{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:3e75a2c3-0631-54ff-8e4e-b9283eb2ef17", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.1", "type": "library", "group": "io.netty", "name": "netty-codec-http", "version": "4.1.130.Final-tuxcare.1", "purl": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.1" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:3b3650ab-0a60-5045-a198-ad24fe72c4b5", "id": "CVE-2025-55163", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-55163 does not affect version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-http. already_fixed \u2014 The target Netty 4.1.130.Final repository already contains the complete MadeYouReset (CVE-2025-55163) mitigation. The Http2MaxRstFrameLimitEncoder defense class is present, integrated into the HTTP/2 connection handler builder, and enabled by default for servers with a threshold of 200 RST_STREAM frames per 30-second window. All protocol-error-triggered RST writes route through the protected en..." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:eaabbe63-1165-50ad-a02e-7d5413a6feaa", "id": "CVE-2026-33870", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33870 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:a0538fc0-7adb-5cb4-a48c-d471f55614de", "id": "CVE-2026-33871", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33871 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:3fd6bbce-952d-5a86-975a-c1fe17e32d7c", "id": "CVE-2026-41417", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41417 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:51ac631a-1add-5e00-b264-e19df0e8d716", "id": "CVE-2026-42578", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42578 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:23432c66-f7f1-53ec-bec9-89bbbd1d530d", "id": "CVE-2026-42579", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42579 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:7f567b3c-5129-563e-9394-783573d20952", "id": "CVE-2026-42580", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42580 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:6417f16b-227f-5072-9a84-2ee7d8b28bfc", "id": "CVE-2026-42581", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42581 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:7103ca13-81c8-5051-a329-a6b64e32d7a0", "id": "CVE-2026-42583", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42583 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:bfae2511-e8d5-532a-94e7-8cd1bd3eaaed", "id": "CVE-2026-42584", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42584 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:1f50cf71-5554-5d36-9e71-e464490e0a5c", "id": "CVE-2026-42585", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42585 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:e4c020e5-8ac4-5426-a4e8-d3ede6bed7c1", "id": "CVE-2026-42586", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42586 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:63f96927-c98d-5b97-b62f-234ebaba728b", "id": "CVE-2026-42587", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42587 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:754177e4-c968-5b94-a016-b88f2f754db9", "id": "CVE-2026-44248", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44248 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:e6c2976d-104b-5ee1-ab78-b040cceca3e5", "id": "CVE-2026-44249", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44249 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:d8eb289d-f88b-5ae9-975b-b06e6d0636ff", "id": "CVE-2026-44250", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44250 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:79400a85-99b6-527f-bf19-c010150cf7f3", "id": "CVE-2026-44890", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:ec44d66c-129e-5f2a-960e-a6432384eedb", "id": "CVE-2026-44891", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44891 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:c447e790-d254-5a95-b120-e1e4008cbd9c", "id": "CVE-2026-44893", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44893 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:f7a8f4b4-cd53-5b36-b9bc-c48824504e45", "id": "CVE-2026-45416", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45416 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:dc31bfd0-ea14-5583-a624-af28aaf7c93e", "id": "CVE-2026-45536", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45536 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:bb3a8979-e76b-5977-a8e3-38e11372c641", "id": "CVE-2026-45673", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45673 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:e022b9e8-56c3-5a5e-9ed5-35c4b238a283", "id": "CVE-2026-45674", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45674 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:d808f048-4a8d-536d-9fc1-8bb5b6b034e3", "id": "CVE-2026-46340", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-46340 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:f5878cbb-e84b-5499-b0de-91293a324418", "id": "CVE-2026-47244", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47244 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:f937fdcf-b25b-54b1-a6b7-73b63bc1fe84", "id": "CVE-2026-47691", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47691 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:448d66b6-5dcb-5a41-9b4e-7582a6e2d0e8", "id": "CVE-2026-48006", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-48006 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:e60a9410-135c-599a-aca2-0f9fa92b30a4", "id": "CVE-2026-48043", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48043 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:add5ef77-4395-5aa2-ab94-18b6a0c2b968", "id": "CVE-2026-48059", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48059 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:91184004-6c14-5648-9c88-04ae416c31c6", "id": "CVE-2026-50010", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50010 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:19ebeb05-d708-5264-9d45-7643aed66480", "id": "CVE-2026-50011", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-50011 does not affect version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-http. Patches already applied: bff98ee51b5d0b7ee25fd5005f2169f2a0467efa (already in target via d5b4e38845f5 'Backport CVE-2026-44890 to 4.1.130.Final')" }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:96d90971-49e0-5bcb-82b4-b382ac5485ef", "id": "CVE-2026-50020", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50020 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:0e67cb34-86b5-525d-9b12-cbdf6f0caf30", "id": "CVE-2026-50560", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:d37b3496-22e7-57ba-9822-55da27974fc2", "id": "CVE-2026-55831", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55831 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:71c03f84-9447-5564-af71-5595a6d36c68", "id": "CVE-2026-55833", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55833 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:c4fbe50e-172c-50e3-b656-20b4dbe3a359", "id": "CVE-2026-55851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55851 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:9dc8582e-3083-5735-8ccc-5540d2fb7884", "id": "CVE-2026-56745", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56745 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:c773069a-ffca-5a5e-9ed0-ac7fd003c3dc", "id": "CVE-2026-56746", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56746 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:1686d613-daa6-572a-999f-1e35db535549", "id": "CVE-2026-56817", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56817 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:7e89876c-bae9-5a35-8a70-5f31a76fbd89", "id": "CVE-2026-56818", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56818 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:dedf51a8-7514-556f-94e9-0a44441cd4ef", "id": "CVE-2026-56819", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56819 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:253b99dd-c3cb-50ab-8928-278708e56cd5", "id": "CVE-2026-56820", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56820 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:c0a16fdd-f7f0-5d9a-83b9-cfca49dd2dc2", "id": "CVE-2026-56821", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56821 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:d61770e0-eddc-5f0f-9b58-63f2b38a034f", "id": "CVE-2026-56822", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56822 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:f32508eb-369c-57a0-9090-3359c3e67172", "id": "CVE-2026-59898", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59898 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:f7879c8a-9683-51c8-922f-424ceefb58d7", "id": "CVE-2026-59899", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59899 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:ab089218-badf-573b-a0aa-a64193d0fdf0", "id": "CVE-2026-59900", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59900 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:6c651917-d177-51ad-a655-036219e90c41", "id": "CVE-2026-59901", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59901 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:7695ddbd-abbf-5eb8-8f3e-22a9356bf0eb", "id": "CVE-2026-59902", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59902 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:fa3efda5-8d93-54d9-a6ad-65f35661cb9c", "id": "CVE-2026-59903", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59903 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:66ff7cef-cfc2-5e05-a77c-36d549be2da3", "id": "CVE-2026-59919", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59919 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:57a52478-6ef9-5222-9739-24057d8f7432", "id": "CVE-2026-59920", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59920 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:88429bf7-5759-514c-aab5-9181fdad8a82", "id": "CVE-2026-59921", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59921 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:9a341545-1c3c-5d00-9fd5-51bfe2b9b2e9", "id": "CVE-2026-73507", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-73507 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:7265251f-de6f-5bf5-9ca4-00c90c7a12b7", "id": "CVE-2026-73508", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-73508 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:1abcfe4e-af34-5773-a917-f364c8f0aa8f", "id": "GHSA-mfg7-5gfp-c4w3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:1a4579c4-8e85-57fb-a43a-7a5e3ef44c28", "id": "GHSA-v74w-7mr3-4qg3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.1" } ] } ], "dependencies": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.1" } ] }