{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:f43675dd-0092-59c4-94a0-a017d45670d1",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/io.netty/netty-buffer@4.1.93.Final-tuxcare.3",
      "type": "library",
      "group": "io.netty",
      "name": "netty-buffer",
      "version": "4.1.93.Final-tuxcare.3",
      "purl": "pkg:maven/io.netty/netty-buffer@4.1.93.Final-tuxcare.3"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:2fd1ca9d-8889-50a6-a012-ecc7a5bf0665",
      "id": "CVE-2023-34462",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-34462 is fixed in version 4.1.93.Final-tuxcare.3 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:90dd5c80-6aca-54b2-a909-ef3f4636a7b8",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-44487 is fixed in version 4.1.93.Final-tuxcare.3 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8c03d974-322c-501e-8624-bd18b7eff8e9",
      "id": "CVE-2023-4586",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2023-4586 is a false positive for io.netty:netty-buffer 4.1.93.Final-tuxcare.3."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:81229d2a-d300-548e-8be0-e421d829ba25",
      "id": "CVE-2024-29025",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-29025 is fixed in version 4.1.93.Final-tuxcare.3 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ec530ce8-1922-5db0-9dae-fae2a7d37fb1",
      "id": "CVE-2024-47535",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-47535 is fixed in version 4.1.93.Final-tuxcare.3 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8b9334d0-b4d5-5ed4-af24-2ee399fec5da",
      "id": "CVE-2025-25193",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-25193 is fixed in version 4.1.93.Final-tuxcare.3 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:198dc132-059f-578b-ab82-2e3323617913",
      "id": "CVE-2025-55163",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55163 is fixed in version 4.1.93.Final-tuxcare.3 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a71c78de-1ba7-59f8-a2dc-233dac0c8c2f",
      "id": "CVE-2025-58056",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-58056 is fixed in version 4.1.93.Final-tuxcare.3 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:072704c0-f5e0-5a68-b5df-5ee53d7aaab9",
      "id": "CVE-2025-58057",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-58057 is fixed in version 4.1.93.Final-tuxcare.3 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a895bc2f-f014-59cf-97b7-9895d406bf68",
      "id": "CVE-2025-59419",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-59419 is fixed in version 4.1.93.Final-tuxcare.3 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3bad2b7e-ac96-5959-9429-0c1e3abd99e5",
      "id": "CVE-2025-67735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-67735 is fixed in version 4.1.93.Final-tuxcare.3 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5fcc4524-6965-52bc-a586-fcee5624f1b2",
      "id": "CVE-2026-33870",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-33870 is fixed in version 4.1.93.Final-tuxcare.3 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0e64af2e-e345-5612-a92f-de2d63c83f24",
      "id": "CVE-2026-33871",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-33871 is fixed in version 4.1.93.Final-tuxcare.3 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:42faed9f-8402-57cc-83c2-9b6f2001afc6",
      "id": "CVE-2026-41417",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41417 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c1db1829-338e-570c-a535-683cb9923d73",
      "id": "CVE-2026-42577",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42577 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:363dd6f5-0b54-5e3e-92a2-00edb3ebff38",
      "id": "CVE-2026-42578",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42578 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6d096738-9081-50f7-b112-626ef3be376e",
      "id": "CVE-2026-42579",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42579 is fixed in version 4.1.93.Final-tuxcare.3 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f21a2d5a-8784-575e-aee6-02969a09c711",
      "id": "CVE-2026-42580",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42580 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7afd40ff-33c0-5f5b-b4f4-3c920ee72da6",
      "id": "CVE-2026-42581",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42581 is fixed in version 4.1.93.Final-tuxcare.3 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fcfe5c54-5f87-5f40-8d96-a0fbc0310765",
      "id": "CVE-2026-42583",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42583 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:18bc2041-607e-5bf9-9cea-d58f70dd49b2",
      "id": "CVE-2026-42584",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42584 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bbbdde3f-498d-5de6-9bef-2c6428c56a7d",
      "id": "CVE-2026-42585",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42585 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9cb09a55-2a65-5187-ad53-44aede47078b",
      "id": "CVE-2026-42586",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42586 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4772542c-0f7a-5e5c-883b-9fcbc5424c61",
      "id": "CVE-2026-42587",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42587 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fd58a2c9-8a68-5ff6-a169-69a563874532",
      "id": "CVE-2026-44248",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44248 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:261d9177-8253-51fb-ac9c-e01151cc84bc",
      "id": "CVE-2026-44249",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44249 is fixed in version 4.1.93.Final-tuxcare.3 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:57d4e142-634b-5746-ba7c-0364d0dc7835",
      "id": "CVE-2026-44250",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44250 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:691c51dc-6d3a-5a44-8cf4-d5d55b027f2e",
      "id": "CVE-2026-44890",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.93.Final-tuxcare.3 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a33db9ab-9bf0-5941-a09e-45151c94fb4a",
      "id": "CVE-2026-44891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44891 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:864de4ae-8773-5063-b41c-ea9786a5fc3f",
      "id": "CVE-2026-44893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44893 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5f7f02ba-a6e4-5ad1-ac3e-ff5ec66cac21",
      "id": "CVE-2026-45416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45416 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cf21e2e4-666d-5947-87d4-f6e1e8dfba2d",
      "id": "CVE-2026-45536",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45536 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:781f9d9a-a7ad-5950-b7cc-dde3a73ec20c",
      "id": "CVE-2026-45673",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45673 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2c0f471a-7dff-556a-9d6f-1250c6f9f009",
      "id": "CVE-2026-45674",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-45674 is fixed in version 4.1.93.Final-tuxcare.3 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:80fae8e3-fd0e-51eb-b0f1-7abeb8ecf389",
      "id": "CVE-2026-46340",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-46340 is fixed in version 4.1.93.Final-tuxcare.3 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4a13ddd9-ac1d-5bea-b78c-e83b1bfbb90f",
      "id": "CVE-2026-47244",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47244 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7c1e2df1-872a-5981-a0fc-d8f32efa5b69",
      "id": "CVE-2026-47691",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47691 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3e0995c9-347d-5bff-9131-85f82b1be97e",
      "id": "CVE-2026-48006",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48006 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:26890fec-2114-58a6-9cab-201fd4bfb695",
      "id": "CVE-2026-48043",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-48043 is fixed in version 4.1.93.Final-tuxcare.3 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:31dc9a96-8572-5f66-87e9-5ec0ccb45fbd",
      "id": "CVE-2026-48059",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-48059 is fixed in version 4.1.93.Final-tuxcare.3 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3cb96328-646d-5205-bb1b-797651d09cfa",
      "id": "CVE-2026-50010",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50010 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7d9ef372-70ca-58d9-b971-0148397c106e",
      "id": "CVE-2026-50011",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50011 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:263e9a21-5b50-51b2-a2be-bf984de61168",
      "id": "CVE-2026-50020",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50020 is fixed in version 4.1.93.Final-tuxcare.3 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ec4e559a-2f4b-5f68-9783-ecf1ceab430c",
      "id": "CVE-2026-50560",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.93.Final-tuxcare.3 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:00e21592-e0a5-518c-96d1-5cb78631a217",
      "id": "CVE-2026-55831",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55831 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6e4649e7-8165-519e-9e7c-18f1b7983b93",
      "id": "CVE-2026-55833",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55833 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cb528e69-1af1-5137-a988-5e29411f2613",
      "id": "CVE-2026-55851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55851 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6de74d21-7f2d-51e0-b43b-3e9835b7ed55",
      "id": "CVE-2026-56745",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56745 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:97589149-aefb-55a6-91c0-8af40e27c22f",
      "id": "CVE-2026-56746",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56746 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:916d3e67-d2ea-5e47-bfa8-e9bdd677e7e0",
      "id": "CVE-2026-56817",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56817 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:81672f96-fbd1-53a6-9c90-8d8c096e0df1",
      "id": "CVE-2026-56818",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-56818 does not affect version 4.1.93.Final-tuxcare.3 of io.netty:netty-buffer. not_affected \u2014 Target version 4.1.93.Final does not contain the maxElements feature or associated code that CVE-2026-56818 describes. This CVE concerns missing cleanup when the maxElements limit check throws an exception (vs. proper cleanup in the maxNestedArrayDepth check). The maxElements feature was introduced by CVE-2026-48006's fix, which was only backported to 4.1.130.Final and later versions, not to 4...."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dce3ef3d-f5be-5e3a-9b33-5627edeee8ee",
      "id": "CVE-2026-56819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56819 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ab8ddba5-8e76-5014-9a85-6060d45bbdac",
      "id": "CVE-2026-56820",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56820 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:51e18d25-f30b-5a31-b1b0-9e7a4cc9ca99",
      "id": "CVE-2026-56821",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56821 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3284e476-1057-53cb-a55f-f35ae97f39b6",
      "id": "CVE-2026-56822",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56822 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8ac82365-670f-5886-b578-416574594440",
      "id": "CVE-2026-59898",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59898 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7be4e7fd-ecd1-55d0-a22d-a696199438f2",
      "id": "CVE-2026-59899",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59899 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:36bad8cb-8b9a-5b87-8bf0-84044db3cb07",
      "id": "CVE-2026-59900",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59900 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4e2b832a-8d6d-5147-911e-f58620085e76",
      "id": "CVE-2026-59901",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59901 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:89502856-5992-5fba-8a88-9128a86f88b1",
      "id": "CVE-2026-59902",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59902 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ff08bc47-c091-507f-9507-601c7513d80e",
      "id": "CVE-2026-59903",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59903 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:818d9336-a897-5b73-8ecb-94a7b3334dd5",
      "id": "CVE-2026-59919",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59919 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:84b59aae-cde7-545f-94c2-05fba5e181c0",
      "id": "CVE-2026-59920",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59920 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e61b7d90-7dea-50cf-86f8-601f2342a719",
      "id": "CVE-2026-59921",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59921 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:baac2c95-eda1-504f-8e6a-129bd2e29799",
      "id": "CVE-2026-73507",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-73507 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9e93911b-38aa-5406-85fd-a31c4215ccfe",
      "id": "CVE-2026-73508",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-73508 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ed9f66dc-9e70-56df-ae4c-e0f0eb0f53db",
      "id": "GHSA-mfg7-5gfp-c4w3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:29ab33f2-d3e0-583a-9351-554bce978653",
      "id": "GHSA-v74w-7mr3-4qg3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b97a014a-53e7-5f00-af01-6edba54e2d99",
      "id": "GHSA-xpw8-rcwv-8f8p",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-xpw8-rcwv-8f8p affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-buffer."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-buffer@4.1.93.Final-tuxcare.3"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.netty/netty-buffer@4.1.93.Final-tuxcare.3"
    }
  ]
}