{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:c3085194-da77-5d17-91bb-faf893dd8c25",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/io.netty/netty-codec-http@4.1.82.Final-tuxcare.7",
      "type": "library",
      "group": "io.netty",
      "name": "netty-codec-http",
      "version": "4.1.82.Final-tuxcare.7",
      "purl": "pkg:maven/io.netty/netty-codec-http@4.1.82.Final-tuxcare.7"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:07dddc0c-0b94-5c3f-87e5-8004b63c65b1",
      "id": "CVE-2022-41881",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-41881 is fixed in version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:48eab46a-197e-585a-ad49-4248df6fc5d9",
      "id": "CVE-2022-41915",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-41915 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5e03ba9a-0dc4-5663-8a95-f4b5abbbb318",
      "id": "CVE-2023-34462",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-34462 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bab2ee63-73ae-5a7b-b3ad-4130d2a71816",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-44487 is fixed in version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bcb81e29-ad50-5a08-a0a5-1424ac8b281b",
      "id": "CVE-2023-4586",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2023-4586 is a false positive for io.netty:netty-codec-http 4.1.82.Final-tuxcare.7."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9faf1feb-14bc-5d34-946c-32a49a3fa5f8",
      "id": "CVE-2024-29025",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-29025 is fixed in version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:137807d0-8c41-5f83-a78f-67634afca038",
      "id": "CVE-2024-47535",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-47535 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9edfb026-8bda-5b41-a697-39151df34f9a",
      "id": "CVE-2025-24970",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-24970 is fixed in version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:809c0a8a-873c-55d2-925b-fa8cfb54bc8b",
      "id": "CVE-2025-25193",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-25193 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3efb8478-b8eb-559c-a227-c6fb79bb9e7c",
      "id": "CVE-2025-55163",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55163 is fixed in version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:549b25da-c289-5709-8685-d4d5abb6ac7f",
      "id": "CVE-2025-58056",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58056 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0d512c56-640b-53c8-8b98-50483190fb93",
      "id": "CVE-2025-58057",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-58057 is fixed in version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1a51c195-98b3-5a87-be6f-84334ffa3bf4",
      "id": "CVE-2025-59419",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-59419 is fixed in version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:02b6fd34-05b1-58e7-8256-7eb2bdcb5b0b",
      "id": "CVE-2025-67735",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-67735 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b3ab57d3-6cb4-5c9b-8f46-19ba033b9e6c",
      "id": "CVE-2026-33870",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33870 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e378c19c-ef92-598e-ae7e-ba201eea2902",
      "id": "CVE-2026-33871",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33871 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d7069469-8f86-5492-ae85-4e212ee9f262",
      "id": "CVE-2026-41417",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41417 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0bea1b06-3c0b-5da4-b095-85b54ab14f30",
      "id": "CVE-2026-42577",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42577 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4cd70621-9641-5062-8780-6debd4fac3aa",
      "id": "CVE-2026-42578",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42578 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4a6b6511-51ac-5aac-ae05-a3b8683e60b3",
      "id": "CVE-2026-42579",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42579 is fixed in version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d30ec4ea-63f9-5702-bbb2-0161921fb28c",
      "id": "CVE-2026-42580",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42580 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1c30e3e9-00fd-5d2b-b865-49f912f776c4",
      "id": "CVE-2026-42581",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42581 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:aa9ea3c5-3ffa-5910-94d1-34b5f6083702",
      "id": "CVE-2026-42583",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42583 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a42b5f4e-8f45-54d5-a18a-1f7ec329c6fa",
      "id": "CVE-2026-42584",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42584 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:367a1f9c-17b6-53f0-a556-3518ff528983",
      "id": "CVE-2026-42585",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42585 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:215b3b81-e25b-514f-8efc-b673bfd2b639",
      "id": "CVE-2026-42586",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42586 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:397045b4-2425-58ac-a3fc-69491ca09f19",
      "id": "CVE-2026-42587",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42587 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:05f47d0f-3c4b-5b6c-b498-1d8f6da13dcb",
      "id": "CVE-2026-44248",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44248 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e5b936e4-bc91-58db-b905-3d8553783718",
      "id": "CVE-2026-44249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44249 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ce641eaf-96cb-5764-bc6c-fcbb39c8fdc4",
      "id": "CVE-2026-44250",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44250 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f4636f18-e8e4-5f00-abc4-81112ff18b47",
      "id": "CVE-2026-44890",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dcb876bf-c8eb-5469-8c1d-76c445022984",
      "id": "CVE-2026-44891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44891 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2d697227-2b13-5774-a8d1-4b6f2d7a8b5c",
      "id": "CVE-2026-44893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44893 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:429379f2-c16b-5bbe-b79a-057eda4f98cb",
      "id": "CVE-2026-45416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45416 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:18ac10be-8188-5cbb-9089-df3a0e1262e7",
      "id": "CVE-2026-45536",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45536 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:98eccaaa-8b24-5a49-8d90-e85758ec9a7c",
      "id": "CVE-2026-45673",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45673 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a71ff9b2-8e4a-57b3-84fc-55da254f7d88",
      "id": "CVE-2026-45674",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-45674 is fixed in version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:de180320-6659-544b-85a6-6e20ee12b9c7",
      "id": "CVE-2026-46340",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-46340 is fixed in version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c902878c-9352-5663-a8ec-6b4c63b1b0e2",
      "id": "CVE-2026-47244",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47244 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2f57a60e-1da6-5d61-8d73-e4840f8497a7",
      "id": "CVE-2026-47691",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47691 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:812f810c-0b63-5dc3-8a0c-631d210d12cc",
      "id": "CVE-2026-48006",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48006 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a3431434-8c28-507b-aef2-1c956c98733e",
      "id": "CVE-2026-48043",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-48043 is fixed in version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1d8e2980-9e21-5f04-aa47-25f488277b03",
      "id": "CVE-2026-48059",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48059 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:30d29e01-9d9b-51a2-8689-03326c44d303",
      "id": "CVE-2026-50010",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50010 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3d13150c-eb97-55af-b556-685e8184c50f",
      "id": "CVE-2026-50011",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50011 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f8203853-d8ae-57b0-83c0-e76300182b27",
      "id": "CVE-2026-50020",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50020 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:07180292-8ab6-5262-902d-5724746f90fa",
      "id": "CVE-2026-50560",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:956bc997-fb85-52e9-9eb7-c789e930557b",
      "id": "CVE-2026-55831",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55831 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9fcbb223-6780-541b-ba30-90c4b8089f0f",
      "id": "CVE-2026-55833",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55833 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:81fcc895-38a9-57c2-92f7-58242ae028e6",
      "id": "CVE-2026-55851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55851 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:002d97ff-14df-51a4-99a3-208aa6a3b177",
      "id": "CVE-2026-56745",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56745 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7688b909-3e71-5ad6-b912-b09c9936f12e",
      "id": "CVE-2026-56746",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56746 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5a472623-c2f2-5809-83a3-739e8d3bb7b2",
      "id": "CVE-2026-56817",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56817 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a53b8a50-219d-52ff-b888-738c8c183e1f",
      "id": "CVE-2026-56818",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-56818 does not affect version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-http. not_affected \u2014 Version 4.1.82.Final is not affected by CVE-2026-56818. The vulnerability exists in the maxElements limit check that was introduced in version 4.1.135.Final (commit e51c64c964). Version 4.1.82.Final predates this security feature entirely - it has no maxElements configuration, no maxElements validation check, and therefore cannot exhibit the vulnerable pattern described in the CVE (throwing wit..."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a5d30cec-4c6f-5cfc-8cf3-9e9d1ce82343",
      "id": "CVE-2026-56819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56819 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:57a7dcb3-8289-59fc-86dc-6edbcde895f0",
      "id": "CVE-2026-59898",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59898 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d3f65ba5-86ba-5135-be2d-80626b52dfd3",
      "id": "CVE-2026-59899",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59899 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0e6b0c1f-707c-5b9c-9e80-26ed939715d3",
      "id": "CVE-2026-59900",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59900 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4b819242-e4e6-54e4-b53a-7d61bd33ab2e",
      "id": "CVE-2026-59901",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59901 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:028a806f-db29-5c39-93ea-675551456470",
      "id": "CVE-2026-59902",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59902 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:741c0dec-1d12-5923-94c5-cf1e619a3bb5",
      "id": "CVE-2026-59903",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59903 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4262488e-cfb5-5aca-80e5-2ca44beb7802",
      "id": "CVE-2026-59919",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59919 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:70534cda-3b1f-5c7e-a54d-c61f0abb2b14",
      "id": "CVE-2026-59920",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59920 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:546ddb4d-33c1-5ed4-acdf-d54b42056846",
      "id": "CVE-2026-59921",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59921 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f613453c-8b3e-58f0-963f-96657176c260",
      "id": "CVE-2026-73507",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-73507 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6049e4b3-83d5-5ea0-8d8e-c358ae5f7ff2",
      "id": "CVE-2026-73508",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-73508 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:737ab142-4d12-5e28-92a6-bac0002ab79f",
      "id": "GHSA-mfg7-5gfp-c4w3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e035dc45-6563-5dc4-993c-c76337fb0046",
      "id": "GHSA-v74w-7mr3-4qg3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3ea8da1c-2206-53f7-a46c-f574752b9765",
      "id": "GHSA-xpw8-rcwv-8f8p",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-xpw8-rcwv-8f8p is fixed in version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.82.Final-tuxcare.7"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.netty/netty-codec-http@4.1.82.Final-tuxcare.7"
    }
  ]
}