{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:5991e483-b235-5cd4-ade9-17fdfcca0787",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.5",
      "type": "library",
      "group": "io.netty",
      "name": "netty-buffer",
      "version": "4.1.92.Final-tuxcare.5",
      "purl": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.5"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:89f63d99-dde9-52e3-9024-94271bc8a37e",
      "id": "CVE-2023-34462",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-34462 is fixed in version 4.1.92.Final-tuxcare.5 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:02394283-ba4d-5e98-b31a-4fa0afc5f64a",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-44487 is fixed in version 4.1.92.Final-tuxcare.5 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bfae7294-e463-57f4-b7e6-702c88f7ea14",
      "id": "CVE-2023-4586",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2023-4586 is a false positive for io.netty:netty-buffer 4.1.92.Final-tuxcare.5."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a74f8f73-7987-51a4-b8d8-999f0f71e806",
      "id": "CVE-2024-29025",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-29025 is fixed in version 4.1.92.Final-tuxcare.5 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:76ef5175-a41d-51c2-90f4-8bb3b42e7a9b",
      "id": "CVE-2024-47535",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-47535 is fixed in version 4.1.92.Final-tuxcare.5 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2b07a061-ec2a-5926-8d1e-7378b33b1a97",
      "id": "CVE-2025-24970",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-24970 is fixed in version 4.1.92.Final-tuxcare.5 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c6f9e379-472b-52b8-983e-ffefdebefa0d",
      "id": "CVE-2025-25193",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-25193 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:49603591-fe4e-51a6-b12e-6170d3fae138",
      "id": "CVE-2025-55163",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55163 is fixed in version 4.1.92.Final-tuxcare.5 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7a65c852-df40-5b37-a083-4201b816e3c9",
      "id": "CVE-2025-58056",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-58056 is fixed in version 4.1.92.Final-tuxcare.5 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8ac02c68-0346-58c3-a8fd-cc6d2b546e98",
      "id": "CVE-2025-58057",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58057 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d0d2e34d-32d9-5490-ae39-87147ff439c9",
      "id": "CVE-2025-59419",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-59419 is fixed in version 4.1.92.Final-tuxcare.5 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:eb2eb881-c004-5022-bfd4-f66353425dc9",
      "id": "CVE-2025-67735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-67735 is fixed in version 4.1.92.Final-tuxcare.5 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:31572d2f-6824-508b-aca3-cc708066fa57",
      "id": "CVE-2026-33870",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-33870 is fixed in version 4.1.92.Final-tuxcare.5 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5c57ac51-2ac6-5a82-a5c7-76eab0671378",
      "id": "CVE-2026-33871",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33871 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:40a3f752-c00e-51d4-8d89-144cadbb7add",
      "id": "CVE-2026-41417",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41417 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4d23ab23-42b1-52ef-99b8-ecc1c89b5796",
      "id": "CVE-2026-42577",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42577 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:96096c3d-f92e-5de5-9d76-c95a5d75b07a",
      "id": "CVE-2026-42578",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42578 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7edacd07-c46f-51c3-940e-e2bf6c6305b1",
      "id": "CVE-2026-42579",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42579 is fixed in version 4.1.92.Final-tuxcare.5 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5c2471d5-707e-5f20-963e-da0cf2d27bac",
      "id": "CVE-2026-42580",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42580 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:395dd3a8-5f01-5d86-9c5a-b2f48d3e13f7",
      "id": "CVE-2026-42581",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42581 is fixed in version 4.1.92.Final-tuxcare.5 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3850a5e3-ac10-5c33-9c68-8e010892e1ef",
      "id": "CVE-2026-42583",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42583 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:07c1d96a-d6db-5ff5-a80e-6e2404a66abb",
      "id": "CVE-2026-42584",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42584 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bce5b5fe-4a0e-5acf-89f2-7b54e90addc9",
      "id": "CVE-2026-42585",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42585 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9f9c0ba7-761f-5fe3-b11a-e21a8ae5c90f",
      "id": "CVE-2026-42586",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42586 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:13e17396-fa25-5157-a98c-257721d9c78c",
      "id": "CVE-2026-42587",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42587 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8d69d4bf-85eb-56f1-a6ae-ec9b90495b74",
      "id": "CVE-2026-44248",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44248 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:48acedb3-bfd3-591c-af81-f5d87c9cc665",
      "id": "CVE-2026-44249",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44249 is fixed in version 4.1.92.Final-tuxcare.5 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0faec7bd-4c75-514a-818d-66e062c9d3e2",
      "id": "CVE-2026-44250",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44250 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:66659f6d-8464-59ca-a2fc-297c1fc572fb",
      "id": "CVE-2026-44890",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.92.Final-tuxcare.5 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cb7c50e3-968b-5a1a-9bd8-8fa5dc5ffa05",
      "id": "CVE-2026-44891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44891 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:334c7b2a-d7cf-51ad-a246-add00e56809b",
      "id": "CVE-2026-44893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44893 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2802d9c3-6315-5992-bf01-20fe678df246",
      "id": "CVE-2026-45416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45416 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a0642d20-8b4f-5f87-aa3b-8c72d5232021",
      "id": "CVE-2026-45536",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45536 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7a93e006-c2e4-5df1-9f42-5e6158b223ab",
      "id": "CVE-2026-45673",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45673 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:38a777e2-47aa-580c-8760-c22446f698e2",
      "id": "CVE-2026-45674",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-45674 is fixed in version 4.1.92.Final-tuxcare.5 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6a036394-b39f-5f49-b786-6d6a7bc27fd4",
      "id": "CVE-2026-46340",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-46340 is fixed in version 4.1.92.Final-tuxcare.5 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:79ac4810-ff52-5d6d-8433-8bb942199a81",
      "id": "CVE-2026-47244",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47244 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:df6d51dd-36b5-5023-9d59-b7141693b89a",
      "id": "CVE-2026-47691",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47691 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2c12210d-af50-5735-9d6e-8b8e89bc79c1",
      "id": "CVE-2026-48006",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48006 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d1a106f2-7695-5d78-b455-7f6da36bf18a",
      "id": "CVE-2026-48043",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-48043 does not affect version 4.1.92.Final-tuxcare.5 of io.netty:netty-buffer. not_affected \u2014 The target repository (Netty 4.1.92.Final-tuxcare.3) is not affected by CVE-2026-48043. The vulnerability exists in a newer architectural pattern (ChannelInboundHandlerAdapter-based decompression handling) that was introduced after version 4.1.92. The target uses an older architecture that processes HTTP/2 decompression directly in the onDataRead() method with existing try-finally protection."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:626bf22a-599b-5da8-b855-5c5989f82986",
      "id": "CVE-2026-48059",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48059 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1dd3425e-662d-5d23-90fd-d3631f79af0d",
      "id": "CVE-2026-50010",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50010 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:81353edd-af74-5639-bfd7-508937edecef",
      "id": "CVE-2026-50011",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50011 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:012cc6fe-130f-5929-a720-08e27c985c42",
      "id": "CVE-2026-50020",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50020 is fixed in version 4.1.92.Final-tuxcare.5 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4b654508-f93d-5428-91c9-4cf02f3b28db",
      "id": "CVE-2026-50560",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.92.Final-tuxcare.5 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e3e21f42-d88a-5507-a43f-27681d5531d7",
      "id": "CVE-2026-55831",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55831 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:31043135-d3f5-5038-bf20-aa7196ff34c2",
      "id": "CVE-2026-55833",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55833 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c471b22d-cabd-548c-b7bc-0a00437dad02",
      "id": "CVE-2026-55851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55851 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2bb337bd-54ee-5087-916a-298ee698b1fb",
      "id": "CVE-2026-56745",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56745 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dc76495f-06d8-5bcb-abcd-a80d44d4023a",
      "id": "CVE-2026-56746",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56746 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:190588e5-aee7-53e6-9b0a-7bf2d176d210",
      "id": "CVE-2026-56817",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56817 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:29aa91fe-872f-52ee-9865-4b54c32b45c3",
      "id": "CVE-2026-56818",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56818 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:27e5e527-3a8b-53b5-b30d-c7224c72d675",
      "id": "CVE-2026-56819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56819 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:25a554fb-8b1d-5753-93fb-8c1ac60d0c88",
      "id": "CVE-2026-56820",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56820 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d0a9bda4-c039-5e8c-8bae-153fb813efaa",
      "id": "CVE-2026-56821",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56821 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1599ab49-1c6b-53da-9c53-167196d38a1e",
      "id": "CVE-2026-56822",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56822 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:38f115a3-e7f0-5d3c-aabe-d0ef7791b714",
      "id": "CVE-2026-59898",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59898 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9796217f-5193-5f68-8929-8177f1da6659",
      "id": "CVE-2026-59899",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59899 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ed5d1453-674f-522b-b067-164dbb6ec376",
      "id": "CVE-2026-59900",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59900 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0919d5ff-4f51-5a39-8579-9cc78d483a54",
      "id": "CVE-2026-59901",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59901 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b223204d-243f-50b6-a6e1-efd18bedd562",
      "id": "CVE-2026-59902",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59902 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8f0c23c4-881f-5722-9856-8983fb6c19b8",
      "id": "CVE-2026-59903",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59903 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:247f362b-75fd-5145-a479-3409107b70ae",
      "id": "CVE-2026-59919",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59919 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dd304dc3-e4ee-5327-806d-94264f71d271",
      "id": "CVE-2026-59920",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59920 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:03094db9-6714-5f4b-814f-c9432350a42d",
      "id": "CVE-2026-59921",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59921 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:68903b6b-fcce-5840-ba3d-ea93b1251256",
      "id": "CVE-2026-73507",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-73507 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e70b148d-afc3-5d31-9a6c-20019de23704",
      "id": "CVE-2026-73508",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-73508 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9f3a51e2-93a2-5426-8809-e911c678230c",
      "id": "GHSA-mfg7-5gfp-c4w3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:596bf5a3-8999-541c-9aec-baaaa2b4185e",
      "id": "GHSA-v74w-7mr3-4qg3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:afdc0cbb-4915-52fb-ad78-bfd6bc67760d",
      "id": "GHSA-xpw8-rcwv-8f8p",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability GHSA-xpw8-rcwv-8f8p does not affect version 4.1.92.Final-tuxcare.5 of io.netty:netty-buffer. The version is not vulnerable. [terminalized not_affected from patch_application_manual/not_vulnerable]"
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.5"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.netty/netty-buffer@4.1.92.Final-tuxcare.5"
    }
  ]
}