{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:c0a527c8-dd2b-5853-86eb-bbf493af3d4e", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/io.netty/netty-buffer@4.1.63.Final-tuxcare.5", "type": "library", "group": "io.netty", "name": "netty-buffer", "version": "4.1.63.Final-tuxcare.5", "purl": "pkg:maven/io.netty/netty-buffer@4.1.63.Final-tuxcare.5" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:420bcffc-514e-5df5-a54c-a068338cac2c", "id": "CVE-2021-37136", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-37136 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:2b3f2c74-bdc2-5cd3-b332-5235d81b7a00", "id": "CVE-2021-37137", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-37137 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:f7f6ed4f-ac99-5999-8cfc-ddc86bf53e61", "id": "CVE-2021-43797", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-43797 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:7fb016c5-419c-52dc-ab97-028263a58fab", "id": "CVE-2022-24823", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-24823 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:5b74f1f6-4685-5449-979d-9840e6e62be8", "id": "CVE-2022-41881", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-41881 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:1b00dd1a-cb5b-5d74-8ab0-3bd6d4d12528", "id": "CVE-2022-41915", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-41915 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:cf0629be-2db8-547b-8d7f-079b62bb56c5", "id": "CVE-2023-34462", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-34462 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:1579f658-7f9e-5678-b61c-5daedf0f6d74", "id": "CVE-2023-44487", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-44487 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:13b52133-4ab1-5841-9f83-10ab097523e3", "id": "CVE-2023-4586", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2023-4586 is a false positive for io.netty:netty-buffer 4.1.63.Final-tuxcare.5." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:8c073c18-0443-57eb-bb57-14d9648cc500", "id": "CVE-2024-29025", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-29025 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:95fb5f06-0213-51db-a1fb-0da078ecb8fc", "id": "CVE-2024-47535", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-47535 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:11d93a60-826d-5d4e-b613-0c4ccfaa426a", "id": "CVE-2025-24970", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-24970 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:a21eecf5-25f1-5f3c-9c78-d0d996dac156", "id": "CVE-2025-25193", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-25193 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:59d9ab41-c67e-5dbc-ac61-461c49e650a9", "id": "CVE-2025-55163", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55163 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:f3531fea-9162-5bb1-9a02-0335a4daf97c", "id": "CVE-2025-58056", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-58056 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:b512f401-8214-528e-a2ba-af709d1e9aa2", "id": "CVE-2025-58057", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-58057 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:4e9cacf8-684f-5ffa-afb9-af204600e589", "id": "CVE-2025-59419", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59419 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:5afcdf16-3c21-5f6c-8274-8711160000fd", "id": "CVE-2025-67735", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-67735 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:069bd063-2a55-55a8-ae23-35297d1d89e1", "id": "CVE-2026-33870", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33870 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:d80c742d-380b-560c-8b83-476f19811d7c", "id": "CVE-2026-33871", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33871 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:2cae524f-86fe-5409-b832-61b210c09797", "id": "CVE-2026-41417", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41417 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:e821ddd9-7a92-5f7d-aff0-572de542c5a1", "id": "CVE-2026-42577", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42577 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:7fe2a2f4-2fb6-55dc-8edb-bdb0b3f8f976", "id": "CVE-2026-42578", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42578 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:c2dfdb56-87ef-5b7b-a330-67e206d968b5", "id": "CVE-2026-42579", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42579 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:28c99fb5-f309-5356-accc-5e45ca02ce82", "id": "CVE-2026-42580", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42580 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:b026257b-6933-5c35-9bd8-38073faced29", "id": "CVE-2026-42581", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42581 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:f8b52463-6867-59df-b3b0-b64078c10f81", "id": "CVE-2026-42583", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42583 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:71461e11-2647-5428-8a60-312b3d087151", "id": "CVE-2026-42584", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42584 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:c305189f-4de3-59dc-8e49-98f841296abd", "id": "CVE-2026-42585", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42585 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:775ec54a-d1d1-58b3-a098-4127eb6edd25", "id": "CVE-2026-42586", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42586 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:5e30b458-6ddb-5d62-a51c-8cb5f1d045e6", "id": "CVE-2026-42587", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42587 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:a9de29f3-1025-5398-be11-b6685c13053a", "id": "CVE-2026-44248", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44248 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:4ab50e4f-cc84-5e2d-8417-492d6cc8b68b", "id": "CVE-2026-44249", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44249 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:22dc6cfc-ce19-5680-a2f1-e3f37f1ecf5f", "id": "CVE-2026-44250", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44250 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:90c1527a-2de3-557a-a0b7-fb15bb4d4714", "id": "CVE-2026-44890", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:e3f0b4a8-91a1-5477-a60d-f05b1d084b01", "id": "CVE-2026-44891", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44891 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:8915c5e0-168d-5259-b911-547ae4f7fcf4", "id": "CVE-2026-44893", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44893 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:6c59459f-d46f-5d4d-80b8-49122e2fe58f", "id": "CVE-2026-45416", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45416 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:93226c06-0848-5904-b9df-2892e2606918", "id": "CVE-2026-45536", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45536 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:e2207899-364e-54fd-bd1f-3346d44a6a16", "id": "CVE-2026-45673", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45673 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:c8a93b37-2acf-518b-9833-8273edbe6a81", "id": "CVE-2026-45674", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-45674 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:d37bd638-a2b2-537a-b92c-cc57901f71ac", "id": "CVE-2026-46340", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-46340 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:eb26c4a4-43d3-54bb-8d27-fd3736c7dba7", "id": "CVE-2026-47244", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47244 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:807a7548-cf72-5075-8034-09ad6003161a", "id": "CVE-2026-47691", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47691 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:ae28626b-814e-5dc2-9cbf-8e444a8ca392", "id": "CVE-2026-48006", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-48006 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:3623f161-4b17-5070-adc7-cd08791f1e92", "id": "CVE-2026-48043", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48043 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:5226a28e-9a2c-560d-b4d8-e352ba114e41", "id": "CVE-2026-48059", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-48059 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:615a9483-1f18-5b7b-99d9-bb9ff6f535f7", "id": "CVE-2026-50010", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50010 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:179dc5fe-8a23-57b9-8e48-d1c4a5cea9c1", "id": "CVE-2026-50011", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50011 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:6df2453b-dda0-5c90-99b4-277baef5a9b1", "id": "CVE-2026-50020", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50020 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:0f995ebc-114b-5a5f-9cc2-fc1a1f6cbd44", "id": "CVE-2026-50560", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:ec36c5ce-d1f9-5d31-85e6-3643b72c329b", "id": "CVE-2026-55831", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55831 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:57b40ba9-8dfd-5ea5-9fa4-080f83ef8c6b", "id": "CVE-2026-55833", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55833 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:f91b09c6-a770-55d2-b5f4-cb7dad188864", "id": "CVE-2026-55851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55851 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:a5b422ea-27ea-5906-8724-814f0e8c73c9", "id": "CVE-2026-56745", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56745 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:2fd8be48-e650-573d-b8ff-da4fd7b18ba6", "id": "CVE-2026-56746", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56746 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:4aec2f7b-87d9-58e5-8f7c-05c4cda90931", "id": "CVE-2026-56817", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-56817 does not affect version 4.1.63.Final-tuxcare.5 of io.netty:netty-buffer. not_affected \u2014 The Netty codec-xml module contains XmlDecoder, which instantiates an Aalto XML parser without security configuration (line 38: new InputFactoryImpl() with no XXE protection). However, this is a library component that Netty itself does not use in its own production code. The vulnerability only manifests when downstream applications explicitly add XmlDecoder to their Netty channel pipelines. Per..." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:a7f53425-aaa7-522a-b1d9-f9d9864a11c4", "id": "CVE-2026-56818", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56818 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:2f056340-4b45-5a59-bc0b-77a8e7c02bc4", "id": "CVE-2026-56819", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56819 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:004f022e-e355-5290-b957-4562c79aae91", "id": "CVE-2026-59898", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59898 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:90cc37cb-5628-5fad-85d9-5e6c81e0181c", "id": "CVE-2026-59899", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59899 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:35bf210e-cc48-5926-b065-f9a89718aa22", "id": "CVE-2026-59900", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59900 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:531b7969-4868-5e20-9f99-bab8ec334899", "id": "CVE-2026-59901", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59901 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:a384897e-29cf-5234-a0e5-f4b80f2f9760", "id": "CVE-2026-59902", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59902 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:f77c4d1a-2466-53f8-92bd-0146b716b70f", "id": "CVE-2026-59903", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59903 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:9b6d2139-7721-5c2a-92cf-7d50c8a59517", "id": "CVE-2026-59919", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59919 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:80a205ad-9f09-57c7-9127-fe604a6a72c2", "id": "CVE-2026-59920", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59920 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:8dad93da-6a12-5a69-8bb2-f6d3e5bbb3c8", "id": "CVE-2026-59921", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59921 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:b6d8dec6-4ca9-5616-ba30-f6a554941eac", "id": "CVE-2026-73507", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-73507 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:ba53cd25-4acd-5c28-b20c-7a71f3e4a393", "id": "CVE-2026-73508", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-73508 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:bf37543f-ed16-5066-9f57-e8016927292c", "id": "GHSA-mfg7-5gfp-c4w3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:2d719e9f-c2c8-5b99-8500-39827ccc1fd3", "id": "GHSA-v74w-7mr3-4qg3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:5ffefc21-ab5c-534c-b746-6e749eb4dc49", "id": "GHSA-xpw8-rcwv-8f8p", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-xpw8-rcwv-8f8p affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-buffer." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.63.Final-tuxcare.5" } ] } ], "dependencies": [ { "ref": "pkg:maven/io.netty/netty-buffer@4.1.63.Final-tuxcare.5" } ] }