{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:b4948785-f1ba-5771-b750-d473a3232abd", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/io.netty/netty-codec-http2@4.1.108.Final-tuxcare.1", "type": "library", "group": "io.netty", "name": "netty-codec-http2", "version": "4.1.108.Final-tuxcare.1", "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.108.Final-tuxcare.1" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:ece26b15-f68f-53ea-a8b7-f4430e040f1f", "id": "CVE-2024-47535", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-47535 is fixed in version 4.1.108.Final-tuxcare.1 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.108.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:566748c8-7315-5b99-bfcd-6d5dfe03bbd3", "id": "CVE-2025-24970", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-24970 affects version 4.1.108.Final-tuxcare.1 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.108.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:21a9d5d9-1b19-5e20-b261-0c7b813ca79c", "id": "CVE-2025-25193", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-25193 is fixed in version 4.1.108.Final-tuxcare.1 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.108.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:31831d57-4cb9-535b-803b-9d975d9bc827", "id": "CVE-2025-55163", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55163 is fixed in version 4.1.108.Final-tuxcare.1 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.108.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:09392fcb-14fd-5fd9-808c-80fe3a976b68", "id": "CVE-2025-58056", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-58056 is fixed in version 4.1.108.Final-tuxcare.1 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.108.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:f919e99a-bc5d-5b3e-a255-cd1a50445c8d", "id": "CVE-2025-58057", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-58057 is fixed in version 4.1.108.Final-tuxcare.1 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.108.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:43a03b3d-aa63-5712-b981-15ba0eda63dd", "id": "CVE-2025-59419", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59419 is fixed in version 4.1.108.Final-tuxcare.1 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.108.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:68fabaa7-bcd3-5cdf-9221-5c0c9bbc29b1", "id": "CVE-2025-67735", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-67735 is fixed in version 4.1.108.Final-tuxcare.1 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.108.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:5c5b13b0-103c-5c9a-9710-057204f41cec", "id": "CVE-2026-33870", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33870 is fixed in version 4.1.108.Final-tuxcare.1 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.108.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:c6a642b5-95e1-5620-a2ea-a52dade1e3ed", "id": "CVE-2026-33871", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33871 is fixed in version 4.1.108.Final-tuxcare.1 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.108.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:69b1546c-c251-56af-8571-15c04e5d76b4", "id": "CVE-2026-41417", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41417 is fixed in version 4.1.108.Final-tuxcare.1 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.108.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:ad3bbb3d-0dea-5877-86af-10d3f19a99d6", "id": "CVE-2026-42578", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42578 is fixed in version 4.1.108.Final-tuxcare.1 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.108.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:a5648515-6800-5799-bc8b-13467854b3a0", "id": "CVE-2026-42579", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42579 is fixed in version 4.1.108.Final-tuxcare.1 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.108.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:f1c28234-d393-53f4-90e0-2212dde4b133", "id": "CVE-2026-42580", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42580 is fixed in version 4.1.108.Final-tuxcare.1 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.108.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:10053e26-7bc9-5579-ad91-438a62d6c23f", "id": "CVE-2026-42581", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42581 is fixed in version 4.1.108.Final-tuxcare.1 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.108.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:4687ed9c-47ae-5d22-b2a4-bb286454e1dd", "id": "CVE-2026-42583", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42583 is fixed in version 4.1.108.Final-tuxcare.1 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.108.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:521fede8-f2c0-5faf-b64c-163617050a93", "id": "CVE-2026-42584", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42584 is fixed in version 4.1.108.Final-tuxcare.1 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.108.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:ac6d0b48-2f67-5a65-916e-8b58cd888a12", "id": "CVE-2026-42585", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42585 is fixed in version 4.1.108.Final-tuxcare.1 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.108.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:56922ed8-2761-5235-a33e-7e5a60e46110", "id": "CVE-2026-42586", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42586 is fixed in version 4.1.108.Final-tuxcare.1 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.108.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:d67d9aff-de6e-5f8b-afcf-c878a78bd584", "id": "CVE-2026-42587", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42587 is fixed in version 4.1.108.Final-tuxcare.1 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.108.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:73bcd672-5573-5127-82ae-1e1ea81f52f8", "id": "CVE-2026-44248", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44248 is fixed in version 4.1.108.Final-tuxcare.1 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.108.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:cb40cd86-167c-52c7-a859-9959852e729d", "id": "CVE-2026-44249", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44249 is fixed in version 4.1.108.Final-tuxcare.1 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.108.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:0cf78f82-0e85-5ada-b2c9-b669148c6524", "id": "CVE-2026-44250", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44250 is fixed in version 4.1.108.Final-tuxcare.1 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.108.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:5f73d937-57b8-5969-8b72-1557d7775c69", "id": "CVE-2026-44890", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.108.Final-tuxcare.1 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.108.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:f14be3a3-cda7-5a30-af40-98b7699c0922", "id": "CVE-2026-44891", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44891 is fixed in version 4.1.108.Final-tuxcare.1 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.108.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:704bbe39-99c0-5d72-9f7d-4b283fa6c1b0", "id": "CVE-2026-44893", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44893 is fixed in version 4.1.108.Final-tuxcare.1 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.108.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:e2717463-69f3-52d3-bad7-c97d682b4cbb", "id": "CVE-2026-45416", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-45416 is fixed in version 4.1.108.Final-tuxcare.1 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.108.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:a658a410-6331-5725-8d61-c98e19ad01c4", "id": "CVE-2026-45536", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-45536 is fixed in version 4.1.108.Final-tuxcare.1 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.108.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:3de715d3-5ef9-5ffd-aa4f-4f6e9c5cffab", "id": "CVE-2026-45673", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-45673 is fixed in version 4.1.108.Final-tuxcare.1 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.108.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:f51bdd01-910b-50a9-ada5-9e05c8035622", "id": "CVE-2026-45674", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-45674 is fixed in version 4.1.108.Final-tuxcare.1 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.108.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:d3d34170-a431-520b-b04b-d48a54bf0b12", "id": "CVE-2026-46340", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46340 is fixed in version 4.1.108.Final-tuxcare.1 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.108.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:e23c17d8-a7a4-558d-87b3-c69efecee63d", "id": "CVE-2026-47244", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47244 is fixed in version 4.1.108.Final-tuxcare.1 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.108.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:8a8a8292-09ce-5a6d-85f2-e0aeb75aab4b", "id": "CVE-2026-47691", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47691 is fixed in version 4.1.108.Final-tuxcare.1 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.108.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:737be4e7-fb12-5dd7-a8e2-3efe6596134c", "id": "CVE-2026-48006", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48006 is fixed in version 4.1.108.Final-tuxcare.1 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.108.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:b8dfa79f-8227-51fc-b577-1b991a52fa44", "id": "CVE-2026-48043", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48043 is fixed in version 4.1.108.Final-tuxcare.1 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.108.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:d2e0497d-c863-573a-b4ff-584ac531211d", "id": "CVE-2026-48059", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48059 is fixed in version 4.1.108.Final-tuxcare.1 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.108.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:70e8cc5e-0aaa-57cf-8e02-90f573988d26", "id": "CVE-2026-50010", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50010 is fixed in version 4.1.108.Final-tuxcare.1 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.108.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:c39b0916-e794-5a28-a712-bfdf17dd23b7", "id": "CVE-2026-50011", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50011 is fixed in version 4.1.108.Final-tuxcare.1 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.108.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:2fd339ec-634e-52e4-a669-101ba7b631bc", "id": "CVE-2026-50020", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50020 is fixed in version 4.1.108.Final-tuxcare.1 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.108.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:b7f940f8-f241-5000-a4b6-7201de1d3982", "id": "CVE-2026-50560", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.108.Final-tuxcare.1 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.108.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:991a52fb-6f79-5769-9d86-c11db983c974", "id": "CVE-2026-55831", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-55831 is fixed in version 4.1.108.Final-tuxcare.1 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.108.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:652e31e2-5c32-5f4d-874d-9f23fa3c1bad", "id": "CVE-2026-55833", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-55833 is fixed in version 4.1.108.Final-tuxcare.1 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.108.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:30e16b11-dabd-52a1-a98a-94b56f176d7d", "id": "CVE-2026-55851", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-55851 is fixed in version 4.1.108.Final-tuxcare.1 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.108.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:6ac9e9e9-9252-5fef-88c1-6c117593bc27", "id": "CVE-2026-56745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56745 is fixed in version 4.1.108.Final-tuxcare.1 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.108.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:dbbda1bf-ddcd-5a3a-bf38-521acd6063c3", "id": "CVE-2026-56746", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56746 is fixed in version 4.1.108.Final-tuxcare.1 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.108.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:40501873-ab83-5a9c-a1c7-652d5b945cf7", "id": "CVE-2026-56817", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56817 is fixed in version 4.1.108.Final-tuxcare.1 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.108.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:926e82b0-755c-55e4-9c74-341be65cc373", "id": "CVE-2026-56818", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56818 is fixed in version 4.1.108.Final-tuxcare.1 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.108.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:1902b3fd-f1e9-5224-833c-23f11b8430c1", "id": "CVE-2026-56819", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56819 is fixed in version 4.1.108.Final-tuxcare.1 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.108.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:09d92438-455a-5b7d-88ed-5745b580bc30", "id": "CVE-2026-56820", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56820 is fixed in version 4.1.108.Final-tuxcare.1 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.108.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:da4bb0cb-66d9-5e76-8d0c-c93b349de166", "id": "CVE-2026-56821", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56821 is fixed in version 4.1.108.Final-tuxcare.1 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.108.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:45259fc3-e724-5dfc-9794-ff0e776383fa", "id": "CVE-2026-56822", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56822 is fixed in version 4.1.108.Final-tuxcare.1 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.108.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:8db0a9d7-d755-5c27-96f4-a865cb0f348d", "id": "CVE-2026-59898", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59898 is fixed in version 4.1.108.Final-tuxcare.1 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.108.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:6f3a6465-2734-5146-ac2e-93a159e0411c", "id": "CVE-2026-59899", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59899 is fixed in version 4.1.108.Final-tuxcare.1 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.108.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:d4de6ef5-d836-524f-99a0-2e79cb7cb419", "id": "CVE-2026-59900", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59900 is fixed in version 4.1.108.Final-tuxcare.1 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.108.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:41c5b8e9-fcdd-5dc1-bf0b-cf3e70c1e75b", "id": "CVE-2026-59901", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59901 is fixed in version 4.1.108.Final-tuxcare.1 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.108.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:0bb6dc0b-6484-5882-b924-83a22d640307", "id": "CVE-2026-59902", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59902 affects version 4.1.108.Final-tuxcare.1 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.108.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:1bdf31ba-4468-5e62-865a-c4ab495b5019", "id": "CVE-2026-59903", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59903 affects version 4.1.108.Final-tuxcare.1 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.108.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:b3cd7dce-1ea3-5187-8bb2-b0be20522d03", "id": "CVE-2026-59919", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59919 is fixed in version 4.1.108.Final-tuxcare.1 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.108.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:11be074d-7e2c-585e-80ea-ca43cf5d78dc", "id": "CVE-2026-59920", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59920 is fixed in version 4.1.108.Final-tuxcare.1 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.108.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:0afa9ff1-44e3-5d5f-ac10-ed723ae9ebd6", "id": "CVE-2026-59921", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59921 is fixed in version 4.1.108.Final-tuxcare.1 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.108.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:8fdede75-0ce0-5114-869e-7ff9d193473d", "id": "CVE-2026-73507", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-73507 is fixed in version 4.1.108.Final-tuxcare.1 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.108.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:c7fef579-e54a-5f57-ba7b-a56341be7138", "id": "CVE-2026-73508", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-73508 is fixed in version 4.1.108.Final-tuxcare.1 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.108.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:74f8da46-6ae1-5109-8cae-13cb60fc13df", "id": "GHSA-mfg7-5gfp-c4w3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.108.Final-tuxcare.1 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.108.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:034a3b27-b3e1-5a26-aac4-b0a87570d1fe", "id": "GHSA-v74w-7mr3-4qg3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.108.Final-tuxcare.1 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.108.Final-tuxcare.1" } ] } ], "dependencies": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.108.Final-tuxcare.1" } ] }