{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:9662ad38-14c8-5f41-805a-2d6df72ffcf0", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.1", "type": "library", "group": "io.netty", "name": "netty-buffer", "version": "4.1.130.Final-tuxcare.1", "purl": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.1" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:1361570e-990e-5501-af7d-507cc7a1175b", "id": "CVE-2025-55163", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-55163 does not affect version 4.1.130.Final-tuxcare.1 of io.netty:netty-buffer. already_fixed \u2014 The target Netty 4.1.130.Final repository already contains the complete MadeYouReset (CVE-2025-55163) mitigation. The Http2MaxRstFrameLimitEncoder defense class is present, integrated into the HTTP/2 connection handler builder, and enabled by default for servers with a threshold of 200 RST_STREAM frames per 30-second window. All protocol-error-triggered RST writes route through the protected en..." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:b3627d4f-572d-5a9a-81ee-52128cc4bcb3", "id": "CVE-2026-33870", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33870 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:e55c33c7-3de4-56d5-b242-1303cb33c213", "id": "CVE-2026-33871", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33871 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:a93c8b2a-ab74-590c-962c-a79f3c36534a", "id": "CVE-2026-41417", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41417 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:7a7d0874-105e-5beb-9c64-06578fa94fa6", "id": "CVE-2026-42578", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42578 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:23e0633a-8b9f-58f8-b411-eae55cb2171a", "id": "CVE-2026-42579", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42579 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:d3c58991-4fbd-569d-80c4-442a7830dce8", "id": "CVE-2026-42580", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42580 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:e3476171-c859-593f-959d-652a7834c723", "id": "CVE-2026-42581", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42581 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:dae69763-0b2e-5bf0-984f-e2da8946272d", "id": "CVE-2026-42583", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42583 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:a48cf11e-a913-5a0a-baff-b27b8f89f7c5", "id": "CVE-2026-42584", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42584 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:ca417edf-dd94-5d08-bdd3-01e34ebff54a", "id": "CVE-2026-42585", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42585 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:bd64071f-8607-5fee-934d-5f8ae4d31b56", "id": "CVE-2026-42586", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42586 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:50569d8f-5d8e-56d8-9f59-c29772321b01", "id": "CVE-2026-42587", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42587 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:91ba2580-5103-5d1d-ae45-25f6b950f302", "id": "CVE-2026-44248", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44248 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:c8e2927a-a130-515a-a6a7-42f04f01bed5", "id": "CVE-2026-44249", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44249 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:94e05f4b-6e41-55aa-bccc-5247dd61d317", "id": "CVE-2026-44250", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44250 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:682cd4f4-d682-5a63-8f68-c7ea00add1b2", "id": "CVE-2026-44890", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:df3615e5-8a6a-5c0b-a7ac-90e0897cf22f", "id": "CVE-2026-44891", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44891 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:2582fbd7-2499-52f4-bb9e-858520a6d23e", "id": "CVE-2026-44893", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44893 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:0eb67c22-3288-588e-afbd-0a07d5bf1366", "id": "CVE-2026-45416", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45416 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:84a4e51f-093b-5601-b02f-c201a9db08e5", "id": "CVE-2026-45536", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45536 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:3cb9a2d7-6dda-5962-a602-f361d301bf3f", "id": "CVE-2026-45673", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45673 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:a7be592a-c650-5e96-80a2-be7d5c98ca53", "id": "CVE-2026-45674", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45674 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:0abbec05-3571-5400-8f34-21bc05ad61a4", "id": "CVE-2026-46340", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-46340 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:793ed5f6-d9fa-5e2f-a6ad-527df47db4a2", "id": "CVE-2026-47244", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47244 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:8c792c92-8131-5166-be4b-feeddd604de4", "id": "CVE-2026-47691", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47691 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:878f9ca4-63e8-5a3d-9fb1-b2c22f6817f8", "id": "CVE-2026-48006", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-48006 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:c93c426c-c7bc-557a-b71c-d8eb5c2cc889", "id": "CVE-2026-48043", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48043 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:0bcdbd23-55eb-5c10-a0b0-5e1561deb41f", "id": "CVE-2026-48059", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48059 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:6c2502e7-23ab-55b3-aceb-fa7be3480a17", "id": "CVE-2026-50010", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50010 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:f9cf1b16-7a0f-5ee8-9640-15f3e5284031", "id": "CVE-2026-50011", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-50011 does not affect version 4.1.130.Final-tuxcare.1 of io.netty:netty-buffer. Patches already applied: bff98ee51b5d0b7ee25fd5005f2169f2a0467efa (already in target via d5b4e38845f5 'Backport CVE-2026-44890 to 4.1.130.Final')" }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:0d047788-c70c-525c-a5b4-2241acb05129", "id": "CVE-2026-50020", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50020 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:69759390-1486-5e30-849c-d515de6e62f2", "id": "CVE-2026-50560", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:c1742afb-e03b-51c9-922a-3eb8a13afb8f", "id": "CVE-2026-55831", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55831 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:05b47afd-5c52-5f80-a014-679fcf2cae31", "id": "CVE-2026-55833", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55833 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:fcbb820e-b408-5fb6-a44b-657ba81ff8b1", "id": "CVE-2026-55851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55851 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:7216a83f-b59f-5967-9074-3e5a4845cfe5", "id": "CVE-2026-56745", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56745 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:29d40649-5dc1-51b6-abfd-809a87a78a98", "id": "CVE-2026-56746", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56746 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:d23e135e-edcb-565c-a7c5-61cd7d20a336", "id": "CVE-2026-56817", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56817 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:85575d25-67a6-50bd-8ac2-bf17b0eda343", "id": "CVE-2026-56818", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56818 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:3559f570-38ce-5063-b8c9-5a2451e5ccf6", "id": "CVE-2026-56819", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56819 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:73a553e9-0683-5bcb-86f3-36d54d0dbeef", "id": "CVE-2026-56820", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56820 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:61bf2287-cf34-5304-a4c0-cae4f7001c63", "id": "CVE-2026-56821", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56821 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:4d9b30e2-c856-56c5-bf2f-ee57d7399dd8", "id": "CVE-2026-56822", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56822 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:7a8a58d1-d72b-5214-a0cf-88075ea7865a", "id": "CVE-2026-59898", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59898 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:eac8124f-d6d4-5468-a1f2-5f2344f40e4d", "id": "CVE-2026-59899", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59899 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:31f06044-b180-57c0-bc0e-cad56d02a667", "id": "CVE-2026-59900", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59900 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:25454b16-d703-5b38-b588-1505e6e293fc", "id": "CVE-2026-59901", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59901 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:8a6d246a-41b0-5506-90a3-1f222688297b", "id": "CVE-2026-59902", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59902 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:6f5797a4-2ffc-5e63-885b-37346a2536fe", "id": "CVE-2026-59903", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59903 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:5f6074bd-7184-5223-8b7b-31ebb94c30f1", "id": "CVE-2026-59919", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59919 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:192b78f3-99c5-5831-86f6-269b68cfb110", "id": "CVE-2026-59920", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59920 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:41bc80b8-41d9-57e6-9000-ea77a6cb46bb", "id": "CVE-2026-59921", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59921 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:a92454ed-364b-5c41-a44c-713240bbce40", "id": "CVE-2026-73507", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-73507 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:d10e4dca-cd4a-55f1-83a7-faf9f84f7cbb", "id": "CVE-2026-73508", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-73508 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:dd3fcbb1-0ee1-5429-9a50-fc376d63e590", "id": "GHSA-mfg7-5gfp-c4w3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:d6954453-8a0d-5837-a96b-6a6f32c90cef", "id": "GHSA-v74w-7mr3-4qg3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.1" } ] } ], "dependencies": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.1" } ] }