{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:07805481-e4f7-576a-97d4-33e5dea3b351",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/io.netty/netty-codec-http@4.1.92.Final-tuxcare.5",
      "type": "library",
      "group": "io.netty",
      "name": "netty-codec-http",
      "version": "4.1.92.Final-tuxcare.5",
      "purl": "pkg:maven/io.netty/netty-codec-http@4.1.92.Final-tuxcare.5"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:f1b83064-d813-5ff3-b776-9c0de6f54c97",
      "id": "CVE-2023-34462",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-34462 is fixed in version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6612134a-2a54-521e-a494-6af5a710c9f7",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-44487 is fixed in version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:def625f7-9985-5ebb-83e8-f005ef972584",
      "id": "CVE-2023-4586",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2023-4586 is a false positive for io.netty:netty-codec-http 4.1.92.Final-tuxcare.5."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:79bc7cc0-ec7e-5837-9f90-8f7504506987",
      "id": "CVE-2024-29025",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-29025 is fixed in version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c4aab0dc-2ec9-5110-8685-41f947122c58",
      "id": "CVE-2024-47535",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-47535 is fixed in version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8bc72749-9f30-57ee-a170-64ec4eb45d26",
      "id": "CVE-2025-24970",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-24970 is fixed in version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:54128a1e-80d2-594b-ae2c-fedee9bb447f",
      "id": "CVE-2025-25193",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-25193 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b8ed7607-49b6-589c-878a-dcf6c0f28881",
      "id": "CVE-2025-55163",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55163 is fixed in version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4ca690ca-7833-563f-b535-b6d5dfa0b25d",
      "id": "CVE-2025-58056",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-58056 is fixed in version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b20ee262-d7fc-525f-b5ef-ed413ccb73c5",
      "id": "CVE-2025-58057",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58057 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:181272ee-93e0-5c3b-98bf-2afc9dcf87ab",
      "id": "CVE-2025-59419",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-59419 is fixed in version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7fa9e6eb-dc5c-593b-b292-f34dc27a195b",
      "id": "CVE-2025-67735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-67735 is fixed in version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6c0aa9db-e57b-50f0-9ae5-e1055bd6818c",
      "id": "CVE-2026-33870",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-33870 is fixed in version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:625ca70e-ab14-5055-af79-f200e43b73bc",
      "id": "CVE-2026-33871",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33871 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0a49cfdc-017c-5110-be8c-ab258d2cc403",
      "id": "CVE-2026-41417",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41417 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ff5b7da0-5433-50e4-ade1-46a0b209d228",
      "id": "CVE-2026-42577",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42577 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c7ca41e7-951c-5ab3-95eb-2b83b3d36b36",
      "id": "CVE-2026-42578",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42578 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0a251686-e4b1-5c3f-a877-c3185d4f4233",
      "id": "CVE-2026-42579",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42579 is fixed in version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cbef20a1-fefe-5c3e-8f82-b7c90887aee2",
      "id": "CVE-2026-42580",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42580 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:041aafde-7a6b-5d5e-962c-11619e95d398",
      "id": "CVE-2026-42581",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42581 is fixed in version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:03420800-8944-5fe9-99f2-dc78ffc4913f",
      "id": "CVE-2026-42583",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42583 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d16704e6-212c-5a16-8e23-c1be49ed09c8",
      "id": "CVE-2026-42584",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42584 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2ea9c3ef-7ae9-517f-8b94-344b81f1427e",
      "id": "CVE-2026-42585",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42585 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4cc4ac25-3776-5615-abc3-d840405f6cc8",
      "id": "CVE-2026-42586",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42586 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ffaa98a5-076b-5052-bb99-f3fc5d06e8c6",
      "id": "CVE-2026-42587",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42587 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d04eeabe-a2e8-55d7-afd9-c0e1aeb6da8a",
      "id": "CVE-2026-44248",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44248 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bafb69d2-6e0b-5004-95d0-e9e000cf7fdc",
      "id": "CVE-2026-44249",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44249 is fixed in version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dcf9b8ab-af79-5007-ae0d-55c977fd93f0",
      "id": "CVE-2026-44250",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44250 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0d9c5946-d4a2-56df-8268-d619cd757236",
      "id": "CVE-2026-44890",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:398381c2-8995-522f-a763-71c39ca42c52",
      "id": "CVE-2026-44891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44891 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b5869b56-0117-5603-9dcb-013f67514f27",
      "id": "CVE-2026-44893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44893 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4bbd27a8-7a0e-55b6-aefb-9ab4fd1fede4",
      "id": "CVE-2026-45416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45416 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:17951fb2-83b6-5cdf-abc5-265e61cf9b89",
      "id": "CVE-2026-45536",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45536 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:30d86089-0f47-54c3-b312-0dd253afcaaf",
      "id": "CVE-2026-45673",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45673 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:eb682fb4-80b9-5ed0-b0da-2c89435a13b5",
      "id": "CVE-2026-45674",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-45674 is fixed in version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:318ab978-5071-5bec-8374-c3e9a74bec4f",
      "id": "CVE-2026-46340",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-46340 is fixed in version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8d8ec555-81b2-5a17-ac76-c7d7e4be79a9",
      "id": "CVE-2026-47244",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47244 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:766f0d6d-ed91-59c1-8b22-3d2c79269250",
      "id": "CVE-2026-47691",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47691 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c1a1d8bb-0e94-544a-92c4-cc063aa35b32",
      "id": "CVE-2026-48006",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48006 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:650d182f-ac5d-505c-b73b-a934ff1dbeab",
      "id": "CVE-2026-48043",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-48043 does not affect version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec-http. not_affected \u2014 The target repository (Netty 4.1.92.Final-tuxcare.3) is not affected by CVE-2026-48043. The vulnerability exists in a newer architectural pattern (ChannelInboundHandlerAdapter-based decompression handling) that was introduced after version 4.1.92. The target uses an older architecture that processes HTTP/2 decompression directly in the onDataRead() method with existing try-finally protection."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fee6931e-e6e2-56f4-af2c-e505f58626ed",
      "id": "CVE-2026-48059",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48059 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0c718c6d-7f51-5035-aa05-11f17f8ba832",
      "id": "CVE-2026-50010",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50010 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:15509745-2046-5e04-b96d-8141a2557f42",
      "id": "CVE-2026-50011",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50011 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c7b9d08d-7781-59f2-94d1-428cecd1e4ea",
      "id": "CVE-2026-50020",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50020 is fixed in version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5d6f6798-ec84-5443-8607-d05c757bcf44",
      "id": "CVE-2026-50560",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c935578b-31b2-5c05-a346-9d1db2ac441b",
      "id": "CVE-2026-55831",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55831 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:37a9d5ef-dbac-5fd5-ae4c-f4ef5b43cbd4",
      "id": "CVE-2026-55833",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55833 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:75ef6de0-afff-50ae-aa50-7a4f97819f45",
      "id": "CVE-2026-55851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55851 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1f7bd5ee-c4a5-516f-8a3c-659df1a6b308",
      "id": "CVE-2026-56745",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56745 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:46c752e6-e62e-5f48-a0cb-909b2464ef23",
      "id": "CVE-2026-56746",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56746 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:507dcfcb-4a91-5115-bd55-75b6d4b6b965",
      "id": "CVE-2026-56817",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56817 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:903ff4b1-a048-5dce-9238-0aed49f827d5",
      "id": "CVE-2026-56818",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56818 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:82d159db-46f8-5b2f-b8fb-e18ae04f4ddf",
      "id": "CVE-2026-56819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56819 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:851b0373-ba8b-56c2-9b09-735666ba6a8e",
      "id": "CVE-2026-56820",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56820 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:892e68f1-6621-548c-b08e-2c12d3e37022",
      "id": "CVE-2026-56821",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56821 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2e488162-626c-5008-8c56-3e7f717a11b6",
      "id": "CVE-2026-56822",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56822 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9fd7bcc0-bbd8-56c6-b704-e7114a99ce13",
      "id": "CVE-2026-59898",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59898 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:028b8136-ec43-53af-b681-9a96d6824e8a",
      "id": "CVE-2026-59899",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59899 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a73ace0d-28ea-5ad8-831f-6933aac3d4d0",
      "id": "CVE-2026-59900",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59900 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d918d189-fae2-52a6-9293-f02d70c93ba3",
      "id": "CVE-2026-59901",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59901 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3d555a37-669e-536f-a0e7-f03ae29dc7f9",
      "id": "CVE-2026-59902",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59902 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6e7a3569-0b89-54ec-b637-b8e371ddc454",
      "id": "CVE-2026-59903",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59903 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f8efec75-90c4-5d35-b363-83741db518fe",
      "id": "CVE-2026-59919",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59919 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:37dd8f35-2cf2-57af-824f-edf3fe1d4770",
      "id": "CVE-2026-59920",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59920 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:42400a17-63c1-5a0c-8250-52aa7daf086d",
      "id": "CVE-2026-59921",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59921 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:440512dc-f3e4-5676-b4eb-406f9d1a6822",
      "id": "CVE-2026-73507",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-73507 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c11297b8-e317-578c-8223-26c406a3e643",
      "id": "CVE-2026-73508",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-73508 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6b41854e-3ec6-5091-8844-dd6073a25538",
      "id": "GHSA-mfg7-5gfp-c4w3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:271325b2-e0be-5537-84f0-161de597d398",
      "id": "GHSA-v74w-7mr3-4qg3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ddf14881-4ceb-5780-b690-449184808d25",
      "id": "GHSA-xpw8-rcwv-8f8p",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability GHSA-xpw8-rcwv-8f8p does not affect version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec-http. The version is not vulnerable. [terminalized not_affected from patch_application_manual/not_vulnerable]"
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.92.Final-tuxcare.5"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.netty/netty-codec-http@4.1.92.Final-tuxcare.5"
    }
  ]
}