{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:1fa235fb-2c4d-5a85-980d-4d7ee7d5209a",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/io.netty/netty-codec-http2@4.1.117.Final-tuxcare.2",
      "type": "library",
      "group": "io.netty",
      "name": "netty-codec-http2",
      "version": "4.1.117.Final-tuxcare.2",
      "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.117.Final-tuxcare.2"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:38d11502-bd51-58c1-9c77-6f6588e3d569",
      "id": "CVE-2025-24970",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-24970 is fixed in version 4.1.117.Final-tuxcare.2 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.117.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:08e6dbc0-7ade-5807-a12c-82cc26b2e4ae",
      "id": "CVE-2025-25193",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-25193 is fixed in version 4.1.117.Final-tuxcare.2 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.117.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8b45878b-51ec-569e-8138-54e475702baf",
      "id": "CVE-2025-55163",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-55163 affects version 4.1.117.Final-tuxcare.2 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.117.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:62d3e1e6-302e-5f74-bad0-26d344bd1dcd",
      "id": "CVE-2025-58056",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58056 affects version 4.1.117.Final-tuxcare.2 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.117.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d29b23e7-ad47-59e2-b697-1b3b5dfd7e99",
      "id": "CVE-2025-58057",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58057 affects version 4.1.117.Final-tuxcare.2 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.117.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e807c2f6-e717-55f3-aa86-695ab3bd03a6",
      "id": "CVE-2025-59419",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-59419 affects version 4.1.117.Final-tuxcare.2 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.117.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b0173d44-441f-5926-8763-21203460bbb1",
      "id": "CVE-2025-67735",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-67735 affects version 4.1.117.Final-tuxcare.2 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.117.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7da58887-a193-5b01-bb05-fdbd98ebec85",
      "id": "CVE-2026-33870",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33870 affects version 4.1.117.Final-tuxcare.2 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.117.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3cc2cbbf-3338-5e4f-830c-123b40315c92",
      "id": "CVE-2026-33871",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-33871 is fixed in version 4.1.117.Final-tuxcare.2 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.117.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5154af10-4e8c-5b3f-8ddb-9acb9d0f4c2a",
      "id": "CVE-2026-41417",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41417 affects version 4.1.117.Final-tuxcare.2 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.117.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e6f858f6-9602-547a-9b3c-865217845ee6",
      "id": "CVE-2026-42578",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42578 affects version 4.1.117.Final-tuxcare.2 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.117.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0e096e56-6b5e-5450-8fb6-2f9bc677fa78",
      "id": "CVE-2026-42579",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42579 is fixed in version 4.1.117.Final-tuxcare.2 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.117.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e21c5aee-083d-5453-a775-78ed4b756221",
      "id": "CVE-2026-42580",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42580 is fixed in version 4.1.117.Final-tuxcare.2 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.117.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a3983a4e-a986-5fca-aee3-6131dd1e0d2c",
      "id": "CVE-2026-42581",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42581 affects version 4.1.117.Final-tuxcare.2 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.117.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7d1946aa-fd70-5633-85bf-c472aab8884c",
      "id": "CVE-2026-42583",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42583 is fixed in version 4.1.117.Final-tuxcare.2 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.117.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5dd44029-4ec3-5a5f-b4ac-f3ecbf7b2709",
      "id": "CVE-2026-42584",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42584 affects version 4.1.117.Final-tuxcare.2 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.117.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:064743c7-578f-54c5-b276-6c60e54ce2ef",
      "id": "CVE-2026-42585",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42585 affects version 4.1.117.Final-tuxcare.2 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.117.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4d0d98ed-96e9-5560-8350-5d8aaf810250",
      "id": "CVE-2026-42586",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42586 is fixed in version 4.1.117.Final-tuxcare.2 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.117.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4fe217e7-e7eb-5268-95da-368c2590abb9",
      "id": "CVE-2026-42587",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42587 affects version 4.1.117.Final-tuxcare.2 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.117.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a01d0f23-1b16-5a1e-9f82-5f3397e207cd",
      "id": "CVE-2026-44248",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44248 affects version 4.1.117.Final-tuxcare.2 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.117.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d937224d-9911-56bd-b82b-36bfed82dbf0",
      "id": "CVE-2026-44249",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44249 is fixed in version 4.1.117.Final-tuxcare.2 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.117.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:191259ce-3711-57fe-8d5f-7950cd680883",
      "id": "CVE-2026-44250",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44250 affects version 4.1.117.Final-tuxcare.2 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.117.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5fff76a3-0384-5ee0-8ea4-5b2ec3614ee7",
      "id": "CVE-2026-44890",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.117.Final-tuxcare.2 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.117.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:87bfbaa5-7158-55ee-bf0c-33d34166be5d",
      "id": "CVE-2026-44891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44891 affects version 4.1.117.Final-tuxcare.2 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.117.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8521ad3d-ed37-58f1-abf0-e54d16f0ba19",
      "id": "CVE-2026-44893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44893 affects version 4.1.117.Final-tuxcare.2 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.117.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:52d434fb-4fd1-5779-9e74-8a56e91728db",
      "id": "CVE-2026-45416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45416 affects version 4.1.117.Final-tuxcare.2 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.117.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7d7a4e6f-bbd1-5e63-9376-70226033d020",
      "id": "CVE-2026-45536",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45536 affects version 4.1.117.Final-tuxcare.2 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.117.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0cadd50f-5969-5b44-9581-99b981620d45",
      "id": "CVE-2026-45673",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45673 affects version 4.1.117.Final-tuxcare.2 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.117.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2605385d-c1b7-5394-abec-f3edceb01969",
      "id": "CVE-2026-45674",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45674 affects version 4.1.117.Final-tuxcare.2 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.117.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dc9bfe37-e8a1-529a-944b-bfa17ba3f586",
      "id": "CVE-2026-46340",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-46340 affects version 4.1.117.Final-tuxcare.2 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.117.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b27906d9-3492-56eb-aa32-be395a34f095",
      "id": "CVE-2026-47244",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47244 affects version 4.1.117.Final-tuxcare.2 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.117.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:90099e73-13d9-5e73-9fce-1e04208430a1",
      "id": "CVE-2026-47691",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47691 affects version 4.1.117.Final-tuxcare.2 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.117.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:33d17b28-9f1f-518c-b1f7-cae34df8a87c",
      "id": "CVE-2026-48006",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48006 affects version 4.1.117.Final-tuxcare.2 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.117.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5d4b5bfe-3a40-5a01-afdd-6303e102e0c4",
      "id": "CVE-2026-48043",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48043 affects version 4.1.117.Final-tuxcare.2 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.117.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4d64ebcf-1f12-53b3-9ff1-aa5fddab0be5",
      "id": "CVE-2026-48059",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-48059 is fixed in version 4.1.117.Final-tuxcare.2 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.117.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b74abc08-0348-57e2-8811-519f8db50759",
      "id": "CVE-2026-50010",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50010 is fixed in version 4.1.117.Final-tuxcare.2 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.117.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:43721ac5-4f7c-5d75-8bbf-d41cc02863da",
      "id": "CVE-2026-50011",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50011 affects version 4.1.117.Final-tuxcare.2 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.117.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:32c48d86-6084-5ce9-aece-952dab9d6f54",
      "id": "CVE-2026-50020",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50020 is fixed in version 4.1.117.Final-tuxcare.2 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.117.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ad1a0fe1-5c16-5ed1-96fd-9a89b7460fba",
      "id": "CVE-2026-50560",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.117.Final-tuxcare.2 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.117.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bb434ac1-c20e-5ea2-9a44-f612dfaf5f11",
      "id": "CVE-2026-55831",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55831 affects version 4.1.117.Final-tuxcare.2 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.117.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ad2f212f-fe95-58ae-931e-3ed28282a5fa",
      "id": "CVE-2026-55833",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55833 affects version 4.1.117.Final-tuxcare.2 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.117.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:21f3db2a-1919-5389-badf-90e554328e83",
      "id": "CVE-2026-55851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55851 affects version 4.1.117.Final-tuxcare.2 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.117.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0d1df9f1-67f0-5182-b861-ce2cc82fe706",
      "id": "CVE-2026-56745",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56745 affects version 4.1.117.Final-tuxcare.2 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.117.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:96d045b9-25f7-5040-8644-eced593c8618",
      "id": "CVE-2026-56746",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56746 affects version 4.1.117.Final-tuxcare.2 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.117.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fbcd195e-7079-5880-bd39-d9e7bc1131af",
      "id": "CVE-2026-56817",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56817 affects version 4.1.117.Final-tuxcare.2 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.117.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:916c874a-9867-56c9-a552-957292535a54",
      "id": "CVE-2026-56818",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56818 affects version 4.1.117.Final-tuxcare.2 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.117.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a5ddc8fc-1a69-582f-ad90-70f03fc94a8e",
      "id": "CVE-2026-56819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56819 affects version 4.1.117.Final-tuxcare.2 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.117.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1473ffa1-e141-58c9-b994-da64b6f61003",
      "id": "CVE-2026-56820",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56820 affects version 4.1.117.Final-tuxcare.2 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.117.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5c6ce50e-6781-5e94-b093-e30353b48633",
      "id": "CVE-2026-56821",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56821 affects version 4.1.117.Final-tuxcare.2 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.117.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:99287aa5-c3fb-5977-a8f9-eae1208504cc",
      "id": "CVE-2026-56822",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56822 affects version 4.1.117.Final-tuxcare.2 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.117.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7fe4fc42-5597-5a97-a840-51c2c59c124f",
      "id": "CVE-2026-59898",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59898 affects version 4.1.117.Final-tuxcare.2 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.117.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6f101cb9-798a-5c41-b154-804161943262",
      "id": "CVE-2026-59899",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59899 affects version 4.1.117.Final-tuxcare.2 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.117.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e373016f-42a4-5938-9239-ab5cd815f555",
      "id": "CVE-2026-59900",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59900 affects version 4.1.117.Final-tuxcare.2 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.117.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0e4e68ae-7670-5022-99d2-47ec6d95b871",
      "id": "CVE-2026-59901",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59901 affects version 4.1.117.Final-tuxcare.2 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.117.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0d41437f-b403-5dd6-a826-be5d06369f21",
      "id": "CVE-2026-59902",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59902 affects version 4.1.117.Final-tuxcare.2 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.117.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:902b17be-dbc9-56d4-bdee-5035fb04d90c",
      "id": "CVE-2026-59903",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59903 affects version 4.1.117.Final-tuxcare.2 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.117.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3e93919f-37a1-5930-bc87-9ac9ede4befd",
      "id": "CVE-2026-59919",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59919 affects version 4.1.117.Final-tuxcare.2 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.117.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:39678eb2-a288-5c76-9ec8-fd5ef8ce369d",
      "id": "CVE-2026-59920",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59920 affects version 4.1.117.Final-tuxcare.2 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.117.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e60217a3-dc01-5a50-b8a9-e8e87eb4a119",
      "id": "CVE-2026-59921",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59921 affects version 4.1.117.Final-tuxcare.2 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.117.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bdfa9943-c9ac-57a8-8496-89787fd7a4f5",
      "id": "CVE-2026-73507",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-73507 affects version 4.1.117.Final-tuxcare.2 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.117.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7d3b22d8-99de-5d7b-a590-fc7d3fcd6abc",
      "id": "CVE-2026-73508",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-73508 affects version 4.1.117.Final-tuxcare.2 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.117.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c0cfd58c-5dbb-551e-b495-3bb30ee882f3",
      "id": "GHSA-mfg7-5gfp-c4w3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.117.Final-tuxcare.2 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.117.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:414ceebb-72d6-525b-b67a-d4529c830909",
      "id": "GHSA-v74w-7mr3-4qg3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.117.Final-tuxcare.2 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.117.Final-tuxcare.2"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.117.Final-tuxcare.2"
    }
  ]
}