{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:130f0fd5-e7e0-5c27-86c8-1bd19285016f", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/io.netty/netty-codec-http@4.1.122.Final-tuxcare.2", "type": "library", "group": "io.netty", "name": "netty-codec-http", "version": "4.1.122.Final-tuxcare.2", "purl": "pkg:maven/io.netty/netty-codec-http@4.1.122.Final-tuxcare.2" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:d381f2cb-1b44-5a7a-8c71-898dc8c8558d", "id": "CVE-2025-55163", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55163 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:9bc04571-2462-56b3-acf1-7ab63a1e709d", "id": "CVE-2025-58056", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-58056 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:9d4f3fe1-3055-5d42-a2e0-8bc7e13556c1", "id": "CVE-2025-58057", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-58057 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:de525474-e44c-526d-8c42-b2870da00f84", "id": "CVE-2025-59419", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59419 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:ef52c544-3445-53c3-85a5-9b15e9259d1e", "id": "CVE-2025-67735", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-67735 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:a2791489-669a-58ef-8eb0-49491961e17e", "id": "CVE-2026-33870", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33870 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:752da2e8-9be1-54bd-a7a9-7e5bdab40ce8", "id": "CVE-2026-33871", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33871 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:7686fe47-b4d6-596f-9aae-aadd3206c552", "id": "CVE-2026-41417", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41417 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:46d354fe-ec2c-58a9-9f1a-016ce6a0c5a1", "id": "CVE-2026-42577", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-42577 does not affect version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-http. CVE-2026-42577 affects Netty 4.2.x only (advisory range >= 4.2.0.Final, < 4.2.13.Final). An fd left registered with an epoll event mask of 0 is woken forever by the unmaskable EPOLLERR/EPOLLHUP after a RST on a half-closed connection. Target 4.1.122.Final is NOT affected due to architectural differences. The patch modifies EpollIoHandler.java and EpollIoOps.java, part of 4.2's IoHandler/IoOps abstraction. Neither file exists in 4.1.x, which registers via EpollEventLoop.modify() off AbstractEpollChannel.flags. That field is seeded Native.EPOLLET, and no read/close/half-close path clears it (only the explicit pre-registration setEpollMode(LEVEL_TRIGGERED) opt-in), so the registration stays edge-triggered and the RST is reported once per edge instead of on every epoll_wait. The chain from INPUT (connection state change) to GOAL (CPU busy-loop via empty event mask) is broken at step (ii): the target cannot produce an empty event mask. Verdict: not_affected. Justification: code_not_reachable (Rule 5 Type A2)." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:41cc0771-c709-5429-9401-2783fd824ee9", "id": "CVE-2026-42578", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42578 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:89b4724a-c7e8-53a0-ad22-497f39b7cf49", "id": "CVE-2026-42579", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42579 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:0e502cb1-aa2d-5e78-b2ad-b965b186a488", "id": "CVE-2026-42580", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42580 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:a12c9c55-6d6e-596f-b1e3-f2f7e1fefc8b", "id": "CVE-2026-42581", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42581 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:ef5de2e7-8ece-5e0d-bb42-a5660cfad21f", "id": "CVE-2026-42583", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42583 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:62b015f2-860e-584b-a537-6f85ade24155", "id": "CVE-2026-42584", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42584 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:82a1190e-5ebc-5479-96d6-c3ea5a2148e9", "id": "CVE-2026-42585", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42585 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:90085702-2ed9-5755-b464-fbf06d2685cc", "id": "CVE-2026-42586", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42586 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:2cbb20fd-5de1-5e10-8730-46ae03faa2c9", "id": "CVE-2026-42587", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42587 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:1f2c6437-49f2-5a6d-8a8c-b6538d15a139", "id": "CVE-2026-44248", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44248 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:df100758-c0e4-53c2-a7e1-4a4ca929d645", "id": "CVE-2026-44249", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44249 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:a0e939b5-08b9-5afa-b662-818084d2e83e", "id": "CVE-2026-44250", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44250 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:9caf3fdf-d72c-514f-9a4a-41a22b756d5b", "id": "CVE-2026-44890", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:9d5340b6-52e3-5266-82ef-983e399f1540", "id": "CVE-2026-44891", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44891 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:d9f74149-3f65-5241-b96d-d5dae064b23f", "id": "CVE-2026-44893", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44893 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:cff9784d-5737-5add-b04a-78e9bbe661d3", "id": "CVE-2026-45416", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-45416 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:1c435e44-bb49-5abf-bf12-8b14e1b2c4d9", "id": "CVE-2026-45536", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-45536 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:18f726a6-5b97-5482-91e5-7782e2496bdf", "id": "CVE-2026-45673", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-45673 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:549597d2-5c2b-5709-84c9-e81e1df4ab47", "id": "CVE-2026-45674", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-45674 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:a3fa5121-8816-5dfc-ac1f-465986b9b242", "id": "CVE-2026-46340", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46340 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:41f47466-19be-59f2-8e42-d858ca4c6fb9", "id": "CVE-2026-47244", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47244 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:215d438b-6013-5a33-8ed7-60f41338466a", "id": "CVE-2026-47691", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47691 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:51964d76-a6e5-5c96-8bf8-7f4e51208345", "id": "CVE-2026-48006", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48006 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:0437d733-bb36-5f77-b058-1323e749fd21", "id": "CVE-2026-48043", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48043 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:fe0aca80-9838-5162-b25e-98df81dbd50d", "id": "CVE-2026-48059", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48059 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:29265fc4-b786-5bf9-95f8-323f1e4a1e73", "id": "CVE-2026-50010", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50010 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:963a030d-142a-52ce-b2ee-df18f47583f0", "id": "CVE-2026-50011", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50011 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:3aca0c8b-92d2-5565-82bb-651a94a4df86", "id": "CVE-2026-50020", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50020 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:63044795-af12-50b9-88be-f2de46126c33", "id": "CVE-2026-50560", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:30295247-6cf7-53e9-905c-7845ff5d9c99", "id": "CVE-2026-55831", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-55831 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:7da4974f-42ae-5f3f-ac5e-43c263baf9b9", "id": "CVE-2026-55833", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-55833 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:b18617fa-5a9c-5b84-869a-274ce193e071", "id": "CVE-2026-55851", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-55851 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:8b78d039-4532-5b85-9e82-934b5af40b49", "id": "CVE-2026-56745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56745 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:17e8025f-7717-50c5-a357-91134a0a4982", "id": "CVE-2026-56746", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56746 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:4b04e269-dd7e-5277-b074-64617eb55713", "id": "CVE-2026-56817", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56817 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:ad1e6013-c561-5e9e-882e-64e7738f3cc1", "id": "CVE-2026-56818", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56818 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:f8e13657-61fc-566f-b41c-34fcd562d2df", "id": "CVE-2026-56819", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56819 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:a2d455d6-469d-539c-9dd7-f8046ea03eff", "id": "CVE-2026-56820", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56820 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:146a16d5-9129-554e-87dd-d41741f2eff3", "id": "CVE-2026-56821", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56821 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:9bf4e269-c6a7-55bf-968b-ec69fc97c575", "id": "CVE-2026-56822", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56822 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:c5f9e34b-dbfb-51d0-be8b-ed514de8c103", "id": "CVE-2026-59898", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59898 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:fac845fc-8c65-5237-abfc-716edc77b07f", "id": "CVE-2026-59899", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59899 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:e034e8f6-b518-58e3-b99e-68ea118f4c71", "id": "CVE-2026-59900", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59900 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:aa6e8cdf-bc3c-5e71-ba5b-24d14ade8ab8", "id": "CVE-2026-59901", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59901 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:e19a4b6f-6a72-5d16-a06f-c780c4276a39", "id": "CVE-2026-59902", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59902 affects version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:fab285a2-12f2-57b4-b63e-023c62874d9d", "id": "CVE-2026-59903", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59903 affects version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:ca49cd0d-14d0-513f-ac02-e8e654215552", "id": "CVE-2026-59919", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59919 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:6cd8595e-a264-5a69-8caf-cada914690a4", "id": "CVE-2026-59920", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59920 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:ea5b3e99-597a-572f-acc9-4191a9ba8047", "id": "CVE-2026-59921", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59921 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:765abd64-e493-5929-93d6-5b1d4965eea9", "id": "CVE-2026-73507", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-73507 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:3dd4d256-1272-51c8-9962-e23bd7e53373", "id": "CVE-2026-73508", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-73508 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:85980fde-574d-56b4-aca9-cd4c72913974", "id": "GHSA-mfg7-5gfp-c4w3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:a9fd4d76-3c8a-5d4a-99e8-a913f8625fad", "id": "GHSA-v74w-7mr3-4qg3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.122.Final-tuxcare.2" } ] } ], "dependencies": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.122.Final-tuxcare.2" } ] }