{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:e9c11ccb-bc84-5d6f-802b-b4c506d8465c", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.2", "type": "library", "group": "io.netty", "name": "netty-bom", "version": "4.1.130.Final-tuxcare.2", "purl": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.2" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:72fed454-ad78-533f-a6b1-9972b1523537", "id": "CVE-2025-55163", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-55163 does not affect version 4.1.130.Final-tuxcare.2 of io.netty:netty-bom. already_fixed \u2014 The target Netty 4.1.130.Final repository already contains the complete MadeYouReset (CVE-2025-55163) mitigation. The Http2MaxRstFrameLimitEncoder defense class is present, integrated into the HTTP/2 connection handler builder, and enabled by default for servers with a threshold of 200 RST_STREAM frames per 30-second window. All protocol-error-triggered RST writes route through the protected en..." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:60558b12-cd25-5514-be24-4e9b75bf213a", "id": "CVE-2026-33870", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33870 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:7318ccc7-5289-556b-b783-4c8b219bcdd6", "id": "CVE-2026-33871", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33871 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:95d0e011-02c2-5628-a605-ae0e9193e99c", "id": "CVE-2026-41417", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41417 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:33f4b82d-fdec-55b5-8d78-48c5e1d9e730", "id": "CVE-2026-42578", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42578 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:e0c70a2a-bde6-5296-a382-132777b5cea2", "id": "CVE-2026-42579", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42579 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:89dcdddb-8947-5fc2-87e7-e9a2b7097306", "id": "CVE-2026-42580", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42580 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:37560221-78fe-5977-b5e7-0e8f0bbbe213", "id": "CVE-2026-42581", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42581 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:d4636f5d-474a-515e-81a0-d04853132fff", "id": "CVE-2026-42583", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42583 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:adfdeea1-20b2-5e12-909e-fb966ea6a900", "id": "CVE-2026-42584", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42584 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:d270a857-2435-53bb-97bc-af530f5db7b1", "id": "CVE-2026-42585", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42585 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:c6c09161-8aa7-5cc1-90ad-9757c896b3a3", "id": "CVE-2026-42586", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42586 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:e575c89b-38b1-5218-bd66-bf3103a34646", "id": "CVE-2026-42587", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42587 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:a4a75c9a-c296-50e7-bb46-6729a67f269d", "id": "CVE-2026-44248", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44248 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:f558aa3c-6e55-5f44-8eca-6ea6484feafb", "id": "CVE-2026-44249", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44249 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:d9a678db-f91f-5b5c-8635-e8b72758d226", "id": "CVE-2026-44250", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44250 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:ef809a6b-115d-54d9-8d70-f57a331a8fd6", "id": "CVE-2026-44890", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:e1b1d622-388a-51d6-9546-2d409b11699c", "id": "CVE-2026-44891", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44891 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:bc2dac34-fb74-5777-a002-5a5c62063bbb", "id": "CVE-2026-44893", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44893 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:417b032a-9c2f-511d-b762-ced20dc066d7", "id": "CVE-2026-45416", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45416 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:6560470c-b112-5bf9-bcd1-abca93164e76", "id": "CVE-2026-45536", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45536 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:c6777bae-2e94-56ed-8218-2de251b190b7", "id": "CVE-2026-45673", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-45673 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:59e7beab-3909-5e0d-a6f3-4514037a41b6", "id": "CVE-2026-45674", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-45674 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:9a951b8c-dcb9-56d5-b2ce-f02bec786129", "id": "CVE-2026-46340", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46340 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:1774b649-31a7-5acd-b026-db9289d03ca1", "id": "CVE-2026-47244", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47244 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:ad487f2e-feda-55f3-b964-48b376caa49d", "id": "CVE-2026-47691", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47691 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:cd7eccbd-0272-51c9-9fda-1b5689304c8b", "id": "CVE-2026-48006", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48006 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:2bce3c75-0052-54f8-9baf-e814e2b631e1", "id": "CVE-2026-48043", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48043 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:db4f1ad7-460b-5302-8d1d-fa17da71175c", "id": "CVE-2026-48059", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48059 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:1d5318db-0631-5903-bd1f-ba70a8ec788d", "id": "CVE-2026-50010", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50010 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:b924b9bf-2c05-5861-b5b9-a5dc29912c26", "id": "CVE-2026-50011", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-50011 does not affect version 4.1.130.Final-tuxcare.2 of io.netty:netty-bom. Patches already applied: bff98ee51b5d0b7ee25fd5005f2169f2a0467efa (already in target via d5b4e38845f5 'Backport CVE-2026-44890 to 4.1.130.Final')" }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:28b40219-7981-589b-b513-582b41f8731c", "id": "CVE-2026-50020", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50020 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:6f93004c-762f-5355-98a7-1257408299cf", "id": "CVE-2026-50560", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:992c3510-da96-5d00-a231-f8017fd4e954", "id": "CVE-2026-55831", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55831 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:daba310d-085b-5b4c-863d-269db45915fa", "id": "CVE-2026-55833", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55833 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:21303118-3c51-571f-9aef-3287f27ace7a", "id": "CVE-2026-55851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55851 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:700423fc-edcf-5d4f-b6a5-6927150b4293", "id": "CVE-2026-56745", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56745 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:9286a94f-2d04-5144-a530-eeb0e637457a", "id": "CVE-2026-56746", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56746 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:59169577-5d08-591b-bc6e-944e26aa11d7", "id": "CVE-2026-56817", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56817 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:ec9b0fe1-33e9-5c4a-b66b-ef9c77eda254", "id": "CVE-2026-56818", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56818 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:a45ce0f4-915a-5e14-944a-6006c310727e", "id": "CVE-2026-56819", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56819 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:1c2f21f5-b727-53b8-ab5f-d485a2f915e5", "id": "CVE-2026-56820", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56820 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:67f92579-c7c3-5f17-8552-8114aa64b295", "id": "CVE-2026-56821", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56821 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:ad1bd555-5396-598d-a986-e137b6d35a8c", "id": "CVE-2026-56822", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56822 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:01b38564-7659-5995-a5c5-1c29cf6c34a5", "id": "CVE-2026-59898", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59898 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:152c54dd-1d0f-5db8-ad70-1c70ec77af28", "id": "CVE-2026-59899", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59899 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:4ce76f37-f658-5589-a89e-ed430f04f29d", "id": "CVE-2026-59900", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59900 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:f60c164a-8265-50b9-b605-a6fd757f454e", "id": "CVE-2026-59901", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59901 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:045a603b-0174-58fb-86e8-f639067494ef", "id": "CVE-2026-59902", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59902 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:ef181c92-c436-5211-bbb1-8f73339772d8", "id": "CVE-2026-59903", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59903 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:2817004c-96a1-5359-9df7-1f3ecffdfbb1", "id": "CVE-2026-59919", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59919 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:37504870-064e-59b0-8c25-fa059ec116ab", "id": "CVE-2026-59920", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59920 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:c6cebc9a-e69d-58df-8eaf-6553d3a7d070", "id": "CVE-2026-59921", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59921 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:650d5955-3475-5c4a-a8af-52806924cc13", "id": "CVE-2026-73507", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-73507 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:94711f4b-eed9-57db-bf32-9f34c39af1a2", "id": "CVE-2026-73508", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-73508 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:ab432bc6-a382-5e7d-8aeb-b432442b90f8", "id": "GHSA-mfg7-5gfp-c4w3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:fea749ff-37e0-5d1f-bcf4-fe7e8291d8c6", "id": "GHSA-v74w-7mr3-4qg3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.2" } ] } ], "dependencies": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.2" } ] }