{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:06b4ee95-b051-5f17-9c2c-b56399507df4", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.3", "type": "library", "group": "io.netty", "name": "netty-bom", "version": "4.1.130.Final-tuxcare.3", "purl": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.3" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:d9e2ee1d-ef86-5105-ad6d-367e26939185", "id": "CVE-2025-55163", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-55163 does not affect version 4.1.130.Final-tuxcare.3 of io.netty:netty-bom. already_fixed \u2014 The target Netty 4.1.130.Final repository already contains the complete MadeYouReset (CVE-2025-55163) mitigation. The Http2MaxRstFrameLimitEncoder defense class is present, integrated into the HTTP/2 connection handler builder, and enabled by default for servers with a threshold of 200 RST_STREAM frames per 30-second window. All protocol-error-triggered RST writes route through the protected en..." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:f153a85a-5324-59d6-8eca-dba803cd6f01", "id": "CVE-2026-33870", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33870 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:5c131a72-86d3-5344-8855-fc5a38b36a96", "id": "CVE-2026-33871", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33871 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:3ed3ac11-9d61-5dd6-b8db-a0e1f974a7c5", "id": "CVE-2026-41417", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41417 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:4c3c2a90-57a5-523d-9ef5-5375bdeefd28", "id": "CVE-2026-42578", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42578 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:f8eb15ef-5a12-5c19-a585-f97a5e2d370d", "id": "CVE-2026-42579", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42579 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:be952d44-9bbf-58b4-bf91-9cb6b9b01d58", "id": "CVE-2026-42580", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42580 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:cf32a056-bbcc-5a71-ba33-d4b96c686ab3", "id": "CVE-2026-42581", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42581 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:33dcb8e2-2f05-575d-b358-ea81865d1162", "id": "CVE-2026-42583", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42583 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:4e30a0a4-4086-5516-90cc-4b3b53fe943c", "id": "CVE-2026-42584", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42584 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:55451ac3-92a3-515e-a653-76e643a8c65d", "id": "CVE-2026-42585", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42585 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:c1878755-9728-5f47-be3a-36c10dbf6099", "id": "CVE-2026-42586", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42586 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:b4d67b2d-21dc-5a2b-90c0-17ecc700742c", "id": "CVE-2026-42587", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42587 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:e12614f5-2c09-5acd-b469-254a643e8802", "id": "CVE-2026-44248", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44248 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:b2cdd7e4-2a07-5675-a5e1-7d33d85e9f8e", "id": "CVE-2026-44249", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44249 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:2ea444c7-09fd-527a-8677-275ed521c44e", "id": "CVE-2026-44250", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44250 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:307660b2-110e-5179-9570-46e958103fef", "id": "CVE-2026-44890", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:0daf26db-51bb-54b1-867d-244e5856c510", "id": "CVE-2026-44891", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44891 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:2ea1031a-5896-5869-94c5-8d09a8db5e29", "id": "CVE-2026-44893", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44893 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:a12e9125-f140-5b71-85ee-f54f25e550c6", "id": "CVE-2026-45416", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45416 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:77b69329-7e32-53ba-98ba-a9f221ba70c1", "id": "CVE-2026-45536", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45536 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:a8c9f671-8b62-5c94-a334-acdead47fabf", "id": "CVE-2026-45673", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-45673 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:f2c35993-1a20-5133-bd32-b875f6a41436", "id": "CVE-2026-45674", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-45674 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:5ada7e5c-8428-570e-b764-d2bf76d2ef80", "id": "CVE-2026-46340", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46340 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:db7bb392-43da-5f7d-8574-0feec5ac71dc", "id": "CVE-2026-47244", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47244 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:ef964568-1add-5673-9524-ff8ad42bf003", "id": "CVE-2026-47691", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47691 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:58f1afe7-2075-5e3e-adfb-a0ab8873a632", "id": "CVE-2026-48006", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48006 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:f5087ec9-e607-5db6-8af4-b1fba91b34da", "id": "CVE-2026-48043", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48043 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:b3f59d29-6e27-5641-86ad-e8ef92d87eb9", "id": "CVE-2026-48059", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48059 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:72f87ce0-d3c8-5b87-a948-af7908aa5c4e", "id": "CVE-2026-50010", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50010 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:af567912-033b-5cc7-80d3-7a6e5468ba6b", "id": "CVE-2026-50011", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-50011 does not affect version 4.1.130.Final-tuxcare.3 of io.netty:netty-bom. Patches already applied: bff98ee51b5d0b7ee25fd5005f2169f2a0467efa (already in target via d5b4e38845f5 'Backport CVE-2026-44890 to 4.1.130.Final')" }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:f3e5f44b-dbcf-530f-92df-360f7fe8eb69", "id": "CVE-2026-50020", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50020 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:6a0699c3-e571-543e-b837-63b7fe222496", "id": "CVE-2026-50560", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:531bea4d-63ae-59b5-9357-c244063c2bdf", "id": "CVE-2026-55831", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-55831 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:22f8508a-4a58-59ac-babd-b65d3c163553", "id": "CVE-2026-55833", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-55833 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:0a550298-a885-5b7d-bb44-5779b630da5b", "id": "CVE-2026-55851", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-55851 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:1ddb76a7-29cd-5d0e-a96a-a718d85a4d5b", "id": "CVE-2026-56745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56745 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:f540ff6d-9e4d-5ab7-86e8-82c498c110b5", "id": "CVE-2026-56746", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56746 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:eb0bf912-cd72-57ae-8b0a-e9edf911d237", "id": "CVE-2026-56817", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56817 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:35887997-bb06-5769-9fdc-0d36ee00df28", "id": "CVE-2026-56818", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56818 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:197b72a7-d53c-5e07-ad23-31fa054fb09f", "id": "CVE-2026-56819", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56819 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:b6dd4a19-4ad6-59a7-bfbf-0fa794bfa9a1", "id": "CVE-2026-56820", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56820 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:08cdc1bc-ea72-54e7-a737-043b0fab8606", "id": "CVE-2026-56821", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56821 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:2b193fa0-c70a-5aea-be9c-275c65d3e07b", "id": "CVE-2026-56822", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56822 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:8067cab7-e756-5e7d-b8fc-5e66e7b02530", "id": "CVE-2026-59898", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59898 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:82adee22-a7e3-5ffd-9cc4-dcbea7da7592", "id": "CVE-2026-59899", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59899 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:801cf713-91fd-559d-a8e7-b15bc75b5805", "id": "CVE-2026-59900", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59900 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:2bf7c6ea-9b02-505a-92c7-99e5ba433869", "id": "CVE-2026-59901", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59901 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:29a35efc-2d6a-5b93-9c1c-206f02d17d49", "id": "CVE-2026-59902", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59902 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:5bd12b99-0f71-5196-b4ec-18fb6d90ce28", "id": "CVE-2026-59903", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59903 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:51a045ca-69fd-599c-a331-29dc9da9ca10", "id": "CVE-2026-59919", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59919 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:08e3cff7-4b9b-515a-81a4-426021a76a17", "id": "CVE-2026-59920", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59920 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:55e37ca5-0fe3-5849-9399-d5a37d4658ab", "id": "CVE-2026-59921", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59921 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:98153c42-8a96-55df-9e49-39218e7a8253", "id": "CVE-2026-73507", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-73507 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:ca16d40d-cfbf-5204-9956-2dfc84a10f01", "id": "CVE-2026-73508", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-73508 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:f3b84baf-cb75-5a22-873a-92262bc583ac", "id": "GHSA-mfg7-5gfp-c4w3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:08e66f14-3aba-53dc-8046-447b062111d9", "id": "GHSA-v74w-7mr3-4qg3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.3" } ] } ], "dependencies": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.3" } ] }