{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:d3ef5d46-900f-5d65-8887-f444d357a933", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/io.netty/netty-codec-http2@4.1.122.Final-tuxcare.2", "type": "library", "group": "io.netty", "name": "netty-codec-http2", "version": "4.1.122.Final-tuxcare.2", "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.122.Final-tuxcare.2" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:728416ac-1b03-5ba8-9c8e-d8881bbb6249", "id": "CVE-2025-55163", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55163 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:f1c825b8-b52b-591f-a51f-27b45c672785", "id": "CVE-2025-58056", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-58056 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:24a7456a-268b-5a1b-bd73-89776875ac7a", "id": "CVE-2025-58057", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-58057 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:b99f34c3-45d8-5275-9ea2-dba98e8e7850", "id": "CVE-2025-59419", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59419 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:eb93f854-7405-58fb-b293-f80a39d7fa9c", "id": "CVE-2025-67735", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-67735 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:69907b83-5d59-5ce7-a2ce-e0a16e4fe789", "id": "CVE-2026-33870", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33870 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:f6ba95f2-4fe7-5a59-b6c6-2efbd3c80e90", "id": "CVE-2026-33871", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33871 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:4f653dbc-c99d-59b9-9483-ac1add2763f9", "id": "CVE-2026-41417", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41417 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:6c73bbe7-e591-5920-af85-f862bfaee18d", "id": "CVE-2026-42577", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-42577 does not affect version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-http2. CVE-2026-42577 affects Netty 4.2.x only (advisory range >= 4.2.0.Final, < 4.2.13.Final). An fd left registered with an epoll event mask of 0 is woken forever by the unmaskable EPOLLERR/EPOLLHUP after a RST on a half-closed connection. Target 4.1.122.Final is NOT affected due to architectural differences. The patch modifies EpollIoHandler.java and EpollIoOps.java, part of 4.2's IoHandler/IoOps abstraction. Neither file exists in 4.1.x, which registers via EpollEventLoop.modify() off AbstractEpollChannel.flags. That field is seeded Native.EPOLLET, and no read/close/half-close path clears it (only the explicit pre-registration setEpollMode(LEVEL_TRIGGERED) opt-in), so the registration stays edge-triggered and the RST is reported once per edge instead of on every epoll_wait. The chain from INPUT (connection state change) to GOAL (CPU busy-loop via empty event mask) is broken at step (ii): the target cannot produce an empty event mask. Verdict: not_affected. Justification: code_not_reachable (Rule 5 Type A2)." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:839a2245-5608-50df-b090-473f5be98623", "id": "CVE-2026-42578", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42578 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:bb3a432f-1a0e-5ef6-9b40-527f7180a804", "id": "CVE-2026-42579", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42579 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:05787c52-0493-5e33-b904-044bd7007f69", "id": "CVE-2026-42580", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42580 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:ffd9c611-5b78-549a-bfc6-c410836dc9ae", "id": "CVE-2026-42581", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42581 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:d0fc1999-8b93-59c1-8cd9-27ca8f8d1fbd", "id": "CVE-2026-42583", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42583 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:ba26f62f-8b4c-5754-b3f6-8dbd3d37baac", "id": "CVE-2026-42584", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42584 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:7e6df38b-5df8-5d18-a96c-4da512719e0d", "id": "CVE-2026-42585", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42585 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:9c8e8ac0-169c-5b4b-ae07-2f0832e81697", "id": "CVE-2026-42586", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42586 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:dd6b7a91-ab99-51d8-99e6-234082172c3c", "id": "CVE-2026-42587", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42587 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:8d2a8250-7f38-5cb1-a528-e2fdc2a212a4", "id": "CVE-2026-44248", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44248 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:5d01583e-e646-5e43-a5e6-6a33477c980a", "id": "CVE-2026-44249", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44249 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:f50fcb6a-0b6e-53b3-b8ef-0e769847ae6d", "id": "CVE-2026-44250", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44250 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:ea7e34df-a169-5602-be82-80ae2920568a", "id": "CVE-2026-44890", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:03a18c8f-169d-55ea-b1bf-0f15f072db8b", "id": "CVE-2026-44891", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44891 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:d37c1788-53a4-59bd-915b-597845289f6d", "id": "CVE-2026-44893", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44893 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:883f9bd4-3c06-57cf-86a5-3b823db62bfa", "id": "CVE-2026-45416", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-45416 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:ea2135d2-99d9-5022-aa78-d10bf4517739", "id": "CVE-2026-45536", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-45536 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:f1ae20b1-594e-51aa-ae24-2a14581831bc", "id": "CVE-2026-45673", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-45673 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:b46a486e-f8b9-597d-894e-46defdb724ce", "id": "CVE-2026-45674", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-45674 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:8ee19cbf-8136-5a08-b97f-f5a5ea05ec9a", "id": "CVE-2026-46340", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46340 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:b0a8df78-a852-5a11-aa35-f9f7de6df4b3", "id": "CVE-2026-47244", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47244 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:c8723f6f-5046-5ac5-a49d-306b0a4df0ef", "id": "CVE-2026-47691", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47691 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:0e82cf6a-bacb-5883-b7b6-75eb3ae3eef7", "id": "CVE-2026-48006", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48006 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:18525d37-896f-5914-87b1-2850f16752e9", "id": "CVE-2026-48043", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48043 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:46814406-6eb8-5af8-8ad0-5c345a205927", "id": "CVE-2026-48059", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48059 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:ab0f26f7-97d0-5acb-a036-02ed1afa949e", "id": "CVE-2026-50010", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50010 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:b0ba7564-dc80-5a88-80cb-8d33358fa4e0", "id": "CVE-2026-50011", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50011 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:611d8c62-cf15-55a2-85c1-c3d0e5078537", "id": "CVE-2026-50020", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50020 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:f9a61379-3d17-53bb-89f6-02d91a180907", "id": "CVE-2026-50560", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:a147db1f-1038-5779-8c79-a9ed32e83d5b", "id": "CVE-2026-55831", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-55831 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:934212a3-8d9b-5b83-87bf-96d3691b566d", "id": "CVE-2026-55833", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-55833 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:a47b1865-af73-5776-a2e5-64e9b77ed844", "id": "CVE-2026-55851", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-55851 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:ee87540e-6f37-57be-831a-5c0dce697b25", "id": "CVE-2026-56745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56745 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:ff826385-0462-5793-888c-8fa8628f72ef", "id": "CVE-2026-56746", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56746 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:b9dae3f4-71b4-5a29-952a-a0a425854815", "id": "CVE-2026-56817", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56817 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:d5c12c87-77bb-560c-9c6d-7e753283836a", "id": "CVE-2026-56818", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56818 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:d4798bcb-cdd7-5445-a0b9-6c741f7ff25d", "id": "CVE-2026-56819", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56819 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:46496b09-222c-5789-817c-74d4c6be9abb", "id": "CVE-2026-56820", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56820 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:954bd562-24cb-5741-b655-fd86c70ff38b", "id": "CVE-2026-56821", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56821 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:30a03cb5-4d49-5096-b887-aeadc8c08624", "id": "CVE-2026-56822", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56822 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:7c7810ce-a3ef-5668-9f42-46b531cc138a", "id": "CVE-2026-59898", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59898 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:1ddeb039-0fd3-5e63-8c87-5b5f9369f046", "id": "CVE-2026-59899", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59899 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:e7b903af-93e9-5897-bf17-69122a43af59", "id": "CVE-2026-59900", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59900 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:8c903cfb-e3b2-5942-b1bf-aeedfe687e9b", "id": "CVE-2026-59901", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59901 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:5f5885e1-37d5-5196-bd46-faf4cf56ea61", "id": "CVE-2026-59902", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59902 affects version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:338ee688-2404-584f-aa30-b30a46aed468", "id": "CVE-2026-59903", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59903 affects version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:05a22ce4-d21a-5173-8c2a-226306db5339", "id": "CVE-2026-59919", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59919 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:dc5eebe6-1273-5449-bb6f-bb03579bfd9b", "id": "CVE-2026-59920", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59920 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:e72bfd2e-c42f-55d6-9b97-ddbde77d2d47", "id": "CVE-2026-59921", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59921 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:0e4cfc2a-c5ee-5410-bac7-793a538783d8", "id": "CVE-2026-73507", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-73507 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:6965bd9d-c082-56c3-82bd-78c88072e550", "id": "CVE-2026-73508", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-73508 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:2a0369f9-b7fd-512f-9df4-cef12265315f", "id": "GHSA-mfg7-5gfp-c4w3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:6246c809-cf05-5f34-9edb-4ecb75a75da4", "id": "GHSA-v74w-7mr3-4qg3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.122.Final-tuxcare.2" } ] } ], "dependencies": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.122.Final-tuxcare.2" } ] }