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44893 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:88fae17b-4c45-50d8-a781-5d0516d810a3", "id": "CVE-2026-45416", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45416 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:4d9311c9-307e-5954-b90f-7e50af6c3f43", "id": "CVE-2026-45536", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45536 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:a5b80c6b-8e42-5b95-a1c9-2fbd3474e463", "id": "CVE-2026-45673", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45673 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:45154ea9-e677-58a8-8189-b58ec3faa300", "id": "CVE-2026-45674", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45674 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:fbaf0b03-6b8d-508e-9af8-ef2baf6e4099", "id": "CVE-2026-46340", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-46340 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:09b4d178-7230-511d-9b4a-1f9752712727", "id": "CVE-2026-47244", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47244 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:4735baf2-88b5-5bfb-972a-ecba294dd860", "id": "CVE-2026-47691", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47691 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:d2d810e0-3530-5ae8-a613-5dd0a19055c8", "id": "CVE-2026-48006", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-48006 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:f8051ef7-5dbf-5848-a883-1b804408eda4", "id": "CVE-2026-48043", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48043 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:8b85efff-b954-5d20-9f59-d94837c0fa43", "id": "CVE-2026-48059", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48059 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:a09864b5-fb93-55aa-826e-c5da460130f8", "id": "CVE-2026-50010", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50010 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:5994c8fc-349e-50e9-8735-42c1039d063e", "id": "CVE-2026-50011", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-50011 does not affect version 4.1.130.Final-tuxcare.1 of io.netty:netty-bom. Patches already applied: bff98ee51b5d0b7ee25fd5005f2169f2a0467efa (already in target via d5b4e38845f5 'Backport CVE-2026-44890 to 4.1.130.Final')" }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:e9c0e2b9-372e-5b1b-ade2-ad399654c3f5", "id": "CVE-2026-50020", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50020 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:ca80dcc7-d9dc-59bc-afb7-ee3ecac0940c", "id": "CVE-2026-50560", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:3c50bb43-666e-5ec4-ad78-e3ad86e8efe6", "id": "CVE-2026-55831", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55831 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:4b5ae869-fb18-5522-9367-ec5d65e401f1", "id": "CVE-2026-55833", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55833 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:c9cc5951-fd52-55cb-a888-f203bea5ab49", "id": "CVE-2026-55851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55851 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:cd500e7a-d239-5cdf-91d1-8d22b203605f", "id": "CVE-2026-56745", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56745 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:b33d0a6c-882d-5cbf-8a42-5f8153ad108e", "id": "CVE-2026-56746", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56746 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:3ec89c80-0381-54f2-9b09-83b995b20f19", "id": "CVE-2026-56817", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56817 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:1b078cd5-1ed2-5d31-ba5f-d336fd09b45b", "id": "CVE-2026-56818", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56818 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:7da90215-dbf6-5bb3-8873-0a78a6ba8e64", "id": "CVE-2026-56819", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56819 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:469d1d8f-7e2f-52cf-8431-0b8e239e3631", "id": "CVE-2026-56820", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56820 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:d6b97369-3317-5ed9-b6e8-5db6a9422344", "id": "CVE-2026-56821", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56821 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:cd99fdee-aab6-5aa3-b0c9-d5be0cf89fe7", "id": "CVE-2026-56822", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56822 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:76996030-7ca3-5261-b874-18f19050866c", "id": "CVE-2026-59898", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59898 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:0fd9dad0-1e7e-5f04-a9db-7a476121b947", "id": "CVE-2026-59899", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59899 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:1c06cbf5-1aa1-5e39-8dc0-bb6e9ba9a2f5", "id": "CVE-2026-59900", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59900 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:0cab3d82-e00b-591c-b2f6-d59214dacb39", "id": "CVE-2026-59901", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59901 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:3f8e3f29-6bac-5010-a48c-79a86d784e7e", "id": "CVE-2026-59902", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59902 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:1d3f35a5-64bc-5620-bf72-c8723e22b1bc", "id": "CVE-2026-59903", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59903 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:926920ad-e5a4-5543-8da4-b390c08bb05b", "id": "CVE-2026-59919", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59919 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:554bd4fc-80eb-5280-ba9f-555dd4c06284", "id": "CVE-2026-59920", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59920 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:c63a40ba-7c9c-54cb-b82d-ffa1b4250a72", "id": "CVE-2026-59921", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59921 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:090dab6a-79b5-52ed-8b91-714c406ec574", "id": "CVE-2026-73507", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-73507 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:62f5ea60-f4d8-5c9d-8b73-6171736850e4", "id": "CVE-2026-73508", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-73508 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:b8c05fb2-c5e0-5fb8-accb-cbdcbd8f2b49", "id": "GHSA-mfg7-5gfp-c4w3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:595f4689-95b9-5a59-8d07-80be91f8e73a", "id": "GHSA-v74w-7mr3-4qg3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.1" } ] } ], "dependencies": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.1" } ] }