{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:ab144589-5a22-57ae-b437-6c91580e11ab", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.3", "type": "library", "group": "io.netty", "name": "netty-buffer", "version": "4.1.130.Final-tuxcare.3", "purl": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.3" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:05044395-dcb4-5e5b-80d7-45c347cecffc", "id": "CVE-2025-55163", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-55163 does not affect version 4.1.130.Final-tuxcare.3 of io.netty:netty-buffer. already_fixed \u2014 The target Netty 4.1.130.Final repository already contains the complete MadeYouReset (CVE-2025-55163) mitigation. The Http2MaxRstFrameLimitEncoder defense class is present, integrated into the HTTP/2 connection handler builder, and enabled by default for servers with a threshold of 200 RST_STREAM frames per 30-second window. All protocol-error-triggered RST writes route through the protected en..." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:6de2d9b1-a4a4-566c-a6dd-dde945213bc5", "id": "CVE-2026-33870", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33870 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:01d10362-634e-5793-b89c-ff602d585e57", "id": "CVE-2026-33871", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33871 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:bb39e3cc-c4c5-5f1b-accf-9d3f105bc8b2", "id": "CVE-2026-41417", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41417 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:4db642a2-bca6-5629-af12-45f961e4144a", "id": "CVE-2026-42578", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42578 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:4ef136ac-13a2-590a-8857-0325340551fb", "id": "CVE-2026-42579", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42579 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:deee8508-daa5-5a42-9cc3-e82b43e6669e", "id": "CVE-2026-42580", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42580 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:e08620fb-b9a5-5900-87af-10ca0c3c6ad8", "id": "CVE-2026-42581", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42581 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:0509db58-4829-5016-90ce-e907b2913c3d", "id": "CVE-2026-42583", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42583 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:8d37cf30-fac3-5a00-8813-571d777328af", "id": "CVE-2026-42584", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42584 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:0b59124a-3f8f-511f-86fd-7b7379d32917", "id": "CVE-2026-42585", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42585 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:af22f3db-299e-5475-92ec-a6ed6d1da467", "id": "CVE-2026-42586", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42586 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:0f46a600-8882-58ab-ab6a-62f92581ae91", "id": "CVE-2026-42587", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42587 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:ae40b80c-00c7-52cd-9738-9a619c3d569d", "id": "CVE-2026-44248", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44248 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:af97fc7d-147d-5686-af5d-e7337556a63c", "id": "CVE-2026-44249", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44249 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:d0ddcbe5-2cc4-5e6c-89a2-7c89b8a16c18", "id": "CVE-2026-44250", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44250 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:b536539f-7cd5-54ac-b120-79954d3229a4", "id": "CVE-2026-44890", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:ec482995-9f56-571c-a1df-2223d8dbacbf", "id": "CVE-2026-44891", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44891 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:d28f9758-06ae-5e54-94ac-66c0369c9fe7", "id": "CVE-2026-44893", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44893 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:aef00458-b6ef-59b8-b61f-a380e92cd58b", "id": "CVE-2026-45416", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45416 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:922c6fc3-d104-5496-aa9c-4d3dc9998835", "id": "CVE-2026-45536", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45536 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:5fd239a5-7d88-5c07-a9df-06fccab7e6b0", "id": "CVE-2026-45673", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-45673 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:8214e7ab-05da-56a8-9af1-d31a97401093", "id": "CVE-2026-45674", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-45674 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:01e6019e-0038-5afd-afd0-79c726513394", "id": "CVE-2026-46340", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46340 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:8126a6e0-43b1-5da9-8d0c-f737acdcd487", "id": "CVE-2026-47244", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47244 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:5773777e-7e06-5794-8e82-08d6862f0448", "id": "CVE-2026-47691", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47691 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:895babdd-e501-5038-a6f4-33922d655016", "id": "CVE-2026-48006", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48006 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:6ecbae6d-a99b-533d-b544-adc1f3d9a367", "id": "CVE-2026-48043", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48043 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:85f97112-2ed9-5254-b5a6-c357c3334aa2", "id": "CVE-2026-48059", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48059 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:371500ae-508b-50b5-9461-010bcf5e1def", "id": "CVE-2026-50010", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50010 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:480f3f83-7d4e-5ba8-abf4-a8967240a4a9", "id": "CVE-2026-50011", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-50011 does not affect version 4.1.130.Final-tuxcare.3 of io.netty:netty-buffer. Patches already applied: bff98ee51b5d0b7ee25fd5005f2169f2a0467efa (already in target via d5b4e38845f5 'Backport CVE-2026-44890 to 4.1.130.Final')" }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:cf8cbe84-50b1-5264-ac68-0f29b5fd3859", "id": "CVE-2026-50020", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50020 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:d5346362-03bc-5eef-b013-aff6bd0c6191", "id": "CVE-2026-50560", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:7fd14354-6ec4-504f-a999-9b21b48fe0f6", "id": "CVE-2026-55831", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-55831 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:34990d27-2c8d-563e-bfc5-9cf2bc7eefc7", "id": "CVE-2026-55833", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-55833 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:d1c0952e-263e-5a0b-8993-e66dd7b2aab7", "id": "CVE-2026-55851", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-55851 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:e64ef9d1-a7dd-57df-ae39-a45c567dcd89", "id": "CVE-2026-56745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56745 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:1e86d4c6-e570-5092-96a0-82d9c3de0b20", "id": "CVE-2026-56746", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56746 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:feebc889-536a-5a38-965c-e11dc9637626", "id": "CVE-2026-56817", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56817 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:d0bdbcba-eaa6-5870-81cb-9f8810de6291", "id": "CVE-2026-56818", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56818 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:d38e9d8d-8109-5070-a63c-48aaf3bf3bc0", "id": "CVE-2026-56819", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56819 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:061f70ed-c755-5e9e-b203-4f181d20b92b", "id": "CVE-2026-56820", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56820 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:a8711ffa-1d45-538b-bc36-c574bbbfef4f", "id": "CVE-2026-56821", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56821 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:ffb5f7f0-6b0e-5c90-bd39-97341ed54f7a", "id": "CVE-2026-56822", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56822 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:57020a1f-9215-5d8f-90e8-b0187e77a087", "id": "CVE-2026-59898", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59898 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:d2dd2238-aecd-5abf-90b3-878303142333", "id": "CVE-2026-59899", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59899 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:3fb180f5-ce76-56e7-bed4-14c5ffb6ebfc", "id": "CVE-2026-59900", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59900 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:4c705fe9-29c4-519a-8a60-d0b6916ac154", "id": "CVE-2026-59901", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59901 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:7e44d899-094e-5c31-9c7e-50fa976a561d", "id": "CVE-2026-59902", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59902 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:814dca3c-b555-5967-a28e-353dce1200b4", "id": "CVE-2026-59903", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59903 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:8217949f-a4db-5e7f-8cc1-210f8bf22a9a", "id": "CVE-2026-59919", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59919 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:d6c30287-252f-5789-ab58-0f42bf294739", "id": "CVE-2026-59920", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59920 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:226c9bcc-387f-5721-b9da-16a091830b34", "id": "CVE-2026-59921", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59921 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:5b5e8af2-8328-5c71-8844-82149471bffe", "id": "CVE-2026-73507", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-73507 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:fbaa206e-c2c1-5dc3-b6c9-1919c8ad3f5c", "id": "CVE-2026-73508", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-73508 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:36306053-ef5c-59c6-bcc3-cd51429789a9", "id": "GHSA-mfg7-5gfp-c4w3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:c548c718-0aff-5353-bbe5-cc272e140e14", "id": "GHSA-v74w-7mr3-4qg3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.3" } ] } ], "dependencies": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.3" } ] }