{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:3654a1c6-b02b-5472-9665-5e5851b8ecb4", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.4", "type": "library", "group": "io.netty", "name": "netty-bom", "version": "4.1.130.Final-tuxcare.4", "purl": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.4" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:34201ef8-25f7-5fd5-9def-881fb4fe3911", "id": "CVE-2025-55163", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-55163 does not affect version 4.1.130.Final-tuxcare.4 of io.netty:netty-bom. already_fixed \u2014 The target Netty 4.1.130.Final repository already contains the complete MadeYouReset (CVE-2025-55163) mitigation. The Http2MaxRstFrameLimitEncoder defense class is present, integrated into the HTTP/2 connection handler builder, and enabled by default for servers with a threshold of 200 RST_STREAM frames per 30-second window. All protocol-error-triggered RST writes route through the protected en..." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:9deedd62-888e-5b79-80cd-9ae589c79795", "id": "CVE-2026-33870", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33870 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:c2184144-5e97-5eb2-a495-0d63c784a4f0", "id": "CVE-2026-33871", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33871 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:819c4775-1ace-511e-8b17-71a9d7728683", "id": "CVE-2026-41417", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41417 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:2ca23d43-97b0-5a05-9c44-34cb8196cafa", "id": "CVE-2026-42578", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42578 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:7f0b2774-0076-528e-b0ec-c6e936787461", "id": "CVE-2026-42579", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42579 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:4a4013d1-329e-52fa-bbbe-16ee85c0dd40", "id": "CVE-2026-42580", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42580 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:ccea9f49-7d0a-5efa-9935-443c7c8ff196", "id": "CVE-2026-42581", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42581 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:47b23a87-f4b8-5ff7-8649-9f9746e13bb2", "id": "CVE-2026-42583", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42583 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:66ead0c7-7a97-55e3-8c14-947789a8663e", "id": "CVE-2026-42584", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42584 affects version 4.1.130.Final-tuxcare.4 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:93f42d78-ffa7-518b-ad95-6b460806739d", "id": "CVE-2026-42585", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42585 affects version 4.1.130.Final-tuxcare.4 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:b4c45264-1ba0-5dc0-979a-c6002951b378", "id": "CVE-2026-42586", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42586 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:15a056d8-f68e-531b-8c92-2b79bf1ef20d", "id": "CVE-2026-42587", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42587 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:155792f0-16be-5be5-81b3-81f3bf629ae9", "id": "CVE-2026-44248", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44248 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:e5807513-4ec9-5f32-92b5-2bdf4cb9f5f6", "id": "CVE-2026-44249", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44249 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:73d6ff1e-f494-5e82-bdde-d7e6ef02392a", "id": "CVE-2026-44250", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44250 affects version 4.1.130.Final-tuxcare.4 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:40d35c87-627c-5180-9eee-e51b8a0c9495", "id": "CVE-2026-44890", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:481772f8-eee0-5d8a-8349-7955431a0739", "id": "CVE-2026-44891", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44891 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:616cd671-87e4-5301-a15f-70095b2c2a1d", "id": "CVE-2026-44893", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44893 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:4accfd0e-3f17-54ca-b20e-58283ae9c7b2", "id": "CVE-2026-45416", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-45416 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:4c8de3a5-587e-523b-8701-2a10b29705ba", "id": "CVE-2026-45536", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-45536 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:e489cbdb-d5ac-5e13-b4c6-d5c71b78bab6", "id": "CVE-2026-45673", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-45673 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:4be3b75f-b614-5cfc-b7db-ca49cf4ab8b1", "id": "CVE-2026-45674", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-45674 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:1e262a31-43da-5728-a6a5-d0663632d499", "id": "CVE-2026-46340", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46340 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:92da4444-fff7-5830-8fc1-1f37dcc05cfe", "id": "CVE-2026-47244", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47244 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:559308ae-6029-56d1-a10d-9050e25b69b7", "id": "CVE-2026-47691", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47691 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:8feb10c9-648e-525b-9209-d8474b62be4f", "id": "CVE-2026-48006", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48006 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:9cd2f3f5-dcc3-5b1a-9eef-418d98d07c0f", "id": "CVE-2026-48043", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48043 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:141fc4b9-9a9d-5ac8-9222-7b32c9d1dd2f", "id": "CVE-2026-48059", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48059 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:61ef7672-eca6-5d7a-8f36-1758bed9412a", "id": "CVE-2026-50010", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50010 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:88a92fd1-9d2a-57c1-8afc-ac8a52fcc455", "id": "CVE-2026-50011", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-50011 does not affect version 4.1.130.Final-tuxcare.4 of io.netty:netty-bom. Patches already applied: bff98ee51b5d0b7ee25fd5005f2169f2a0467efa (already in target via d5b4e38845f5 'Backport CVE-2026-44890 to 4.1.130.Final')" }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:e067a7f4-fe5d-5587-868e-eedf976b0302", "id": "CVE-2026-50020", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50020 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:8e329cb9-0a55-5125-847b-bf298d1595dd", "id": "CVE-2026-50560", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:3e7e2914-2960-55d0-9822-cf5860510cae", "id": "CVE-2026-55831", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-55831 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:804516bc-fef7-530f-8e4b-eaab738b197d", "id": "CVE-2026-55833", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-55833 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:379ae5fe-9469-5435-b3e1-af55cde74c03", "id": "CVE-2026-55851", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-55851 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:57ead9b6-851a-5924-ab99-1b5a9131560a", "id": "CVE-2026-56745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56745 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:a85ced39-6ff8-5446-8969-a79a89bc6800", "id": "CVE-2026-56746", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56746 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:efd57640-1bca-535c-a1fc-1393b8f1a615", "id": "CVE-2026-56817", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56817 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:6adccf93-2f39-50d3-a1be-80c477ee7445", "id": "CVE-2026-56818", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56818 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:c9eb3afe-4305-557f-83d5-57fddc8e2398", "id": "CVE-2026-56819", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56819 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:d6dc16b3-c021-505f-b1b7-de055e1dfa2a", "id": "CVE-2026-56820", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56820 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:34ca2bee-db11-560c-95a5-a4b565807a0c", "id": "CVE-2026-56821", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56821 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:03cfc226-bf22-5737-811f-f89b6e049822", "id": "CVE-2026-56822", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56822 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:8e159637-a91d-56dc-ba95-b921ec73af2a", "id": "CVE-2026-59898", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59898 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:6476a5b1-dbc1-518d-b8b8-344e10b08d19", "id": "CVE-2026-59899", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59899 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:673b1b94-482d-593a-846b-824f3a921faf", "id": "CVE-2026-59900", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59900 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:89c7f4a1-b5ad-5fbc-b6ec-f1b691603b9e", "id": "CVE-2026-59901", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59901 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:c729a2bb-2ab4-5faf-bb70-efdec237d68a", "id": "CVE-2026-59902", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59902 affects version 4.1.130.Final-tuxcare.4 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:ae3500eb-9283-5c3a-85bc-b24b4ed9771e", "id": "CVE-2026-59903", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59903 affects version 4.1.130.Final-tuxcare.4 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:3ab70480-ce85-52a4-ba99-0fac2e45e037", "id": "CVE-2026-59919", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59919 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:469286b9-2406-5cae-8e07-22535a19ebb9", "id": "CVE-2026-59920", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59920 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:e1653474-4f25-5d78-8541-eb0270bdea51", "id": "CVE-2026-59921", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59921 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:74b67040-f0f7-52fc-b9b1-ddde7917b83c", "id": "CVE-2026-73507", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-73507 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:c155b864-d521-572d-85dc-1ec96e4a3273", "id": "CVE-2026-73508", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-73508 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:b3265b6c-642f-581c-b109-95a2afff0f17", "id": "GHSA-mfg7-5gfp-c4w3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.130.Final-tuxcare.4 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:4be20a5b-0d3c-5586-a4a1-289468e33965", "id": "GHSA-v74w-7mr3-4qg3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.130.Final-tuxcare.4 of io.netty:netty-bom." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.4" } ] } ], "dependencies": [ { "ref": "pkg:maven/io.netty/netty-bom@4.1.130.Final-tuxcare.4" } ] }