{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:dd2abeda-156b-5cda-b113-af1d5b8bd636", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/io.netty/netty-codec-haproxy@4.1.122.Final-tuxcare.1", "type": "library", "group": "io.netty", "name": "netty-codec-haproxy", "version": "4.1.122.Final-tuxcare.1", "purl": "pkg:maven/io.netty/netty-codec-haproxy@4.1.122.Final-tuxcare.1" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:f0198e46-143a-545b-8d54-0bddc105e93d", "id": "CVE-2025-55163", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-55163 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-haproxy." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-haproxy@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:bb47df0a-5c6d-5f2a-8a91-be89ba799a8f", "id": "CVE-2025-58056", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-58056 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-haproxy." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-haproxy@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:8fa42852-516e-54cc-9594-afaab9ed41f6", "id": "CVE-2025-58057", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-58057 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-haproxy." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-haproxy@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:22bc45a2-7867-5b10-a262-81dd2f1a760d", "id": "CVE-2025-59419", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-59419 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-haproxy." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-haproxy@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:6cfc4ce3-a536-51c5-85e4-22c1fed75bfd", "id": "CVE-2025-67735", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-67735 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-haproxy." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-haproxy@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:c7dbe037-5636-51ff-8c51-abd898bffa99", "id": "CVE-2026-33870", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33870 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-haproxy." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-haproxy@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:624ebfa1-4f3d-5b7f-9fd7-b9c5f678c1a9", "id": "CVE-2026-33871", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33871 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-haproxy." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-haproxy@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:88f437c2-e3eb-5578-9855-20a2ab1929d3", "id": "CVE-2026-41417", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41417 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-haproxy." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-haproxy@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:2f138fe7-4c8d-5d6e-b3ee-76a634990d13", "id": "CVE-2026-42577", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-42577 does not affect version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-haproxy. CVE-2026-42577 affects Netty 4.2.x only (advisory range >= 4.2.0.Final, < 4.2.13.Final). An fd left registered with an epoll event mask of 0 is woken forever by the unmaskable EPOLLERR/EPOLLHUP after a RST on a half-closed connection. Target 4.1.122.Final is NOT affected due to architectural differences. The patch modifies EpollIoHandler.java and EpollIoOps.java, part of 4.2's IoHandler/IoOps abstraction. Neither file exists in 4.1.x, which registers via EpollEventLoop.modify() off AbstractEpollChannel.flags. That field is seeded Native.EPOLLET, and no read/close/half-close path clears it (only the explicit pre-registration setEpollMode(LEVEL_TRIGGERED) opt-in), so the registration stays edge-triggered and the RST is reported once per edge instead of on every epoll_wait. The chain from INPUT (connection state change) to GOAL (CPU busy-loop via empty event mask) is broken at step (ii): the target cannot produce an empty event mask. Verdict: not_affected. Justification: code_not_reachable (Rule 5 Type A2)." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-haproxy@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:76fb3665-7c90-54f9-91e4-425d53833f9d", "id": "CVE-2026-42578", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42578 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-haproxy." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-haproxy@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:0239a8a3-4d0b-5952-9d64-38435bc8764a", "id": "CVE-2026-42579", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42579 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-haproxy." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-haproxy@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:1d9108b8-4ba3-569c-81e4-eb8521a98366", "id": "CVE-2026-42580", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42580 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-haproxy." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-haproxy@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:801aae1e-ef22-556f-9020-04f147d85e4e", "id": "CVE-2026-42581", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42581 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-haproxy." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-haproxy@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:4d5567ca-9d7a-5ec2-87ac-906cbadfe9e2", "id": "CVE-2026-42583", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42583 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-haproxy." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-haproxy@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:8e553fcf-9b73-5d77-a3f9-0b01e471154c", "id": "CVE-2026-42584", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42584 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-haproxy." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-haproxy@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:6998cb7c-4a5e-540e-9578-935aacfe5e24", "id": "CVE-2026-42585", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42585 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-haproxy." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-haproxy@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:8d6ae6ff-8b3e-5b3c-9bf7-0b43eb9b4c97", "id": "CVE-2026-42586", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42586 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-haproxy." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-haproxy@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:4fe8787a-714a-5dee-a91f-ba04190151ee", "id": "CVE-2026-42587", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42587 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-haproxy." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-haproxy@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:7f5f785b-a589-584f-9c0d-8dfa10080afe", "id": "CVE-2026-44248", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44248 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-haproxy." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-haproxy@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:2f7fc31c-da53-5037-8873-0fadfed42f99", "id": "CVE-2026-44249", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44249 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-haproxy." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-haproxy@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:3404ae46-fbe6-5c50-b9d6-703fcc1fc21a", "id": "CVE-2026-44250", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44250 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-haproxy." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-haproxy@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:6b24936b-32d3-5085-9449-a571a743ec86", "id": "CVE-2026-44890", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44890 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-haproxy." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-haproxy@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:b193eed2-6c19-5c4d-93de-6e950bb09bbf", "id": "CVE-2026-44891", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44891 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-haproxy." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-haproxy@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:1d1a8494-6222-5524-a03a-8deb35ee0f13", "id": "CVE-2026-44893", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44893 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-haproxy." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-haproxy@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:ba012b0c-000d-5d02-8c58-323722602d8c", "id": "CVE-2026-45416", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45416 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-haproxy." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-haproxy@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:78aca4b9-4e1b-5d2a-81e8-90c272ee4ff0", "id": "CVE-2026-45536", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45536 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-haproxy." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-haproxy@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:91991268-cd9c-5110-977d-5ad8772cd908", "id": "CVE-2026-45673", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45673 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-haproxy." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-haproxy@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:02bca2ca-274e-505f-b949-5d2c0ba95667", "id": "CVE-2026-45674", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45674 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-haproxy." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-haproxy@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:2aeda70c-c496-5afa-8c69-457cd47d8945", "id": "CVE-2026-46340", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-46340 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-haproxy." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-haproxy@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:7026b90d-9f13-5d11-b667-9f5aab815a45", "id": "CVE-2026-47244", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47244 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-haproxy." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-haproxy@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:063de7ab-0bce-58d8-b8b0-9a79a66e74cb", "id": "CVE-2026-47691", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47691 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-haproxy." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-haproxy@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:12ab5c93-71cb-564d-b06d-12284d97e0cc", "id": "CVE-2026-48006", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-48006 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-haproxy." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-haproxy@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:beee62da-88e6-5020-a683-7f01a2c96474", "id": "CVE-2026-48043", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-48043 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-haproxy." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-haproxy@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:0db09933-1a5e-5fa8-ae91-f9914ac2c6b3", "id": "CVE-2026-48059", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-48059 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-haproxy." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-haproxy@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:66f63996-18f6-5b63-95cb-18a8252f0b5c", "id": "CVE-2026-50010", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50010 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-haproxy." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-haproxy@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:313a0eea-9884-594d-88b4-ed8f5e243bad", "id": "CVE-2026-50011", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50011 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-haproxy." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-haproxy@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:d2ac47df-03d4-5c47-a0d5-930124596bcd", "id": "CVE-2026-50020", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50020 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-haproxy." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-haproxy@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:0ffbb591-2b73-5854-98a0-c242fe71415c", "id": "CVE-2026-50560", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50560 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-haproxy." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-haproxy@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:89a45402-4c9d-52fa-b350-e4b87ed855c1", "id": "CVE-2026-55831", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55831 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-haproxy." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-haproxy@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:6dc7b79b-4af4-59cb-8b40-d275b52a5423", "id": "CVE-2026-55833", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55833 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-haproxy." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-haproxy@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:f6718f34-dc50-51c4-a5ef-a812014d496b", "id": "CVE-2026-55851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55851 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-haproxy." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-haproxy@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:d6936c73-1125-519f-8c53-43ed798fa12b", "id": "CVE-2026-56745", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56745 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-haproxy." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-haproxy@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:ffb5a73d-daa9-595c-aa2c-a5c7386bbd6e", "id": "CVE-2026-56746", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56746 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-haproxy." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-haproxy@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:86dfa612-716e-5287-be17-200613840beb", "id": "CVE-2026-56817", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56817 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-haproxy." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-haproxy@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:86386f02-0781-5814-81fa-93e6d436d6fc", "id": "CVE-2026-56818", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56818 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-haproxy." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-haproxy@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:6e478e3d-26e2-5392-82ff-12e982a31721", "id": "CVE-2026-56819", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56819 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-haproxy." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-haproxy@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:aaba694a-d755-56ee-964b-914f798b2d83", "id": "CVE-2026-56820", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56820 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-haproxy." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-haproxy@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:35ccc226-9a16-585d-a41c-bcd479adce51", "id": "CVE-2026-56821", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56821 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-haproxy." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-haproxy@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:d22e5e67-a87e-500f-968a-870aaa4f089c", "id": "CVE-2026-56822", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56822 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-haproxy." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-haproxy@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:d1218009-405d-5734-af2c-a0f147386bb7", "id": "CVE-2026-59898", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59898 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-haproxy." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-haproxy@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:39bb9189-824d-5d18-b897-79e63600dd26", "id": "CVE-2026-59899", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59899 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-haproxy." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-haproxy@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:a863546e-4e37-5566-aaa2-4da5e3ea456c", "id": "CVE-2026-59900", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59900 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-haproxy." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-haproxy@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:08b35558-56f7-50ca-8108-1a2729ce84a1", "id": "CVE-2026-59901", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59901 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-haproxy." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-haproxy@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:881e39d3-69a0-573f-881c-63683863059e", "id": "CVE-2026-59902", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59902 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-haproxy." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-haproxy@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:87761502-163d-5c28-835f-7bb510cdaedc", "id": "CVE-2026-59903", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59903 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-haproxy." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-haproxy@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:4fc5e697-5b30-5598-8a2f-bebd301d4a0c", "id": "CVE-2026-59919", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59919 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-haproxy." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-haproxy@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:9363b58d-e29b-5d99-81db-25a0e113e162", "id": "CVE-2026-59920", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59920 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-haproxy." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-haproxy@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:72a48e09-d1c2-58cb-984f-f33a0772ecfa", "id": "CVE-2026-59921", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59921 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-haproxy." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-haproxy@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:2b14212a-9c8c-5813-83b1-881cbf80ba38", "id": "CVE-2026-73507", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-73507 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-haproxy." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-haproxy@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:4e7e6c8a-7e1d-583c-9787-37402c022458", "id": "CVE-2026-73508", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-73508 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-haproxy." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-haproxy@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:9b086132-8470-5720-9fbc-f90237c62405", "id": "GHSA-mfg7-5gfp-c4w3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-haproxy." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-haproxy@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:adcbabe0-7cc0-51fb-b23a-ae52b0c9e486", "id": "GHSA-v74w-7mr3-4qg3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-haproxy." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-haproxy@4.1.122.Final-tuxcare.1" } ] } ], "dependencies": [ { "ref": "pkg:maven/io.netty/netty-codec-haproxy@4.1.122.Final-tuxcare.1" } ] }