{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:de147936-cc3c-5fc7-b59f-70a3de6f6238",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/io.netty/netty-bom@4.1.63.Final-tuxcare.5",
      "type": "library",
      "group": "io.netty",
      "name": "netty-bom",
      "version": "4.1.63.Final-tuxcare.5",
      "purl": "pkg:maven/io.netty/netty-bom@4.1.63.Final-tuxcare.5"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:68e93175-456a-57bd-81ac-2939c686f436",
      "id": "CVE-2021-37136",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-37136 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c2f32fac-5017-51a3-8547-f1dadca1e8ef",
      "id": "CVE-2021-37137",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-37137 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:99c543bb-071c-55b1-9072-4ed96f93586d",
      "id": "CVE-2021-43797",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-43797 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7894201d-ec59-5b30-ae60-d9f205fc1ea2",
      "id": "CVE-2022-24823",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-24823 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3d549d18-0aef-53c0-adfd-ef640580553b",
      "id": "CVE-2022-41881",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-41881 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ce5059bd-6ff4-5a56-aef5-dc94234da697",
      "id": "CVE-2022-41915",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-41915 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:14227619-64c4-561b-ae67-b7d19c39aae8",
      "id": "CVE-2023-34462",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-34462 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5f1eb25e-f0fb-5cc1-b91c-75601db28999",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-44487 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:751dbf85-5625-5514-b68b-f353640c7137",
      "id": "CVE-2023-4586",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2023-4586 is a false positive for io.netty:netty-bom 4.1.63.Final-tuxcare.5."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ee02c433-682c-5d71-9475-e9c5326acf22",
      "id": "CVE-2024-29025",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-29025 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:41830dba-a31c-50fb-9632-a94ec9baf7ec",
      "id": "CVE-2024-47535",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-47535 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:77b2c461-cebe-5fa9-9257-7906121cca6e",
      "id": "CVE-2025-24970",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-24970 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7118da3b-f857-51db-b83d-5f8aa70534e2",
      "id": "CVE-2025-25193",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-25193 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:890a26eb-56d7-5860-91fc-014862bc0580",
      "id": "CVE-2025-55163",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55163 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:00bab4e5-6a4e-5139-b8a5-e3e532339767",
      "id": "CVE-2025-58056",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58056 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1c2c1da8-2ae2-5e99-8cb0-04e6a5d5d474",
      "id": "CVE-2025-58057",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-58057 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a7931adc-9b5d-58d8-8c92-58a2f6d09715",
      "id": "CVE-2025-59419",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-59419 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:91c96cfb-2339-5c85-b2ad-e920af4ddef0",
      "id": "CVE-2025-67735",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-67735 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:97fc06a5-ca46-54ab-8271-d130229e5085",
      "id": "CVE-2026-33870",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33870 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2d7a92cf-0445-5a34-824e-50e4be7ff826",
      "id": "CVE-2026-33871",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33871 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:be2af0df-c8ae-5c0f-81ff-a1e6b2d4c7a6",
      "id": "CVE-2026-41417",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41417 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5656c3d4-147d-5d01-bc8d-d133ee276132",
      "id": "CVE-2026-42577",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42577 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:94a2f6df-09d8-5753-8336-72a3ce292d26",
      "id": "CVE-2026-42578",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42578 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dc44c482-7d2c-5673-8cc2-edc505e1b042",
      "id": "CVE-2026-42579",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42579 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c7b51b8a-eed0-51e4-8d96-039740e13c4f",
      "id": "CVE-2026-42580",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42580 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1fe808f6-7be3-5cbb-bb1e-f7113e63c4cc",
      "id": "CVE-2026-42581",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42581 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1cd99e1d-65f7-5397-8075-f066c8076c3c",
      "id": "CVE-2026-42583",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42583 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6d5e290c-1430-5e7a-857f-8df54e78eb7a",
      "id": "CVE-2026-42584",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42584 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:13038d52-caad-57b8-93dd-ba456506cb04",
      "id": "CVE-2026-42585",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42585 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:48e9522c-c505-587d-b49f-224f67c83b99",
      "id": "CVE-2026-42586",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42586 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e63d4e2a-1622-51a8-9b9d-5562200908e5",
      "id": "CVE-2026-42587",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42587 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c2010225-fff1-5663-bae1-63517d2a998b",
      "id": "CVE-2026-44248",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44248 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ad3f4323-14a0-512a-aafb-4875a9682371",
      "id": "CVE-2026-44249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44249 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3412e508-5be5-53c8-a3b7-3b7df5add070",
      "id": "CVE-2026-44250",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44250 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:76a2a229-0f4a-5e34-bd2d-daf45b26712d",
      "id": "CVE-2026-44890",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:969cac59-6a21-5fd4-acf8-c5e50c2d279a",
      "id": "CVE-2026-44891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44891 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6f85e89f-fd6f-5bfd-8aea-a6edfcf38c41",
      "id": "CVE-2026-44893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44893 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:64233415-1807-5cdb-b7ad-239ccb92dc29",
      "id": "CVE-2026-45416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45416 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8bd66723-1849-58b4-a7cb-fa62d97b22b6",
      "id": "CVE-2026-45536",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45536 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:736cb681-8dcc-5cc9-b57c-16eb156be9d8",
      "id": "CVE-2026-45673",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45673 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:492537ff-06fa-53d8-8b0c-9e26f88ebba7",
      "id": "CVE-2026-45674",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-45674 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5ab950ad-e7a6-55cc-894c-217387c5d056",
      "id": "CVE-2026-46340",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-46340 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:968cabfc-095b-576a-95c6-d558726a8b41",
      "id": "CVE-2026-47244",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47244 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b22c42a6-4084-598a-8642-819bae123bfb",
      "id": "CVE-2026-47691",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47691 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8b5d3ba5-8b3d-5c78-b48a-5c7a9ea85f07",
      "id": "CVE-2026-48006",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48006 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:661c2d3a-dbfd-5d35-bc71-b4d11c0fab7a",
      "id": "CVE-2026-48043",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-48043 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6be7f600-26f3-5329-a682-8a0d5150b8d8",
      "id": "CVE-2026-48059",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48059 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7d4c4a5c-47ba-5793-af0b-a5fd501bbeec",
      "id": "CVE-2026-50010",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50010 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6c6c15aa-332b-51b2-a8d4-877b1d19140b",
      "id": "CVE-2026-50011",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50011 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b9d5c77e-8ec4-540a-a75f-faa1557ed9cc",
      "id": "CVE-2026-50020",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50020 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0a76df64-6bb9-5a24-8ace-10c8c597e941",
      "id": "CVE-2026-50560",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:32fcec29-1e94-5d3e-84c2-37bf87f022f5",
      "id": "CVE-2026-55831",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55831 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c046a975-5546-5764-aabe-684e1d6394af",
      "id": "CVE-2026-55833",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55833 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d4784e1a-6c19-5ed5-98a1-0695c6f85fea",
      "id": "CVE-2026-55851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55851 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:968c648d-a87a-5922-a7e6-67447c80c60e",
      "id": "CVE-2026-56745",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56745 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:12e567e2-e309-54cf-9360-3e180bfd2b11",
      "id": "CVE-2026-56746",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56746 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:264d8dfa-9013-5ca9-97bf-4cf183b1fa3d",
      "id": "CVE-2026-56817",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-56817 does not affect version 4.1.63.Final-tuxcare.5 of io.netty:netty-bom. not_affected \u2014 The Netty codec-xml module contains XmlDecoder, which instantiates an Aalto XML parser without security configuration (line 38: new InputFactoryImpl() with no XXE protection). However, this is a library component that Netty itself does not use in its own production code. The vulnerability only manifests when downstream applications explicitly add XmlDecoder to their Netty channel pipelines. Per..."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8eb18788-ba69-5669-b051-ddaa236d637f",
      "id": "CVE-2026-56818",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56818 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:01f81aee-25b7-5dd7-8789-ee9c9812d9c1",
      "id": "CVE-2026-56819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56819 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:18483180-02d0-50b7-beb3-bb901dc521d4",
      "id": "CVE-2026-59898",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59898 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4c8a830a-ec4b-51d3-86f7-4988492a4df7",
      "id": "CVE-2026-59899",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59899 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dddae566-058d-55d8-8622-b83a88318425",
      "id": "CVE-2026-59900",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59900 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fceebab5-d42a-5c0e-b609-9ab7085c9b1c",
      "id": "CVE-2026-59901",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59901 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ab5b3a30-61b4-56e1-9613-57f3f38d009c",
      "id": "CVE-2026-59902",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59902 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:66a22530-35c3-5df3-be7c-84f2b99b8e16",
      "id": "CVE-2026-59903",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59903 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:887ca952-cd91-5466-98ae-c26b93ed0ad2",
      "id": "CVE-2026-59919",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59919 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b7891caf-bbcf-5df3-a2a7-106bd0ade02d",
      "id": "CVE-2026-59920",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59920 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f7af5130-4913-5491-88f2-f8504f596a8e",
      "id": "CVE-2026-59921",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59921 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0ad4ddc6-5aae-5177-96a3-f11d6b01fe64",
      "id": "CVE-2026-73507",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-73507 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:91e5010b-d30a-59bf-855d-86844f507425",
      "id": "CVE-2026-73508",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-73508 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bb97b1b2-bcd5-5980-b82a-a1022528a8fd",
      "id": "GHSA-mfg7-5gfp-c4w3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e9657996-bdc8-54fc-b708-2560cba16449",
      "id": "GHSA-v74w-7mr3-4qg3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9f0c4f05-19e2-5e09-bf2b-e6b989416737",
      "id": "GHSA-xpw8-rcwv-8f8p",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-xpw8-rcwv-8f8p affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-bom@4.1.63.Final-tuxcare.5"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.netty/netty-bom@4.1.63.Final-tuxcare.5"
    }
  ]
}