{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:ebed2d38-fc88-5a82-a7b2-657467cedde5", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.4", "type": "library", "group": "io.netty", "name": "netty-buffer", "version": "4.1.130.Final-tuxcare.4", "purl": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.4" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:d2eb1246-78f8-56c6-83ea-10723a7487e6", "id": "CVE-2025-55163", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-55163 does not affect version 4.1.130.Final-tuxcare.4 of io.netty:netty-buffer. already_fixed \u2014 The target Netty 4.1.130.Final repository already contains the complete MadeYouReset (CVE-2025-55163) mitigation. The Http2MaxRstFrameLimitEncoder defense class is present, integrated into the HTTP/2 connection handler builder, and enabled by default for servers with a threshold of 200 RST_STREAM frames per 30-second window. All protocol-error-triggered RST writes route through the protected en..." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:d6970fd3-6bee-5b9b-ba01-93d1b8a8d077", "id": "CVE-2026-33870", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33870 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:619f0868-9733-57d7-974f-667cc3eea437", "id": "CVE-2026-33871", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33871 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:88291dd4-edc7-5d9f-847c-baaf594448cd", "id": "CVE-2026-41417", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41417 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:3a580d72-a4a7-5762-895d-220564607a42", "id": "CVE-2026-42578", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42578 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:73a998aa-97e4-5cc1-9a9c-e51362fed85f", "id": "CVE-2026-42579", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42579 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:6003727e-4562-5bdd-b27c-b38560d929b1", "id": "CVE-2026-42580", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42580 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:7df54895-91f8-5352-bab5-4afa5bfad6f1", "id": "CVE-2026-42581", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42581 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:15027921-2c83-5f97-8549-8c081d4cc1ef", "id": "CVE-2026-42583", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42583 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:2a2fed33-0654-56c3-b49b-ee31c040bd47", "id": "CVE-2026-42584", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42584 affects version 4.1.130.Final-tuxcare.4 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:5033bc8f-0d0c-50a7-a57f-91c4772115c5", "id": "CVE-2026-42585", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42585 affects version 4.1.130.Final-tuxcare.4 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:cd5923e8-1ef9-53e1-bda4-6f8e385b85a2", "id": "CVE-2026-42586", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42586 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:9d7664d8-3e98-5f56-9953-edbc678c7a79", "id": "CVE-2026-42587", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42587 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:3b779586-619d-5351-85de-32d1b087f47d", "id": "CVE-2026-44248", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44248 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:eda493ca-fa3a-53ec-a67b-44f2aff6bc14", "id": "CVE-2026-44249", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44249 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:afec0667-f681-5b68-97a9-33ad0529ffcb", "id": "CVE-2026-44250", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44250 affects version 4.1.130.Final-tuxcare.4 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:243eeb8e-36cf-52c7-8566-b9ec7004ff15", "id": "CVE-2026-44890", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:200207dd-435c-594f-a6fa-dfc2a8f83c5c", "id": "CVE-2026-44891", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44891 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:d54152d3-c765-52d5-9ec7-5f15cf37c826", "id": "CVE-2026-44893", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44893 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:b0b83dec-2e36-5542-b9ad-db0d13f4fd43", "id": "CVE-2026-45416", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-45416 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:a2e2ded6-755d-5144-af27-1d755cd5783c", "id": "CVE-2026-45536", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-45536 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:3209947a-f15a-5e83-9282-d2a41166cf0d", "id": "CVE-2026-45673", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-45673 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:12936896-add7-5304-bcc4-bcd1acc39f77", "id": "CVE-2026-45674", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-45674 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:b08ea2f0-5dfa-596a-8e40-c3241d8e248f", "id": "CVE-2026-46340", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46340 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:076553f7-e6fe-5612-a053-5c43bc48bae5", "id": "CVE-2026-47244", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47244 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:5d638148-3135-51a9-bb71-4e852206c604", "id": "CVE-2026-47691", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47691 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:ba1f3f66-2e44-5b87-a04d-be88e62f751b", "id": "CVE-2026-48006", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48006 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:1f9057da-3073-591e-9519-b4397c45b7e2", "id": "CVE-2026-48043", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48043 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:956888fa-3f93-5cdd-8ed8-a4864ec846e4", "id": "CVE-2026-48059", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48059 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:d5a035a3-cebd-56e8-b7b9-24d2e8c2ebab", "id": "CVE-2026-50010", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50010 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:121241ea-814a-5d0a-bd38-8e7c8bd770c1", "id": "CVE-2026-50011", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-50011 does not affect version 4.1.130.Final-tuxcare.4 of io.netty:netty-buffer. Patches already applied: bff98ee51b5d0b7ee25fd5005f2169f2a0467efa (already in target via d5b4e38845f5 'Backport CVE-2026-44890 to 4.1.130.Final')" }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:3a871fa5-096f-5a50-a2f7-cb53cc20ef78", "id": "CVE-2026-50020", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50020 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:fd5a01b4-f8cf-57d0-b457-b118d7806c5e", "id": "CVE-2026-50560", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:cb35a1d5-f288-5976-8579-42f62f959a42", "id": "CVE-2026-55831", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-55831 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:a674ad79-28d9-5796-b61b-2b3d421139f7", "id": "CVE-2026-55833", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-55833 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:40cb5301-ced9-5229-a2f3-ed2f8ea69053", "id": "CVE-2026-55851", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-55851 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:b947bc7b-5467-5f34-815b-04203c700bac", "id": "CVE-2026-56745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56745 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:e27f5961-6505-5dfc-a197-f4833f5589d1", "id": "CVE-2026-56746", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56746 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:666dc7f1-d43a-53d6-bacc-c28a65b0a43c", "id": "CVE-2026-56817", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56817 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:213e3bf2-608f-5b89-a6ff-825129b9c503", "id": "CVE-2026-56818", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56818 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:d004655b-fb62-59e0-8b91-41dcc951f86f", "id": "CVE-2026-56819", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56819 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:52d9cf86-34dc-563b-a694-2d1caf3cf763", "id": "CVE-2026-56820", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56820 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:7cd70a0f-04ae-54a7-88d9-6b7d60bc39dc", "id": "CVE-2026-56821", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56821 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:d8768cc2-f6c8-55b7-91f2-909c98d5629d", "id": "CVE-2026-56822", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56822 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:90fb7c16-5814-5898-b942-a37af74d0e9a", "id": "CVE-2026-59898", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59898 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:4fd6bc24-bd56-5666-91e8-ecf8e9f3b712", "id": "CVE-2026-59899", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59899 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:a3a65308-92f5-5288-b880-ea55eff7da7a", "id": "CVE-2026-59900", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59900 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:12d73fb8-78f2-51aa-ba48-bfe86edbac51", "id": "CVE-2026-59901", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59901 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:f7bc6902-8e3f-501f-a7a0-2bc606742929", "id": "CVE-2026-59902", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59902 affects version 4.1.130.Final-tuxcare.4 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:247183a7-c8cd-50a2-87d5-7158da5263e6", "id": "CVE-2026-59903", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59903 affects version 4.1.130.Final-tuxcare.4 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:fe87096b-0ee3-5404-af08-07e10b263aca", "id": "CVE-2026-59919", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59919 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:acf24660-b351-5c85-bbe0-6ba29eb25cee", "id": "CVE-2026-59920", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59920 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:a948a5e9-9ef5-56ce-ae80-9c8cff39d2fc", "id": "CVE-2026-59921", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59921 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:24ec024f-69fe-5e34-8a90-1b58d838175d", "id": "CVE-2026-73507", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-73507 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:84fb45bc-ad07-5b5d-a471-4f1b4d512202", "id": "CVE-2026-73508", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-73508 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:9f9cfaaa-25e1-571c-8c31-029a27608771", "id": "GHSA-mfg7-5gfp-c4w3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.130.Final-tuxcare.4 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:76fe164a-dea8-5237-bb23-d67a2ffea120", "id": "GHSA-v74w-7mr3-4qg3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.130.Final-tuxcare.4 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.4" } ] } ], "dependencies": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.130.Final-tuxcare.4" } ] }