{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:a09fffee-c4cb-58f6-a689-5d66bf210fa9", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/io.netty/netty-codec-http@4.1.122.Final-tuxcare.1", "type": "library", "group": "io.netty", "name": "netty-codec-http", "version": "4.1.122.Final-tuxcare.1", "purl": "pkg:maven/io.netty/netty-codec-http@4.1.122.Final-tuxcare.1" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:dfc53a7d-f7e7-5549-8507-2dc99a1d93b9", "id": "CVE-2025-55163", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-55163 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:e1d28347-9370-5129-8128-45adcd1ddcb2", "id": "CVE-2025-58056", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-58056 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:a87837d0-5ff1-558c-944b-6f7d3937b495", "id": "CVE-2025-58057", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-58057 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:8a63e19e-c654-5b18-a05a-e3d1bb1433ce", "id": "CVE-2025-59419", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-59419 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:3d6cd113-98a5-5e88-986b-669b66b45d8a", "id": "CVE-2025-67735", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-67735 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:5317541a-07e4-54b1-a8f6-2f0dff438e67", "id": "CVE-2026-33870", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33870 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:0de534e5-2e49-5b0c-a9ba-e0fade336527", "id": "CVE-2026-33871", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33871 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:768832b7-fa2f-56e4-ac62-fd497b3fb968", "id": "CVE-2026-41417", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41417 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:0ede5e0a-015e-5d66-ad5f-386fd7dad45c", "id": "CVE-2026-42577", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-42577 does not affect version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-http. CVE-2026-42577 affects Netty 4.2.x only (advisory range >= 4.2.0.Final, < 4.2.13.Final). An fd left registered with an epoll event mask of 0 is woken forever by the unmaskable EPOLLERR/EPOLLHUP after a RST on a half-closed connection. Target 4.1.122.Final is NOT affected due to architectural differences. The patch modifies EpollIoHandler.java and EpollIoOps.java, part of 4.2's IoHandler/IoOps abstraction. Neither file exists in 4.1.x, which registers via EpollEventLoop.modify() off AbstractEpollChannel.flags. That field is seeded Native.EPOLLET, and no read/close/half-close path clears it (only the explicit pre-registration setEpollMode(LEVEL_TRIGGERED) opt-in), so the registration stays edge-triggered and the RST is reported once per edge instead of on every epoll_wait. The chain from INPUT (connection state change) to GOAL (CPU busy-loop via empty event mask) is broken at step (ii): the target cannot produce an empty event mask. Verdict: not_affected. Justification: code_not_reachable (Rule 5 Type A2)." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:602667f4-8d99-5356-8982-5e97fcc0f0c2", "id": "CVE-2026-42578", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42578 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:e65d7f60-7552-52e6-b98b-719041127d5c", "id": "CVE-2026-42579", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42579 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:e37055fa-68e2-5928-bf64-4b04a1367092", "id": "CVE-2026-42580", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42580 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:f2f91b2a-b13c-53e5-8739-1462cc0e2472", "id": "CVE-2026-42581", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42581 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:4b3944f8-fadf-5b05-baa0-ffd02ddbb307", "id": "CVE-2026-42583", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42583 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:e440c2ca-5525-582b-a567-6e72f8c74762", "id": "CVE-2026-42584", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42584 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:3657f5a7-6bdb-5896-a1a4-7b5753dc93d2", "id": "CVE-2026-42585", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42585 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:b476967e-bc48-5d19-b5c8-062369ce7798", "id": "CVE-2026-42586", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42586 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:c9cf325e-3ed1-5116-921f-b52583ec4fab", "id": "CVE-2026-42587", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42587 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:de3f1387-0df6-520b-83e4-3f617f055447", "id": "CVE-2026-44248", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44248 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:33a7fffb-2380-50f9-b3a2-abdbef8edd30", "id": "CVE-2026-44249", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44249 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:9dbe7889-7bf1-54f8-8bdd-f450af07e4fa", "id": "CVE-2026-44250", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44250 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:e1dbc4f6-f1e3-52c1-8a35-9a5e2a748fc6", "id": "CVE-2026-44890", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44890 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:a5160632-9956-54e4-bd23-2ca64b0240bb", "id": "CVE-2026-44891", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44891 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:cd59ba1c-2277-56f8-88b1-25ed6513ecc5", "id": "CVE-2026-44893", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44893 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:3545713a-21b5-509f-a108-4db20c0000af", "id": "CVE-2026-45416", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45416 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:e32638d6-b27a-5cd8-937e-11e6bcc86549", "id": "CVE-2026-45536", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45536 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:ece94911-79e1-59fe-87e8-be90ea61f632", "id": "CVE-2026-45673", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45673 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:49660f25-ec05-5386-bb45-87a523e9cf88", "id": "CVE-2026-45674", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45674 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:2ca53dbe-4fa5-5a40-a3a7-5ecbae79360e", "id": "CVE-2026-46340", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-46340 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:4b140413-6462-5544-a53c-f82ce9f3e9ae", "id": "CVE-2026-47244", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47244 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:9e103807-960f-5e4a-8a2f-05edc37e23b2", "id": "CVE-2026-47691", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47691 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:4f42640d-c4ef-5290-8023-19b44eb2314a", "id": "CVE-2026-48006", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-48006 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:3e15a84b-79f6-55f3-b726-a8c71c34b7fb", "id": "CVE-2026-48043", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-48043 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:d875304d-e227-5221-9249-8aab2d636e45", "id": "CVE-2026-48059", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-48059 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:244a880f-a49c-5aae-8dd1-00378a4c7f82", "id": "CVE-2026-50010", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50010 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:e9cc0d35-e026-54f1-814a-d9e2ae1cc4bd", "id": "CVE-2026-50011", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50011 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:b4206881-1ec7-5870-ba91-33eb716648c9", "id": "CVE-2026-50020", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50020 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:edd923d2-8fdd-5be2-b7a7-abbe23c7929a", "id": "CVE-2026-50560", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50560 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:d1e94026-1dec-535b-8487-e0c0215d21f7", "id": "CVE-2026-55831", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55831 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:d3207db1-cfa0-5f37-b30f-5fd232d266f8", "id": "CVE-2026-55833", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55833 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:b730e602-7fd4-59bb-8eab-dc0350d617cf", "id": "CVE-2026-55851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55851 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:7ceedb08-6103-5c95-8800-d7e90682f131", "id": "CVE-2026-56745", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56745 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:a4a6c498-119b-5737-ad96-93d14f1c0a54", "id": "CVE-2026-56746", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56746 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:deac5637-f852-5276-a87a-97e5646bef22", "id": "CVE-2026-56817", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56817 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:8488a127-76aa-5045-b2ab-f6bd976cef3f", "id": "CVE-2026-56818", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56818 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:73bb891d-45e8-5b66-9cd9-41d46e753bb7", "id": "CVE-2026-56819", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56819 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:14ec34f6-1b5e-5bcb-ae6f-bb2ebdf3c1bd", "id": "CVE-2026-56820", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56820 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:3c8b13ef-c3c2-505c-a2b7-1bb059fbfcfd", "id": "CVE-2026-56821", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56821 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:80103a89-8417-5c67-ae91-fe4afff52341", "id": "CVE-2026-56822", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56822 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:739a3572-91a2-5003-8f0c-772aa424fee2", "id": "CVE-2026-59898", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59898 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:1858b655-e95a-5a87-8021-2277b91dd51e", "id": "CVE-2026-59899", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59899 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:95a5b207-af2b-5b13-8ace-622b7e3c2222", "id": "CVE-2026-59900", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59900 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:592b9faf-5e42-590e-8be0-acd5ee2d3d81", "id": "CVE-2026-59901", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59901 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:a2e8476b-c1d9-5544-8c0f-898693ad4e3a", "id": "CVE-2026-59902", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59902 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:684169b8-50ab-530f-bf34-0fd341b1bd5e", "id": "CVE-2026-59903", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59903 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:d5d3d0ba-1625-534e-a309-eec27180b311", "id": "CVE-2026-59919", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59919 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:d327c112-7058-56f5-b1fa-43999bd110ad", "id": "CVE-2026-59920", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59920 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:9488c53a-0174-5b0f-b850-27cb2d9af01b", "id": "CVE-2026-59921", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59921 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:4a77e0b1-1314-5e5f-b573-f0166ab6d5ea", "id": "CVE-2026-73507", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-73507 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:0f73bdf6-4319-5d13-a165-b401a81f22e8", "id": "CVE-2026-73508", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-73508 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:cb5c78b0-ede4-5397-8aca-09611ea3ad6c", "id": "GHSA-mfg7-5gfp-c4w3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:fb94c34d-71b1-5d3e-8ece-5252fa75356d", "id": "GHSA-v74w-7mr3-4qg3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.122.Final-tuxcare.1" } ] } ], "dependencies": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.122.Final-tuxcare.1" } ] }