{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:1d625f5b-3762-5938-8054-1cf767994285", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/io.netty/netty-buffer@4.1.122.Final-tuxcare.1", "type": "library", "group": "io.netty", "name": "netty-buffer", "version": "4.1.122.Final-tuxcare.1", "purl": "pkg:maven/io.netty/netty-buffer@4.1.122.Final-tuxcare.1" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:38ef76d4-7dfe-5381-90df-27829d5cff67", "id": "CVE-2025-55163", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-55163 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:7e75d6fa-ffe5-5e52-bd12-3bcba1d31e0a", "id": "CVE-2025-58056", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-58056 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:33c318eb-4165-501a-8b7a-8c24f5980578", "id": "CVE-2025-58057", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-58057 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:08312b06-762f-5d00-b050-b3aa9bdd3db2", "id": "CVE-2025-59419", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-59419 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:82dcc811-05d5-5df5-8413-15470e47ca34", "id": "CVE-2025-67735", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-67735 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:f64d8150-2e41-5f08-910f-3d0b37022ac9", "id": "CVE-2026-33870", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33870 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:77da0f49-6110-556f-9f86-a66e03dddf39", "id": "CVE-2026-33871", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33871 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:4ff14d85-d3c7-54cb-8e6c-e82c2f77d06c", "id": "CVE-2026-41417", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41417 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:72969fa8-6c48-5734-9290-2a2d1689cc50", "id": "CVE-2026-42577", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-42577 does not affect version 4.1.122.Final-tuxcare.1 of io.netty:netty-buffer. CVE-2026-42577 affects Netty 4.2.x only (advisory range >= 4.2.0.Final, < 4.2.13.Final). An fd left registered with an epoll event mask of 0 is woken forever by the unmaskable EPOLLERR/EPOLLHUP after a RST on a half-closed connection. Target 4.1.122.Final is NOT affected due to architectural differences. The patch modifies EpollIoHandler.java and EpollIoOps.java, part of 4.2's IoHandler/IoOps abstraction. Neither file exists in 4.1.x, which registers via EpollEventLoop.modify() off AbstractEpollChannel.flags. That field is seeded Native.EPOLLET, and no read/close/half-close path clears it (only the explicit pre-registration setEpollMode(LEVEL_TRIGGERED) opt-in), so the registration stays edge-triggered and the RST is reported once per edge instead of on every epoll_wait. The chain from INPUT (connection state change) to GOAL (CPU busy-loop via empty event mask) is broken at step (ii): the target cannot produce an empty event mask. Verdict: not_affected. Justification: code_not_reachable (Rule 5 Type A2)." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:d8368a0c-1ac0-5880-a3d2-f437dd2754e4", "id": "CVE-2026-42578", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42578 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:37c585cb-74be-57dd-aec2-deaf3e74db32", "id": "CVE-2026-42579", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42579 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:c71f69d2-5674-5454-9170-d16c5f0bdd5d", "id": "CVE-2026-42580", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42580 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:9d08be2d-7ff2-51ac-b389-1f5ce7618cd9", "id": "CVE-2026-42581", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42581 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:0b00a7f6-6ffd-5b82-8e54-fec78dd38aa9", "id": "CVE-2026-42583", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42583 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:9cadc578-1e79-5523-9dc0-9859966e54a6", "id": "CVE-2026-42584", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42584 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:668353d4-cf8a-54ba-893a-cf368b64d5a4", "id": "CVE-2026-42585", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42585 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:4359d8bc-d6de-54a7-9584-6770f8d0077f", "id": "CVE-2026-42586", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42586 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:836aa7d8-b1b8-56b1-940c-7f1cd14dd571", "id": "CVE-2026-42587", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42587 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:d6301c86-589c-5f47-b956-20ccaa697c28", "id": "CVE-2026-44248", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44248 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:c724dfad-c375-5858-9d5d-aac18e95f1e5", "id": "CVE-2026-44249", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44249 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:41348fda-25e3-5d7a-b6b8-8516615f011c", "id": "CVE-2026-44250", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44250 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:496e0993-1ef5-5f31-95e9-393951246e11", "id": "CVE-2026-44890", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44890 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:1258850d-9824-525b-83d4-202da23b0a5d", "id": "CVE-2026-44891", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44891 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:acaf793b-a48f-552a-b46f-e3e54e5cc197", "id": "CVE-2026-44893", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44893 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:9be7ed72-6280-55f3-b654-eec5ce63553f", "id": "CVE-2026-45416", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45416 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:c8ee1f81-b6a0-53df-91bf-bddb190e212d", "id": "CVE-2026-45536", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45536 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:afc03e29-ddcd-5d8f-8454-0d086b606a63", "id": "CVE-2026-45673", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45673 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:7c81922c-de73-52ac-91fd-6e752973fd6a", "id": "CVE-2026-45674", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45674 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:f0f47af7-8c28-5a4a-a63c-10333f81c475", "id": "CVE-2026-46340", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-46340 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:a320977b-364d-5eb0-8963-e11824cdd328", "id": "CVE-2026-47244", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47244 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:3fc0da9c-b672-5a84-bac2-0d02dad87f2f", "id": "CVE-2026-47691", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47691 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:3e322414-da53-5435-9edb-74f5314f842f", "id": "CVE-2026-48006", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-48006 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:9a01dc52-2ace-584a-a9e0-c4b8e9927b18", "id": "CVE-2026-48043", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-48043 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:79a344b4-98b3-5ff5-9fce-611238f881e1", "id": "CVE-2026-48059", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-48059 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:f29d2a49-7427-5753-b7da-6295d3dfa680", "id": "CVE-2026-50010", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50010 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:384a7b8d-266f-53d1-8b97-acd7d08692ee", "id": "CVE-2026-50011", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50011 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:341c847c-ceeb-570c-8878-9763b0aeeae8", "id": "CVE-2026-50020", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50020 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:a454792b-99cf-5ad2-8ebd-39ca98be5b0f", "id": "CVE-2026-50560", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50560 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:51db5d24-911c-596c-81db-7ec4860f37b8", "id": "CVE-2026-55831", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55831 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:76f777a1-c870-50a3-a900-19f8ac112e44", "id": "CVE-2026-55833", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55833 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:1b558c90-9f34-57bc-8c02-635bbd35f442", "id": "CVE-2026-55851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55851 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:0d04342b-01f8-574c-974f-0bcf79faaf2d", "id": "CVE-2026-56745", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56745 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:c778c83a-f330-5476-bfb6-2d4761c8e759", "id": "CVE-2026-56746", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56746 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:d69785a7-d74d-5f29-b9b1-273e16ae85df", "id": "CVE-2026-56817", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56817 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:47778186-29f4-5a88-99e8-3e02c96816b8", "id": "CVE-2026-56818", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56818 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:1397bb65-3deb-54a2-bccb-b3d9c74c7ee6", "id": "CVE-2026-56819", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56819 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:1c2dcf85-0997-552c-b058-a8add4fdb9bd", "id": "CVE-2026-56820", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56820 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:d4593136-5dec-55a1-8a5e-0b118cc987df", "id": "CVE-2026-56821", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56821 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:85d7568b-283b-5c9b-ae5c-e6a74318be6f", "id": "CVE-2026-56822", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56822 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:b3b5cc7b-e29c-500b-8d82-dccb9f5e1123", "id": "CVE-2026-59898", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59898 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:b68920b6-8e95-5dc8-b282-44721971ff50", "id": "CVE-2026-59899", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59899 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:611c89b5-de8f-5de6-86bf-05bba8209438", "id": "CVE-2026-59900", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59900 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:f1766f26-4c4c-5521-b124-401c7f27135c", "id": "CVE-2026-59901", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59901 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:d1171e1f-92fa-5d7d-84fb-2dd9ebc5f942", "id": "CVE-2026-59902", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59902 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:3dc8c197-a4d4-5604-95c7-0d42aa919763", "id": "CVE-2026-59903", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59903 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:b0edd735-e7ad-53f2-bea9-c305cbc7276c", "id": "CVE-2026-59919", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59919 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:61aab825-6263-52a3-9cae-6023e16f0659", "id": "CVE-2026-59920", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59920 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:05a034d6-96f8-5d5c-939e-5885396f6a1a", "id": "CVE-2026-59921", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59921 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:a5288adf-a2ea-5c06-8dc9-aa65c33c7976", "id": "CVE-2026-73507", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-73507 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:6b849ac6-0092-5eca-93ea-a440005647c5", "id": "CVE-2026-73508", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-73508 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:6c868f04-10ec-5306-b7c1-e5bb3d50750d", "id": "GHSA-mfg7-5gfp-c4w3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:87acaada-3d85-5e7a-a8cd-ec242edb51a2", "id": "GHSA-v74w-7mr3-4qg3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.122.Final-tuxcare.1" } ] } ], "dependencies": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.122.Final-tuxcare.1" } ] }