{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:a2422e1f-bc0e-5a64-b78a-aafb6893241c",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/io.netty/netty-codec-http@4.1.93.Final-tuxcare.3",
      "type": "library",
      "group": "io.netty",
      "name": "netty-codec-http",
      "version": "4.1.93.Final-tuxcare.3",
      "purl": "pkg:maven/io.netty/netty-codec-http@4.1.93.Final-tuxcare.3"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:7cc2799d-4df1-50b5-8ca7-1d604d0e01e0",
      "id": "CVE-2023-34462",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-34462 is fixed in version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2779c6f8-8fdf-50b8-874c-f405033073d6",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-44487 is fixed in version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c7623e59-e1b1-5000-8140-73b69f0e4bd1",
      "id": "CVE-2023-4586",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2023-4586 is a false positive for io.netty:netty-codec-http 4.1.93.Final-tuxcare.3."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7ef9a2cb-d287-5ff2-a855-0be783cf6e42",
      "id": "CVE-2024-29025",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-29025 is fixed in version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b56c2a42-d696-5b79-888c-9cb602ebd617",
      "id": "CVE-2024-47535",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-47535 is fixed in version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:323cdfe2-7379-53e2-8d1c-95f472a1bb51",
      "id": "CVE-2025-25193",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-25193 is fixed in version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:08b49d7c-0876-50bf-868c-cb29059ef320",
      "id": "CVE-2025-55163",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55163 is fixed in version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:be0bb390-2571-540a-86c7-189d4cb3bb61",
      "id": "CVE-2025-58056",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-58056 is fixed in version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:91b9f628-7c85-5e2e-8cde-ace7d8464348",
      "id": "CVE-2025-58057",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-58057 is fixed in version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:40b35de2-d2f7-52cb-aa86-8e8b8928b2c3",
      "id": "CVE-2025-59419",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-59419 is fixed in version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e158a792-ee19-5538-8411-635006a378fa",
      "id": "CVE-2025-67735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-67735 is fixed in version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:facd1498-fcb8-5a20-aa66-a4596313e500",
      "id": "CVE-2026-33870",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-33870 is fixed in version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e1ad71e2-d12f-5463-9afb-1a5463c6bd2c",
      "id": "CVE-2026-33871",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-33871 is fixed in version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0c060837-0677-568f-91ce-406fd9412bbb",
      "id": "CVE-2026-41417",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41417 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5e468e02-8617-58c4-9ce7-b349f413bc70",
      "id": "CVE-2026-42577",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42577 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6b70f31b-95db-5125-9bfb-4e3d7cff128c",
      "id": "CVE-2026-42578",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42578 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:467c25fc-d2f4-547b-8d49-9ce5a3074c19",
      "id": "CVE-2026-42579",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42579 is fixed in version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bf3a9b01-f99e-5483-bbe6-d82b99e565a5",
      "id": "CVE-2026-42580",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42580 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4fad2fb5-214c-5692-b271-db37f20f1251",
      "id": "CVE-2026-42581",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42581 is fixed in version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8a4002c7-d447-58ae-9441-b7bf1ba3113f",
      "id": "CVE-2026-42583",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42583 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3168848c-2352-59b4-af9c-a76ff26e9088",
      "id": "CVE-2026-42584",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42584 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1d4a6346-8dec-5262-9e77-e82c41e3575f",
      "id": "CVE-2026-42585",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42585 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:398759a1-6a4d-5ca8-a950-5fd12aa573a2",
      "id": "CVE-2026-42586",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42586 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b1d0b03a-41c9-51f3-87db-3df0606ab3d6",
      "id": "CVE-2026-42587",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42587 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:801f2de4-d4b7-50fb-a590-85a9157b6919",
      "id": "CVE-2026-44248",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44248 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:32fd79e9-b3a3-58fa-8014-01890dcf19c2",
      "id": "CVE-2026-44249",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44249 is fixed in version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:19dfb336-da13-5bd1-b858-514f0c9f3dcd",
      "id": "CVE-2026-44250",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44250 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:edd01190-00b6-5a7b-96e9-b67b889b0181",
      "id": "CVE-2026-44890",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f73dd50f-d1e2-5f66-8068-0d0e6a2a3d97",
      "id": "CVE-2026-44891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44891 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5729b604-74b2-57f4-87be-a60365c858a8",
      "id": "CVE-2026-44893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44893 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0b7d1ac8-05f6-5cc3-98cd-0dbed24030c3",
      "id": "CVE-2026-45416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45416 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:eab90c16-2345-5040-adf6-737f87ad328d",
      "id": "CVE-2026-45536",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45536 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2bd55327-c660-5543-b815-f41b07082080",
      "id": "CVE-2026-45673",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45673 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:474a57ba-2d2b-5e46-a024-410e042ca3e6",
      "id": "CVE-2026-45674",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-45674 is fixed in version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ff9d1b4f-e9fc-5a15-b3e1-92089adaf061",
      "id": "CVE-2026-46340",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-46340 is fixed in version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3fea8702-792d-5685-8efe-90a261e2097a",
      "id": "CVE-2026-47244",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47244 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1a9658ce-d70a-5b9e-b0cc-cd2f4b189f65",
      "id": "CVE-2026-47691",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47691 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:263c3ce0-0512-5914-9ed2-f2540c3e6b74",
      "id": "CVE-2026-48006",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48006 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f6c842b7-a141-5185-b50d-368f94407527",
      "id": "CVE-2026-48043",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-48043 is fixed in version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:047acde1-df45-59e8-ace1-29eec081bce0",
      "id": "CVE-2026-48059",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-48059 is fixed in version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5aed194e-ac40-5608-a3ee-c337ab234657",
      "id": "CVE-2026-50010",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50010 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4b8a58ea-a97b-5fc1-9550-2c18c6abd3c6",
      "id": "CVE-2026-50011",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50011 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:aa3e8638-767a-56f6-a6fd-ea23b794b9bc",
      "id": "CVE-2026-50020",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50020 is fixed in version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b86f35f3-8e58-54c8-af7a-3e7d8464f349",
      "id": "CVE-2026-50560",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1de1cb9f-45e9-5a72-9104-e3d80343c2ce",
      "id": "CVE-2026-55831",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55831 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:71810a06-13cc-5072-ba50-7104168ac976",
      "id": "CVE-2026-55833",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55833 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2103d004-f13d-5185-9fe5-2e2e57fd1a8c",
      "id": "CVE-2026-55851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55851 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c97621ca-c5c3-58e2-8dab-8465dc8b7359",
      "id": "CVE-2026-56745",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56745 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:529edab2-12a1-57c7-9b79-61144e82255f",
      "id": "CVE-2026-56746",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56746 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9e8e8ad4-1472-5265-9672-b1a87d6925dd",
      "id": "CVE-2026-56817",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56817 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4be5e37f-2f6b-5fda-8f9a-a06b998e590a",
      "id": "CVE-2026-56818",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-56818 does not affect version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-http. not_affected \u2014 Target version 4.1.93.Final does not contain the maxElements feature or associated code that CVE-2026-56818 describes. This CVE concerns missing cleanup when the maxElements limit check throws an exception (vs. proper cleanup in the maxNestedArrayDepth check). The maxElements feature was introduced by CVE-2026-48006's fix, which was only backported to 4.1.130.Final and later versions, not to 4...."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f44f0926-9278-56c2-bbbe-472499fc7211",
      "id": "CVE-2026-56819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56819 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9ef4e8d9-2f61-5149-b5cf-7ab9eb536541",
      "id": "CVE-2026-56820",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56820 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dbf14cfc-5847-5f6b-af9f-e43ec8158cf3",
      "id": "CVE-2026-56821",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56821 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cf07a0b4-a055-5863-83f8-f7295e1ea9ef",
      "id": "CVE-2026-56822",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56822 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:705d3615-be0f-5a24-8aa6-aea3bc3c5546",
      "id": "CVE-2026-59898",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59898 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:65ab00d2-0ec5-578e-8a0a-85f79f8d4fac",
      "id": "CVE-2026-59899",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59899 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f5837a6c-3038-5e5f-bf31-87e523a766c5",
      "id": "CVE-2026-59900",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59900 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3c4744dd-f6cd-511a-ab26-be5c2844cc90",
      "id": "CVE-2026-59901",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59901 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:511caacd-96ba-5615-a9d8-0c3f9455a57d",
      "id": "CVE-2026-59902",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59902 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ef86360d-233e-54ee-86aa-ed098ec51f91",
      "id": "CVE-2026-59903",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59903 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4eadd8b5-03b8-5154-96bc-a65761903263",
      "id": "CVE-2026-59919",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59919 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ea632132-efed-5129-9955-3b20f76796b8",
      "id": "CVE-2026-59920",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59920 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3039f93f-6104-5519-8a42-6f22ed70ae6a",
      "id": "CVE-2026-59921",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59921 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:996e3c05-5d71-5518-a995-d6bd1ddc9980",
      "id": "CVE-2026-73507",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-73507 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1f8fb612-4392-5015-a62e-44f9d4ca080d",
      "id": "CVE-2026-73508",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-73508 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:515d40bc-4171-5370-98ca-a6360b74001e",
      "id": "GHSA-mfg7-5gfp-c4w3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:09dec68f-2e3f-5329-b876-573961fb08dc",
      "id": "GHSA-v74w-7mr3-4qg3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f5e8601a-abb9-5c63-b377-6680db3efb00",
      "id": "GHSA-xpw8-rcwv-8f8p",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-xpw8-rcwv-8f8p affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-http."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http@4.1.93.Final-tuxcare.3"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.netty/netty-codec-http@4.1.93.Final-tuxcare.3"
    }
  ]
}