{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:b90497f4-22b0-5d41-bb58-25794992b17a", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.3", "type": "library", "group": "io.netty", "name": "netty-codec-http", "version": "4.1.130.Final-tuxcare.3", "purl": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.3" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:b7ddcba3-044d-5c51-982e-76e44d338377", "id": "CVE-2025-55163", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-55163 does not affect version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-http. already_fixed \u2014 The target Netty 4.1.130.Final repository already contains the complete MadeYouReset (CVE-2025-55163) mitigation. The Http2MaxRstFrameLimitEncoder defense class is present, integrated into the HTTP/2 connection handler builder, and enabled by default for servers with a threshold of 200 RST_STREAM frames per 30-second window. All protocol-error-triggered RST writes route through the protected en..." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:ebdf1ea6-394a-593f-9ef7-117f02452924", "id": "CVE-2026-33870", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33870 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:bdb9344f-1ced-5390-a60c-0a6ef2e2645a", "id": "CVE-2026-33871", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33871 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:ceffd2ef-222f-58a9-b0b2-b722b1e36dfe", "id": "CVE-2026-41417", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41417 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:391b90e6-638d-5f4d-9518-57371feabe96", "id": "CVE-2026-42578", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42578 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:7ae7d3c5-74cf-5dfa-9774-e462668f6cdb", "id": "CVE-2026-42579", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42579 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:5524e1e2-0d8f-551c-87ea-992f552bb581", "id": "CVE-2026-42580", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42580 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:85b01c53-6b2f-5b82-9996-c1b902bc21b4", "id": "CVE-2026-42581", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42581 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:c04f8de4-58af-5863-b892-e84a7e4de88e", "id": "CVE-2026-42583", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42583 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:aba6548b-9948-5edc-985e-c80a415d372b", "id": "CVE-2026-42584", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42584 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:49ad5f52-23a3-58df-8f6a-e9d3b3c75d14", "id": "CVE-2026-42585", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42585 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:2b839a70-b766-5598-a2e9-296df33ce526", "id": "CVE-2026-42586", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42586 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:e0f82530-1c94-57be-bbcf-126250ea1a44", "id": "CVE-2026-42587", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42587 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:e7f15315-928d-5b8e-9f6f-5b40aa0d162f", "id": "CVE-2026-44248", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44248 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:bda13bc3-9218-555f-be15-7be44d8c366e", "id": "CVE-2026-44249", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44249 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:547474dd-95ab-50e4-ac8f-56487731cc5d", "id": "CVE-2026-44250", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44250 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:76ede929-75fa-5f23-bbdc-92c479bbd891", "id": "CVE-2026-44890", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:29df7daf-3903-5827-8ac6-79e721b7bd7f", "id": "CVE-2026-44891", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44891 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:613a3477-08b4-5c7e-b307-a0a8b944e89b", "id": "CVE-2026-44893", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44893 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:ca746381-9154-5e7e-bc4a-e28af2e957de", "id": "CVE-2026-45416", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45416 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:afdea619-460a-5414-861f-f66064021fea", "id": "CVE-2026-45536", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45536 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:f64f3a9b-0a1d-5a66-8847-8018ff5b3e56", "id": "CVE-2026-45673", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-45673 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:99a54dc9-18ae-5107-9818-1a1a2f81c3fe", "id": "CVE-2026-45674", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-45674 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:66883385-413d-5599-b118-64699a8cbd52", "id": "CVE-2026-46340", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46340 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:afd1e646-a42b-5b35-831f-84f1d976e4f4", "id": "CVE-2026-47244", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47244 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:73e9eff7-00ac-527c-9877-cb9ef0c0d123", "id": "CVE-2026-47691", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47691 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:5a7417d8-1fbb-5e7d-a913-a5c320f5d762", "id": "CVE-2026-48006", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48006 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:1c4662b9-9d36-54d7-9de1-a900263ec282", "id": "CVE-2026-48043", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48043 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:354f2128-aa89-58f4-a99e-d38a40acf66c", "id": "CVE-2026-48059", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48059 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:ce1918ff-278b-56b1-a283-be196d25cbc9", "id": "CVE-2026-50010", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50010 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:a0d94552-01af-5127-81ec-fbca9b6fb08b", "id": "CVE-2026-50011", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-50011 does not affect version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-http. Patches already applied: bff98ee51b5d0b7ee25fd5005f2169f2a0467efa (already in target via d5b4e38845f5 'Backport CVE-2026-44890 to 4.1.130.Final')" }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:980002c0-b174-553f-814b-a0b89e94a298", "id": "CVE-2026-50020", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50020 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:0dd3b51d-8458-557b-87df-2218b928e12f", "id": "CVE-2026-50560", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:88c27c92-de76-58ec-b556-972f690cefe9", "id": "CVE-2026-55831", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-55831 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:43a15e5f-baf9-5820-be14-cbbe90be127f", "id": "CVE-2026-55833", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-55833 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:e877131f-6720-530c-b0a4-7cf522cedba2", "id": "CVE-2026-55851", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-55851 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:0ea32087-fe3d-57b6-9ff3-b1144f447448", "id": "CVE-2026-56745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56745 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:6cadd938-8150-5587-bc9b-48f52c3af83d", "id": "CVE-2026-56746", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56746 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:8d3f57e4-5b13-59b8-b812-600bc9f9885e", "id": "CVE-2026-56817", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56817 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:7b37ad4c-dd66-5e97-a13b-0c2440ff84b2", "id": "CVE-2026-56818", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56818 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:9e5d71ff-b64e-5c61-8e72-899edf717e8a", "id": "CVE-2026-56819", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56819 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:886520f7-a27a-5751-9ac2-deffc7f47abe", "id": "CVE-2026-56820", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56820 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:d764a94b-c549-5bd8-aafa-0e9f4d2f23d0", "id": "CVE-2026-56821", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56821 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:e090b967-0a9c-5176-b4e1-1d9afa384a13", "id": "CVE-2026-56822", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56822 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:a38e7c4c-963f-5765-a60f-1feaaac7c208", "id": "CVE-2026-59898", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59898 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:f70ac874-d122-5148-bf2b-896e25ca1294", "id": "CVE-2026-59899", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59899 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:af076b2d-fdab-5c48-be21-2ca67dd77b4f", "id": "CVE-2026-59900", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59900 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:e1007e30-61bd-5aa6-b27b-e85e19471397", "id": "CVE-2026-59901", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59901 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:6c4f4016-4ca7-51cb-9ddf-3bfcadfce7ad", "id": "CVE-2026-59902", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59902 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:c7577f96-0a92-5cd6-86ec-dd6980978db7", "id": "CVE-2026-59903", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59903 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:052e434b-6002-5b70-b754-be97f7613495", "id": "CVE-2026-59919", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59919 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:7d56e028-5eed-54ba-8a73-cff10a5d9cee", "id": "CVE-2026-59920", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59920 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:e28c5071-9ced-5669-8e58-1c7479e21ee7", "id": "CVE-2026-59921", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59921 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:94ee8b90-df6f-5ff2-a9be-c429925aa694", "id": "CVE-2026-73507", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-73507 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:ed288694-5876-5fa6-846d-ef519f83b799", "id": "CVE-2026-73508", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-73508 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:8b1bda3f-341b-5f30-8053-f743531464b7", "id": "GHSA-mfg7-5gfp-c4w3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:a1e4e367-4abc-5f61-97c2-b2a0859cf060", "id": "GHSA-v74w-7mr3-4qg3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.3" } ] } ], "dependencies": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.3" } ] }