{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:72a271fd-3f22-59ab-90e1-37f50ba8efa1",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/io.netty/netty-codec-dns@4.1.73.Final-tuxcare.4",
      "type": "library",
      "group": "io.netty",
      "name": "netty-codec-dns",
      "version": "4.1.73.Final-tuxcare.4",
      "purl": "pkg:maven/io.netty/netty-codec-dns@4.1.73.Final-tuxcare.4"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:71d1db63-15ba-53e1-9a13-a151bd48aaca",
      "id": "CVE-2022-24823",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-24823 is fixed in version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8e21977d-c728-5c77-8442-b01d464a0855",
      "id": "CVE-2022-41881",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-41881 is fixed in version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cf329c5a-f794-5329-aee3-acf18c355dbc",
      "id": "CVE-2022-41915",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-41915 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:24f0c088-69b8-5c6c-a0ae-1929aa76f4b8",
      "id": "CVE-2023-34462",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-34462 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dc1c1aad-ec5b-5bc5-a76b-d0689e13aff4",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-44487 is fixed in version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:894acee3-1231-51be-bc76-36d493b0fb42",
      "id": "CVE-2023-4586",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2023-4586 is a false positive for io.netty:netty-codec-dns 4.1.73.Final-tuxcare.4."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:82f4d4c9-c2b7-58b4-b7e5-17d570c22875",
      "id": "CVE-2024-29025",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-29025 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1a622bee-64d6-553f-bf01-3385a9dbc5b2",
      "id": "CVE-2024-47535",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-47535 is fixed in version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e7c71adc-d879-58b4-91f7-72180e4a6576",
      "id": "CVE-2025-24970",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-24970 is fixed in version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8bc35244-13d2-595d-b3f4-e20b3140c75f",
      "id": "CVE-2025-25193",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-25193 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:660f8323-63f3-5b61-8dbe-6b9388730400",
      "id": "CVE-2025-55163",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-55163 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cf5dd34b-0aa6-5fa0-9eb5-29f53a24ff26",
      "id": "CVE-2025-58056",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58056 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5246514a-49bc-5553-845a-84308d31bef7",
      "id": "CVE-2025-58057",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58057 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5dbdfe93-3fd3-5e87-839d-b67022a11c17",
      "id": "CVE-2025-59419",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-59419 is fixed in version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:92b437e7-c211-5d72-aca8-7a41cbcd64fc",
      "id": "CVE-2025-67735",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-67735 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:291e0d39-5a08-55e5-943a-7e8152e9be1d",
      "id": "CVE-2026-33870",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33870 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f518a1b5-daee-5933-a19e-195ab76a5ca3",
      "id": "CVE-2026-33871",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33871 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:799e865f-fe4c-58f4-80f1-358db9e85387",
      "id": "CVE-2026-41417",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41417 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4573837c-5d0a-5587-9aa3-936e1958b022",
      "id": "CVE-2026-42577",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42577 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8b25c808-7ab9-5bc4-8e96-6a6d839229b1",
      "id": "CVE-2026-42578",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42578 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ca30235c-e7ca-5681-8f6f-a77d89dd3293",
      "id": "CVE-2026-42579",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42579 is fixed in version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:44d0deb5-da39-5d36-8f1e-93b40d41519e",
      "id": "CVE-2026-42580",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42580 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6756ceef-bfbc-5047-9fa1-e32d004a015d",
      "id": "CVE-2026-42581",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42581 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3d0a9b0c-6c2b-567e-ade8-c9aa5455966b",
      "id": "CVE-2026-42583",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42583 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:916784a3-57f4-5b5f-bbd7-6ab6898caf3b",
      "id": "CVE-2026-42584",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42584 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:35f2f8dc-1848-5298-a375-07a28ab1f763",
      "id": "CVE-2026-42585",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42585 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3a3c5d61-6ae2-5500-8d17-af63db2c9440",
      "id": "CVE-2026-42586",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42586 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3e97e923-76b1-5b8a-875c-86f51cd30069",
      "id": "CVE-2026-42587",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42587 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e2b410fc-9c7d-580e-be5c-03f5731d2ba4",
      "id": "CVE-2026-44248",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44248 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a61aeb02-9884-5249-9bc4-67964e874b59",
      "id": "CVE-2026-44249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44249 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:44cd7ced-9100-51cc-9e0e-e0bb3c3ff945",
      "id": "CVE-2026-44250",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44250 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:15c8aba2-380c-5e16-b930-282ff83b7b62",
      "id": "CVE-2026-44890",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:12119f70-1ae3-5b5f-b0b2-2b8a7613aa45",
      "id": "CVE-2026-44891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44891 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f1759b4d-7144-5917-8a41-81f11e3faeae",
      "id": "CVE-2026-44893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44893 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d583fd6e-0ab2-55ea-afbf-ca77dc8ad5e9",
      "id": "CVE-2026-45416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45416 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5404253a-db15-5bff-863e-7a59e06a6962",
      "id": "CVE-2026-45536",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45536 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:619d200d-a593-5f9e-8fae-a67cb083e9d2",
      "id": "CVE-2026-45673",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45673 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8398ad31-f40b-50e1-8db8-4c1f159fbd90",
      "id": "CVE-2026-45674",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-45674 is fixed in version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:44a57a1c-af02-5fd8-b447-9ad02685e823",
      "id": "CVE-2026-46340",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-46340 is fixed in version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e6646629-47bb-5f77-9d2b-3b7fddc3b0ab",
      "id": "CVE-2026-47244",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47244 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:296c0953-c235-53b1-87bb-7bc97da71211",
      "id": "CVE-2026-47691",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47691 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f6856709-c3a2-5821-a2cd-9e2a28cfeffe",
      "id": "CVE-2026-48006",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48006 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:074683c6-ffe9-5236-af2d-67f988dfe80c",
      "id": "CVE-2026-48043",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-48043 does not affect version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-dns. not_affected \u2014 Version 4.1.73 is not affected by CVE-2026-48043. The target uses a loop-based architecture with try-finally protection (introduced in 2016) that prevents the buffer leak described in the CVE. The vulnerable ChannelInboundHandlerAdapter pattern that the upstream patch fixes does not exist in this version."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:859f4e75-0e97-5134-9406-481086303ffe",
      "id": "CVE-2026-48059",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48059 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0fad4c92-a0f5-59ca-b008-3e5471d1e9e2",
      "id": "CVE-2026-50010",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50010 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0f78ba5c-1d3b-5c49-b739-712c38247899",
      "id": "CVE-2026-50011",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50011 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:819eb543-5cfd-5468-bdb5-9fd4215b7507",
      "id": "CVE-2026-50020",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50020 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d0ca139b-079d-560c-b817-d3f3147e1185",
      "id": "CVE-2026-50560",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:60760898-3ff8-5110-ae1c-bfb2656a3347",
      "id": "CVE-2026-55831",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55831 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:142389b9-94db-503b-b73a-56f029391745",
      "id": "CVE-2026-55833",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55833 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b7628733-2d13-5298-a4e7-605d4ca87804",
      "id": "CVE-2026-55851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55851 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:92eb1db5-04e9-5e56-9949-c71d908ef14d",
      "id": "CVE-2026-56745",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56745 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cded52b3-0dc2-51fd-832d-7f9c47fce066",
      "id": "CVE-2026-56746",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56746 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:916005fd-b91b-5bd4-b52b-4ae47cd9852e",
      "id": "CVE-2026-56817",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56817 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:936491df-2108-5d31-9d54-1feda9b735ae",
      "id": "CVE-2026-56818",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-56818 does not affect version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-dns. not_affected \u2014 The target version 4.1.73.Final-tuxcare.2 is NOT AFFECTED by CVE-2026-56818. The vulnerable code pattern (configurable `maxElements` limit check without cleanup, contrasting with `maxNestedArrayDepth` limit check WITH cleanup) was introduced in version 4.1.135.Final through commits e51c64c964 and 728c98b8ec (dated 2026-06-01/02). The target version predates these features entirely and does not ..."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c2076067-2009-52a4-ba23-f3435a38d22a",
      "id": "CVE-2026-56819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56819 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:53c834ae-f0da-55e4-a552-0683556a1801",
      "id": "CVE-2026-59898",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59898 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:107acf64-279b-54a0-bcfa-d89a835ebec7",
      "id": "CVE-2026-59899",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59899 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ed4f10b3-f842-5449-b952-21b16be32b15",
      "id": "CVE-2026-59900",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59900 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3a7d0646-ab34-566f-8844-d22182ca5af6",
      "id": "CVE-2026-59901",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59901 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:350d0916-415a-5ba7-90f6-3e4508499b67",
      "id": "CVE-2026-59902",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59902 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:47d2d78f-e844-57c6-865b-d27e1681570d",
      "id": "CVE-2026-59903",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59903 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dbf37064-9b11-5ee1-bd7f-f4f0acafcd28",
      "id": "CVE-2026-59919",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59919 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9ed6025d-82f0-54d4-bfbc-f88f24eef4df",
      "id": "CVE-2026-59920",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59920 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b3aa79f2-ec93-5baf-be79-7821380905da",
      "id": "CVE-2026-59921",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59921 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:81c616c0-6584-5c13-bf02-b779f65c9d6a",
      "id": "CVE-2026-73507",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-73507 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:28fa0f75-fa94-5891-aac4-38514b4e9dec",
      "id": "CVE-2026-73508",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-73508 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0685f65a-9b9b-5d13-bcca-48fdab16ef7a",
      "id": "GHSA-mfg7-5gfp-c4w3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:64d9d82b-e4d8-5b13-96ef-0abb91583357",
      "id": "GHSA-v74w-7mr3-4qg3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4c0e8265-15b5-517e-820b-3d8bc443aa07",
      "id": "GHSA-xpw8-rcwv-8f8p",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-xpw8-rcwv-8f8p affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.73.Final-tuxcare.4"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.73.Final-tuxcare.4"
    }
  ]
}