{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:40d739a7-11d4-5d3e-a99c-f0d285faddc0", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.2", "type": "library", "group": "io.netty", "name": "netty-codec-http", "version": "4.1.130.Final-tuxcare.2", "purl": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.2" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:04b13590-a0fc-5835-8efa-0f53ea292000", "id": "CVE-2025-55163", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-55163 does not affect version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-http. already_fixed \u2014 The target Netty 4.1.130.Final repository already contains the complete MadeYouReset (CVE-2025-55163) mitigation. The Http2MaxRstFrameLimitEncoder defense class is present, integrated into the HTTP/2 connection handler builder, and enabled by default for servers with a threshold of 200 RST_STREAM frames per 30-second window. All protocol-error-triggered RST writes route through the protected en..." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:973d1d99-6b79-568b-a7da-8eab03966838", "id": "CVE-2026-33870", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33870 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:653892bb-4453-5f78-9486-646b16f1bade", "id": "CVE-2026-33871", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33871 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:365b20c5-64e9-54b8-b60c-ebeb4b9fc57e", "id": "CVE-2026-41417", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41417 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:c859e162-af2a-53b8-8a54-f3fc761abcfc", "id": "CVE-2026-42578", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42578 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:802c3d65-c22d-5180-993a-8c23d968e90a", "id": "CVE-2026-42579", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42579 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:7da1dabf-f6e6-52c2-b6b3-13364fcf3932", "id": "CVE-2026-42580", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42580 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:1d62fa74-119c-598f-a3c6-c28f15af45d9", "id": "CVE-2026-42581", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42581 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:36b433d2-540b-5a9d-a976-fc56d9da4fb0", "id": "CVE-2026-42583", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42583 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:56eb2e69-35d8-5f56-811e-2ee1e427b28c", "id": "CVE-2026-42584", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42584 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:a1fe7bb0-edec-5f18-a6b5-7ec0206e0b06", "id": "CVE-2026-42585", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42585 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:257c805a-bf53-5c81-92ad-0f318163e9f9", "id": "CVE-2026-42586", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42586 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:9eb19fdc-32f3-5849-a091-736cf4b38e22", "id": "CVE-2026-42587", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42587 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:2a94ee47-dc75-5732-a9c2-92fcc5c65ed6", "id": "CVE-2026-44248", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44248 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:22245037-96ee-5cb7-ace3-a7d84a9e52ee", "id": "CVE-2026-44249", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44249 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:ce12bfb7-0aec-515b-91bf-c0f8b7a1010c", "id": "CVE-2026-44250", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44250 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:a497deff-98c4-531b-b053-ea0f6fb34273", "id": "CVE-2026-44890", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:1d73ef46-4ca7-51b2-9789-38bd1add8826", "id": "CVE-2026-44891", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44891 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:d6067e07-9c71-5c69-bcdd-ad7a99cba5fc", "id": "CVE-2026-44893", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44893 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:c3d5e181-8129-50bf-9916-ecb046fcefcb", "id": "CVE-2026-45416", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45416 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:b8a879f8-c534-5ac2-ab5e-10788f11a474", "id": "CVE-2026-45536", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45536 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:583dc9af-fa17-5794-b616-a7ffe319fa0c", "id": "CVE-2026-45673", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-45673 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:0a5137db-8b8b-5c27-a660-36423079eddb", "id": "CVE-2026-45674", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-45674 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:94568c59-01fc-5803-99ef-1f8f89b704bb", "id": "CVE-2026-46340", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46340 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:f6e94c14-d556-5cca-866d-f380bebceafd", "id": "CVE-2026-47244", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47244 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:1e024659-64e3-5501-8a12-40f7dfc397aa", "id": "CVE-2026-47691", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47691 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:358cb098-9135-52fd-963b-2f9edeca1072", "id": "CVE-2026-48006", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48006 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:38bf34fa-a42d-55c4-86e6-36a5474fdc0e", "id": "CVE-2026-48043", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48043 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:c41ac548-05ba-589a-964a-ef1a909592be", "id": "CVE-2026-48059", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48059 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:aa49dec8-60e8-5253-9fc2-7768829d81fa", "id": "CVE-2026-50010", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50010 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:fb160a05-af10-53fb-96af-294b2fe76111", "id": "CVE-2026-50011", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-50011 does not affect version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-http. Patches already applied: bff98ee51b5d0b7ee25fd5005f2169f2a0467efa (already in target via d5b4e38845f5 'Backport CVE-2026-44890 to 4.1.130.Final')" }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:8fabd871-1f1f-5929-a1c1-a1c500019373", "id": "CVE-2026-50020", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50020 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:b16928a5-0ffd-52ad-9af4-6a8519187f0e", "id": "CVE-2026-50560", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:f0a1bac6-cce8-5f5c-97d3-e72d5a0ebc9d", "id": "CVE-2026-55831", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55831 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:f6f6e9cb-c92e-53b0-b512-0ee656c464d1", "id": "CVE-2026-55833", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55833 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:e64a95f9-9980-5c0a-ad18-b527fd56c7cf", "id": "CVE-2026-55851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55851 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:a1bb37f0-866d-5da8-b6c7-f0619cc4759c", "id": "CVE-2026-56745", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56745 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:54adba03-8b4b-5bc6-ad47-c942e137a75a", "id": "CVE-2026-56746", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56746 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:bba4873d-ad7c-502f-9b4e-0c11c8f3d62a", "id": "CVE-2026-56817", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56817 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:5e56760c-b8b1-5141-b315-ba8a30d862d4", "id": "CVE-2026-56818", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56818 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:36802172-5fff-5f76-afb7-be3c7454f293", "id": "CVE-2026-56819", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56819 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:a3c7eb55-8039-5add-a180-279d5caad48e", "id": "CVE-2026-56820", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56820 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:cf9c05dd-cf07-5e06-bef5-70dba0ae81cb", "id": "CVE-2026-56821", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56821 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:11877d10-7828-5fcc-8163-a47acae7e43b", "id": "CVE-2026-56822", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56822 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:d30314b8-7724-5b94-9770-d267267874d2", "id": "CVE-2026-59898", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59898 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:2811cf7b-f587-5fc6-bb6f-5037440310e2", "id": "CVE-2026-59899", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59899 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:e0524dc1-9273-58d0-919b-3b080347b93c", "id": "CVE-2026-59900", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59900 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:2b0c56d2-2de9-563a-b589-cd392cb120f0", "id": "CVE-2026-59901", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59901 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:1ef9d921-e53c-5198-b8cd-57ccf09e3987", "id": "CVE-2026-59902", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59902 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:e4e4a127-b241-54ac-ad67-1f0b75b25154", "id": "CVE-2026-59903", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59903 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:d38dc347-316b-579b-90c3-c1baa6da5c4f", "id": "CVE-2026-59919", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59919 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:06510cea-9064-589f-abbb-d79854586fe1", "id": "CVE-2026-59920", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59920 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:b71db54a-1b69-536f-baa7-2ec2a526c538", "id": "CVE-2026-59921", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59921 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:ef0fe019-c8ae-53ec-a2fc-8c6715432e1f", "id": "CVE-2026-73507", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-73507 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:d83e9712-67d9-565d-b8d3-421ec0e9f94f", "id": "CVE-2026-73508", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-73508 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:9901b1cc-cbce-5654-885b-8036fc965c93", "id": "GHSA-mfg7-5gfp-c4w3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:da6e7325-03d9-5b9f-8de8-37706b4973db", "id": "GHSA-v74w-7mr3-4qg3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.2" } ] } ], "dependencies": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.2" } ] }