{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:09163bb3-44ca-58cc-acf7-c0d8527afc1f", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/io.netty/netty-buffer@4.1.122.Final-tuxcare.2", "type": "library", "group": "io.netty", "name": "netty-buffer", "version": "4.1.122.Final-tuxcare.2", "purl": "pkg:maven/io.netty/netty-buffer@4.1.122.Final-tuxcare.2" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:81823cb7-0e71-5277-9885-86aca2f1204b", "id": "CVE-2025-55163", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55163 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:2b1eff49-8cc2-5d99-974b-28c5e0a6987f", "id": "CVE-2025-58056", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-58056 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:4ad93e75-7745-540d-9e1c-11e8f6f695a0", "id": "CVE-2025-58057", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-58057 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:95f4170a-e821-55af-b6ac-e5fed1864736", "id": "CVE-2025-59419", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59419 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:f53d7a1d-ae12-5553-9d87-7dc7c17e4289", "id": "CVE-2025-67735", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-67735 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:3b01a937-e6c7-5c68-aa59-9a436b03c1d7", "id": "CVE-2026-33870", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33870 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:265dd968-7f26-5374-a5b2-4173eed73304", "id": "CVE-2026-33871", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33871 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:edaf06fe-14e9-528b-b464-35664525dcd9", "id": "CVE-2026-41417", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41417 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:d27c7c30-5f5a-58e6-bd3a-aa6020839994", "id": "CVE-2026-42577", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-42577 does not affect version 4.1.122.Final-tuxcare.2 of io.netty:netty-buffer. CVE-2026-42577 affects Netty 4.2.x only (advisory range >= 4.2.0.Final, < 4.2.13.Final). An fd left registered with an epoll event mask of 0 is woken forever by the unmaskable EPOLLERR/EPOLLHUP after a RST on a half-closed connection. Target 4.1.122.Final is NOT affected due to architectural differences. The patch modifies EpollIoHandler.java and EpollIoOps.java, part of 4.2's IoHandler/IoOps abstraction. Neither file exists in 4.1.x, which registers via EpollEventLoop.modify() off AbstractEpollChannel.flags. That field is seeded Native.EPOLLET, and no read/close/half-close path clears it (only the explicit pre-registration setEpollMode(LEVEL_TRIGGERED) opt-in), so the registration stays edge-triggered and the RST is reported once per edge instead of on every epoll_wait. The chain from INPUT (connection state change) to GOAL (CPU busy-loop via empty event mask) is broken at step (ii): the target cannot produce an empty event mask. Verdict: not_affected. Justification: code_not_reachable (Rule 5 Type A2)." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:0f6a0efa-9f0c-5016-8bd2-ad4b6f946fb7", "id": "CVE-2026-42578", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42578 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:00751de3-82c8-53a0-8b20-7a32c1f718b8", "id": "CVE-2026-42579", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42579 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:7d388d9f-b36e-59a0-b333-e5047a93c6bf", "id": "CVE-2026-42580", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42580 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:e00b6932-70d7-5709-84f2-c14dae742986", "id": "CVE-2026-42581", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42581 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:ec760d99-a1bf-5ffa-b7dd-126ee889ec95", "id": "CVE-2026-42583", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42583 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:9d8ae776-6e7f-56ca-bae8-60cfd699ec21", "id": "CVE-2026-42584", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42584 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:3bd70d1e-99f2-5208-bc95-06f22ed93c07", "id": "CVE-2026-42585", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42585 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:f404a127-3055-5438-8d23-76c3fcb38928", "id": "CVE-2026-42586", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42586 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:ca34c822-de55-5a75-8135-d9cde8182696", "id": "CVE-2026-42587", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42587 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:af965e01-eb4b-5c59-9c8a-98629a1970a4", "id": "CVE-2026-44248", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44248 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:d6175c9b-8e67-503b-8fc6-f38980cad636", "id": "CVE-2026-44249", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44249 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:ee1fbcd9-0038-5452-8cbf-99dca27d9608", "id": "CVE-2026-44250", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44250 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:635af1d2-9900-5422-88d6-d385c567c769", "id": "CVE-2026-44890", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:422ffb43-ed01-5b38-bd93-b21378d852c5", "id": "CVE-2026-44891", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44891 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:f697f51d-70a0-54c6-821e-200c6cc17f73", "id": "CVE-2026-44893", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44893 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:15fd1d22-46f8-5845-8ca8-db87cb768d76", "id": "CVE-2026-45416", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-45416 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:8b984d94-6a15-52a5-89e9-ebb52bb7cfc7", "id": "CVE-2026-45536", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-45536 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:5336e369-ed96-50c8-bbe5-7af0afcb9920", "id": "CVE-2026-45673", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-45673 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:b62bd13a-6570-576f-968c-520cd1cb7b94", "id": "CVE-2026-45674", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-45674 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:0ae3fcc5-3ce6-5b5b-a45b-181cb99cc82b", "id": "CVE-2026-46340", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46340 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:6a9fb6d0-ed05-5024-b505-d7c99b506be2", "id": "CVE-2026-47244", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47244 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:7ec9b6af-96ba-5907-a274-9cef1cdddcf0", "id": "CVE-2026-47691", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47691 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:b693f63f-3959-5dfa-8480-6ebaf26e755e", "id": "CVE-2026-48006", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48006 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:e7fd6ffd-53e3-5f39-9e82-ba741f7eab1c", "id": "CVE-2026-48043", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48043 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:f0250092-a36d-5cde-88c6-00c5eaaabd53", "id": "CVE-2026-48059", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48059 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:57947b34-168b-510b-9c71-c8bc8b096435", "id": "CVE-2026-50010", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50010 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:f2aaa60c-ac6f-527c-8b70-06a7e180a81d", "id": "CVE-2026-50011", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50011 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:85cb180d-2a9d-505d-825d-008d25e230ed", "id": "CVE-2026-50020", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50020 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:efa49c28-54a0-5985-85a2-b0b48940cf8b", "id": "CVE-2026-50560", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:1184f422-0edf-522d-ad2c-a9c55a87c6b3", "id": "CVE-2026-55831", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-55831 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:e5142bef-6d36-5fd9-ae9c-393d3ca7681d", "id": "CVE-2026-55833", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-55833 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:000b8f60-32bb-5144-8b7a-6ce28b915ef3", "id": "CVE-2026-55851", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-55851 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:84296285-abf3-5ed6-812f-4a2eb042bde8", "id": "CVE-2026-56745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56745 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:73aa0ee9-76b2-527d-9f7a-80d56176e115", "id": "CVE-2026-56746", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56746 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:d70e9a9f-6fd6-52e7-b47d-c1bcdf3eae6e", "id": "CVE-2026-56817", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56817 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:af33d9e9-65a0-53a5-ba8c-f74c4c4be9c8", "id": "CVE-2026-56818", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56818 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:461428c1-b3cb-5cf1-a55a-dc8cb8d40fbf", "id": "CVE-2026-56819", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56819 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:3f0d01b9-c93e-5d02-a266-52427f6638c2", "id": "CVE-2026-56820", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56820 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:8bce6d1e-636e-5239-a0a8-a6a11d29aed4", "id": "CVE-2026-56821", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56821 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:8b77d417-bb50-5a50-adb0-0570e332d8ee", "id": "CVE-2026-56822", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56822 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:e38bde2a-0c63-5822-8fad-5bad81368190", "id": "CVE-2026-59898", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59898 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:5dc5d88d-9380-5227-9004-77fa02284593", "id": "CVE-2026-59899", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59899 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:e9a4ffe8-cd9e-51b6-b44c-ccb60f37311f", "id": "CVE-2026-59900", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59900 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:349cc9df-cc35-5dde-822d-016fc2ca6083", "id": "CVE-2026-59901", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59901 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:be9c538b-5710-50b0-a345-16e16c573c9e", "id": "CVE-2026-59902", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59902 affects version 4.1.122.Final-tuxcare.2 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:1ace3a50-d094-58c2-ba9f-c4ab679efc5e", "id": "CVE-2026-59903", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59903 affects version 4.1.122.Final-tuxcare.2 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:df4ed1ff-87f3-5393-bdab-6fff94e3ebe6", "id": "CVE-2026-59919", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59919 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:f6fe6030-415e-514a-8c25-6f58a1718ae7", "id": "CVE-2026-59920", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59920 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:0e8c85d4-d922-5c28-b069-d805e41ce542", "id": "CVE-2026-59921", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59921 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:96252a97-ac33-57f0-b6b3-23f218ac30e7", "id": "CVE-2026-73507", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-73507 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:58261f81-cc88-5de2-b6b1-7e77289cdf1c", "id": "CVE-2026-73508", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-73508 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:af391432-3a79-530f-b352-52508e0f96c2", "id": "GHSA-mfg7-5gfp-c4w3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.122.Final-tuxcare.2 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:1dcbbed6-041c-52fe-a4dc-8e3649cae464", "id": "GHSA-v74w-7mr3-4qg3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.122.Final-tuxcare.2 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.122.Final-tuxcare.2" } ] } ], "dependencies": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.122.Final-tuxcare.2" } ] }