{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:650b6764-8471-507d-9ac6-082bd048dab3", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.2", "type": "library", "group": "io.netty", "name": "netty-buffer", "version": "4.1.130.Final-tuxcare.2", "purl": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.2" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:6aeb8435-41f9-541a-b58f-8b4ed84dedd9", "id": "CVE-2025-55163", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-55163 does not affect version 4.1.130.Final-tuxcare.2 of io.netty:netty-buffer. already_fixed \u2014 The target Netty 4.1.130.Final repository already contains the complete MadeYouReset (CVE-2025-55163) mitigation. The Http2MaxRstFrameLimitEncoder defense class is present, integrated into the HTTP/2 connection handler builder, and enabled by default for servers with a threshold of 200 RST_STREAM frames per 30-second window. All protocol-error-triggered RST writes route through the protected en..." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:67a1dddf-95a6-51f7-aa2d-24a6caf7cf91", "id": "CVE-2026-33870", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33870 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:9ed66815-821d-5268-8728-84b15a107f35", "id": "CVE-2026-33871", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33871 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:160ec63a-321a-5c3f-9cad-2926c995e856", "id": "CVE-2026-41417", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41417 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:5ef360e1-6f57-5b3c-a60a-44f25172efa0", "id": "CVE-2026-42578", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42578 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:7f4350e5-a901-5b62-b935-6005f1b4abb7", "id": "CVE-2026-42579", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42579 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:ac908ae4-3f8b-573b-9a95-9d547b868a65", "id": "CVE-2026-42580", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42580 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:be6bdfbf-c306-51f1-a39e-60ef5e0ca386", "id": "CVE-2026-42581", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42581 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:dad3cf3e-b341-5ef6-b030-b5cbd3956f69", "id": "CVE-2026-42583", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42583 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:207d5799-a7e8-565a-a5ce-231eff24eab1", "id": "CVE-2026-42584", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42584 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:c84cacdb-62d3-56ff-b111-5a129d254fd9", "id": "CVE-2026-42585", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42585 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:61958296-fd18-54b5-88f7-e6995fd33b64", "id": "CVE-2026-42586", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42586 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:3acc469c-7efe-545f-88b8-763796bb4417", "id": "CVE-2026-42587", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42587 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:0f4d329f-b51a-5057-a0a7-f967339beab4", "id": "CVE-2026-44248", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44248 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:fb667b6a-30d4-5f92-9d5e-345fa0f2a82d", "id": "CVE-2026-44249", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44249 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:42d0cf2f-1feb-51e1-800e-a8e728ce08ea", "id": "CVE-2026-44250", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44250 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:e7a76dcd-3290-5922-bf4e-4b4a41c53d55", "id": "CVE-2026-44890", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:e53d5ea3-0647-52dc-9230-434f81b2c89e", "id": "CVE-2026-44891", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44891 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:2cd18856-d5f7-5cc4-b8ea-096aa8d43c6c", "id": "CVE-2026-44893", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44893 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:36cf42e5-5d64-5f5a-a8b4-35659667ad20", "id": "CVE-2026-45416", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45416 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:76fcdf2f-6103-5f4e-a4fd-8ff5fd4a4be0", "id": "CVE-2026-45536", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45536 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:366e2614-5fbd-541e-9179-1cea097b2c66", "id": "CVE-2026-45673", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-45673 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:98d57870-94df-53f9-b25d-655d0abb8384", "id": "CVE-2026-45674", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-45674 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:c1e736b0-2338-55b0-9447-3bb2e26155f2", "id": "CVE-2026-46340", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46340 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:4260fa7c-c0a9-583e-b26f-69d91ee640c9", "id": "CVE-2026-47244", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47244 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:b2340e1a-7c67-57dd-80ba-5cd2da2463d7", "id": "CVE-2026-47691", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47691 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:acb4651d-2f5a-5ab4-a428-abbbfd74f3cc", "id": "CVE-2026-48006", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48006 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:59756600-a6e2-54ce-9ac5-c8d0f051be5d", "id": "CVE-2026-48043", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48043 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:df5e8c85-1f84-52b1-bd38-f77919eabcb9", "id": "CVE-2026-48059", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48059 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:29741c42-9659-5155-ac63-ccb64e8a257b", "id": "CVE-2026-50010", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50010 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:ecc46e44-a1d9-5a0d-a75a-523ac49532b8", "id": "CVE-2026-50011", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-50011 does not affect version 4.1.130.Final-tuxcare.2 of io.netty:netty-buffer. Patches already applied: bff98ee51b5d0b7ee25fd5005f2169f2a0467efa (already in target via d5b4e38845f5 'Backport CVE-2026-44890 to 4.1.130.Final')" }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:fbb2f66f-a91d-5d95-82f4-35e4c832615b", "id": "CVE-2026-50020", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50020 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:80d53a94-4b72-5d3c-9d60-579166a9a9db", "id": "CVE-2026-50560", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:2ebd5676-182f-5651-b3f2-ad73795271bd", "id": "CVE-2026-55831", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55831 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:a6cf4eac-61c6-543f-b703-18a11e52fbce", "id": "CVE-2026-55833", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55833 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:40e7d4af-ac22-5230-96be-897f173697ec", "id": "CVE-2026-55851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55851 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:d17e83e4-4f30-58b0-8df9-b96da0db27d4", "id": "CVE-2026-56745", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56745 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:27e3b6c3-5421-566f-b8db-eef280336d60", "id": "CVE-2026-56746", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56746 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:86eedb4d-afbe-51e3-8079-fa8f7124ca79", "id": "CVE-2026-56817", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56817 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:ac4693cf-1c1c-5adf-9f0f-15a153c3800b", "id": "CVE-2026-56818", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56818 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:b5fc7815-15ba-5895-bb87-4bef0bb83b4e", "id": "CVE-2026-56819", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56819 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:f9ce8e1b-7406-5d75-ba3f-9284de388b42", "id": "CVE-2026-56820", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56820 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:959079cf-a530-533c-9c01-0ce3270ac68b", "id": "CVE-2026-56821", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56821 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:ad1c0371-577a-54f3-ad91-d5ee00443a6e", "id": "CVE-2026-56822", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56822 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:b4f7da5d-21a0-5d92-aa03-7f05d39e60d3", "id": "CVE-2026-59898", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59898 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:d5568c5b-5636-5cf3-ae51-d2bcfc510dfb", "id": "CVE-2026-59899", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59899 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:2595f43f-1b49-5b10-81b2-bbfbd5ce002b", "id": "CVE-2026-59900", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59900 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:48f234e5-a653-542a-a4d7-a935980ce225", "id": "CVE-2026-59901", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59901 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:4e7e2621-5f93-5c4a-a1e4-2b8e30d6884a", "id": "CVE-2026-59902", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59902 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:e73d1cfa-133e-51a7-8767-f5d9689938dc", "id": "CVE-2026-59903", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59903 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:6e4b5e9a-0a7a-5683-9ed6-246c2f3cb25e", "id": "CVE-2026-59919", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59919 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:1fd10543-5a61-5386-964c-aa1849d867b0", "id": "CVE-2026-59920", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59920 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:18139054-f158-5226-bfb0-80a6cdc1f485", "id": "CVE-2026-59921", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59921 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:23ea805a-1920-5dca-a01c-54145f86f4fb", "id": "CVE-2026-73507", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-73507 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:86e02d20-11e8-5231-b664-3ceb86c058d4", "id": "CVE-2026-73508", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-73508 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:ad9b5bf5-5a89-52e3-8ad3-4c0d158ca326", "id": "GHSA-mfg7-5gfp-c4w3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:f3dda040-5e8e-5b13-b9f4-82350f7cbcd7", "id": "GHSA-v74w-7mr3-4qg3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.2" } ] } ], "dependencies": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.2" } ] }