{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:8c273d4e-4ccf-5a5d-8215-8c137fc87d6a", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.4", "type": "library", "group": "io.netty", "name": "netty-codec-http", "version": "4.1.130.Final-tuxcare.4", "purl": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.4" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:4714a388-38e4-5095-8ef5-7f40fdfd829a", "id": "CVE-2025-55163", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-55163 does not affect version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-http. already_fixed \u2014 The target Netty 4.1.130.Final repository already contains the complete MadeYouReset (CVE-2025-55163) mitigation. The Http2MaxRstFrameLimitEncoder defense class is present, integrated into the HTTP/2 connection handler builder, and enabled by default for servers with a threshold of 200 RST_STREAM frames per 30-second window. All protocol-error-triggered RST writes route through the protected en..." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:cbcf4ced-1d73-59ce-9ece-0ba4727162fe", "id": "CVE-2026-33870", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33870 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:446b72dd-ca61-5d5d-841b-daa4b4de511f", "id": "CVE-2026-33871", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33871 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:3d028544-fda4-5f35-b907-f4e625fa1dab", "id": "CVE-2026-41417", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41417 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:1a3e4ed6-b261-598c-82cf-0672b876ece1", "id": "CVE-2026-42578", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42578 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:856a517f-b2b9-5061-a09f-f7bff171acb1", "id": "CVE-2026-42579", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42579 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:f4559e75-887b-5439-8d8c-1466a015efa0", "id": "CVE-2026-42580", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42580 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:65a45f9f-8ac4-57b9-b501-8379d9b4104c", "id": "CVE-2026-42581", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42581 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:b38395f0-7415-5ea3-94a4-b232e2fec9cd", "id": "CVE-2026-42583", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42583 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:776f7bda-0ee6-58ca-8163-e840f984ce24", "id": "CVE-2026-42584", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42584 affects version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:4ad08628-42a2-50c3-87d5-c44ebef50421", "id": "CVE-2026-42585", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42585 affects version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:ad5bbe33-4524-5e7d-9e7b-1be288b092b2", "id": "CVE-2026-42586", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42586 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:5cc22d8a-0de7-5ad3-90d3-17900e9034a3", "id": "CVE-2026-42587", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42587 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:e1375e7d-9f28-581c-a28c-b7263fbb6f09", "id": "CVE-2026-44248", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44248 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:af146f66-7816-567b-aca6-ba6182f7fb39", "id": "CVE-2026-44249", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44249 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:cf6d632b-8fdd-5afe-8744-f4af9a64aafc", "id": "CVE-2026-44250", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44250 affects version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:d36b0958-08ce-570f-9851-58a8f02ea804", "id": "CVE-2026-44890", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:77231c49-d60e-595b-b39d-bed2a7c4eec1", "id": "CVE-2026-44891", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44891 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:0937191b-7ba3-5d9b-ade9-0d2f594892ef", "id": "CVE-2026-44893", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44893 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:9570ff28-1cc6-5671-bfb1-51a8a212464c", "id": "CVE-2026-45416", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-45416 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:b3414383-08aa-5771-97e7-e2586e313dab", "id": "CVE-2026-45536", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-45536 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:f7409245-4a09-54c2-b5b3-2734925383e0", "id": "CVE-2026-45673", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-45673 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:6302382f-ccae-578f-93ea-908c53eab9c6", "id": "CVE-2026-45674", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-45674 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:53faa781-ee23-528e-85b5-a5b2ebd74308", "id": "CVE-2026-46340", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46340 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:4554d5fa-607e-51b7-b7fe-11a9502de80a", "id": "CVE-2026-47244", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47244 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:9920c766-acb0-597b-80cf-94308194d705", "id": "CVE-2026-47691", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47691 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:b7e6b9d0-d361-5dc9-aad6-ea98525e1e2f", "id": "CVE-2026-48006", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48006 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:95448342-f1a2-5030-8e83-73799b4e299c", "id": "CVE-2026-48043", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48043 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:c26edb0c-65aa-5c6a-93f8-e8d1ea2af807", "id": "CVE-2026-48059", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48059 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:a945fa62-e2a3-5441-80e5-7616f8d98545", "id": "CVE-2026-50010", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50010 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:9a9ea837-c345-5fd8-b293-09fedaf52a9c", "id": "CVE-2026-50011", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-50011 does not affect version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-http. Patches already applied: bff98ee51b5d0b7ee25fd5005f2169f2a0467efa (already in target via d5b4e38845f5 'Backport CVE-2026-44890 to 4.1.130.Final')" }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:0b1e0b2e-43ec-5c2a-9e56-f200e12cbc32", "id": "CVE-2026-50020", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50020 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:f3d9014e-081e-5121-bec2-a2e8341da561", "id": "CVE-2026-50560", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:e05ac61f-5824-5a52-be40-dc1a41252a0e", "id": "CVE-2026-55831", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-55831 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:923a28f2-5ca6-5f10-969b-24da5128fe40", "id": "CVE-2026-55833", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-55833 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:ad731f29-c42e-568a-ac37-b63169962d3f", "id": "CVE-2026-55851", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-55851 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:c5643e09-d0d6-562c-82bf-b6d06d480045", "id": "CVE-2026-56745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56745 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:f143e64b-e62d-5a10-9e13-7fa01152322c", "id": "CVE-2026-56746", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56746 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:3d8b687e-40ed-572c-9ecc-178eaf96913c", "id": "CVE-2026-56817", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56817 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:174703a1-6ebc-573b-9f4a-d1359a2476b8", "id": "CVE-2026-56818", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56818 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:2375119d-e4d3-52d5-84ba-16cb2960786f", "id": "CVE-2026-56819", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56819 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:fd9fa0ca-f179-541e-8459-4ffbfc33a9a4", "id": "CVE-2026-56820", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56820 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:08c658bf-149b-57c0-b4cd-538bdc1867c8", "id": "CVE-2026-56821", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56821 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:1affde04-0a63-5b78-9680-e712daf04bbd", "id": "CVE-2026-56822", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56822 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:f158e33c-39ab-5916-9226-cffa41ad5bec", "id": "CVE-2026-59898", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59898 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:02e7cdcf-9731-53ee-8fcb-d1024f2ca386", "id": "CVE-2026-59899", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59899 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:01e8089d-aaa5-5146-bf57-58c8052696df", "id": "CVE-2026-59900", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59900 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:e8b1a000-1ed9-570e-b937-3585bc206d1e", "id": "CVE-2026-59901", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59901 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:25dffad8-59c4-5685-a92c-c48860c71189", "id": "CVE-2026-59902", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59902 affects version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:6581bf54-25ad-541e-ae35-185a91cb2a10", "id": "CVE-2026-59903", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59903 affects version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:5ada30b0-f290-55a4-9ae2-1415a29c2d74", "id": "CVE-2026-59919", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59919 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:ae418797-a41c-54b3-acc2-d00f85942fd6", "id": "CVE-2026-59920", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59920 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:e100bf5f-c02b-5730-9583-82bdbcdc27aa", "id": "CVE-2026-59921", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59921 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:626be5d1-9932-5d2e-8c93-5f1c6989b0e6", "id": "CVE-2026-73507", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-73507 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:e28b4748-81bd-5723-8b0a-c407dc353e50", "id": "CVE-2026-73508", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-73508 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:1cd5474b-4fc3-52fa-8978-1b700538a2b3", "id": "GHSA-mfg7-5gfp-c4w3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:38e69b5e-e745-5bf0-98f5-cc5f1f556898", "id": "GHSA-v74w-7mr3-4qg3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-http." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.4" } ] } ], "dependencies": [ { "ref": "pkg:maven/io.netty/netty-codec-http@4.1.130.Final-tuxcare.4" } ] }