{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:aae3b1d5-ccc4-567c-b827-03f790559f98", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.1", "type": "library", "group": "io.netty", "name": "netty-codec-http2", "version": "4.1.130.Final-tuxcare.1", "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.1" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:2c1df6da-dcb1-5f1b-a265-be0afe5ed26f", "id": "CVE-2025-55163", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-55163 does not affect version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-http2. already_fixed \u2014 The target Netty 4.1.130.Final repository already contains the complete MadeYouReset (CVE-2025-55163) mitigation. The Http2MaxRstFrameLimitEncoder defense class is present, integrated into the HTTP/2 connection handler builder, and enabled by default for servers with a threshold of 200 RST_STREAM frames per 30-second window. All protocol-error-triggered RST writes route through the protected en..." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:f96093e7-5067-5749-8465-b444c451c6de", "id": "CVE-2026-33870", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33870 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:15a93d1c-3109-5ebb-b162-53421afa0216", "id": "CVE-2026-33871", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33871 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:bbb3ba2f-35f9-5619-a143-653a4d5852c1", "id": "CVE-2026-41417", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41417 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:1dd60b22-035a-5826-8e82-ab1137d18d5a", "id": "CVE-2026-42578", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42578 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:ae23fef2-c283-5cdb-8c4c-265ab575c54e", "id": "CVE-2026-42579", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42579 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:4fcc953c-ebcb-58c1-a47c-887dd83629c9", "id": "CVE-2026-42580", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42580 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:40c112f7-af4e-5646-9d5c-877b44ee78fd", "id": "CVE-2026-42581", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42581 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:639e8760-602a-58fb-9db7-71412d23e854", "id": "CVE-2026-42583", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42583 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:fcb8ebed-4c67-5af9-802c-f806d03a0994", "id": "CVE-2026-42584", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42584 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:995e63a2-41f8-56bd-9c7c-b12afc269396", "id": "CVE-2026-42585", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42585 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:303a1d20-cbe4-58b7-a8bc-b44ebadb1168", "id": "CVE-2026-42586", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42586 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:3bd67bc8-6a2c-51dd-ac3c-2d85a2086df7", "id": "CVE-2026-42587", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42587 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:d341daf1-1a83-546c-b5bf-7d7accd6c5b7", "id": "CVE-2026-44248", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44248 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:c63a7d75-3957-5976-a916-bde8111269f9", "id": "CVE-2026-44249", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44249 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:0d05cc80-7da3-5f35-88ce-2e376abc301c", "id": "CVE-2026-44250", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44250 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:9f7ca488-7e50-541a-bb10-92731a67fb08", "id": "CVE-2026-44890", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:ebd1f41f-97c6-5566-90c7-c0d41f7665ca", "id": "CVE-2026-44891", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44891 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:4b819b3d-7439-5e49-a990-bbedf8f40617", "id": "CVE-2026-44893", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44893 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:91b7ce99-9f59-5bf5-8145-42e8a691ddef", "id": "CVE-2026-45416", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45416 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:f21e1f98-406d-5878-8994-06f932ae74c7", "id": "CVE-2026-45536", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45536 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:8dc00227-845d-54af-981e-5578fe66b78c", "id": "CVE-2026-45673", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45673 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:a2e3e5aa-465a-5a0b-9728-bfaf397d9a3d", "id": "CVE-2026-45674", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45674 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:781be150-45db-56b3-ad44-8f0a237c7b84", "id": "CVE-2026-46340", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-46340 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:b41d651c-8d05-5acc-a03c-8963e84f8c7f", "id": "CVE-2026-47244", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47244 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:d99ebf72-ac4f-5095-bb36-e2270730b005", "id": "CVE-2026-47691", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47691 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:535afdc6-3075-5476-a914-75e45a038d33", "id": "CVE-2026-48006", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-48006 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:b8fa0fc4-aad5-5c96-a0c1-145f85308bca", "id": "CVE-2026-48043", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48043 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:99197aba-8773-516c-b152-9fc5147c3591", "id": "CVE-2026-48059", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48059 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:fe9a6521-b00f-51cf-aa09-f1ad46872ed4", "id": "CVE-2026-50010", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50010 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:bc11fa9a-bab4-5f8a-904f-b02964415bd2", "id": "CVE-2026-50011", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-50011 does not affect version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-http2. Patches already applied: bff98ee51b5d0b7ee25fd5005f2169f2a0467efa (already in target via d5b4e38845f5 'Backport CVE-2026-44890 to 4.1.130.Final')" }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:bc13a23a-b344-59f2-b724-90f5899e56dc", "id": "CVE-2026-50020", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50020 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:6ba14383-eeff-504d-accb-c4e46fa588cb", "id": "CVE-2026-50560", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:10b42966-0009-5b08-96b8-bb2a5a87e091", "id": "CVE-2026-55831", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55831 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:e65c892d-ce20-53ec-a988-ccfb394535e4", "id": "CVE-2026-55833", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55833 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:1652de4d-488e-5851-9488-f9c4352dbf0b", "id": "CVE-2026-55851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55851 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:c901bdf4-8a2c-52dd-b9de-01b585f9e000", "id": "CVE-2026-56745", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56745 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:d45f12b0-e3f9-5973-9600-b683eacc550d", "id": "CVE-2026-56746", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56746 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:0b1c7339-6519-5921-9822-7ff9ee283bd3", "id": "CVE-2026-56817", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56817 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:f2b762db-13ad-5ff9-8ba9-343db59ccf44", "id": "CVE-2026-56818", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56818 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:c25d9f82-5043-50c9-88a8-1a7f5af15343", "id": "CVE-2026-56819", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56819 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:499779e1-9a16-594b-ab88-48b2703833ca", "id": "CVE-2026-56820", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56820 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:b76d3598-811f-5d94-852b-452be34926f5", "id": "CVE-2026-56821", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56821 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:274346ba-62c7-54e8-9eac-c02e0a62339c", "id": "CVE-2026-56822", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56822 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:fad88021-5cbe-5e3a-b0b5-ccaed6a8e03c", "id": "CVE-2026-59898", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59898 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:f258dca1-7b56-59ff-945f-4be85680e263", "id": "CVE-2026-59899", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59899 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:927f74ed-ab28-5470-a15e-bd139357c169", "id": "CVE-2026-59900", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59900 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:26d3858d-c320-5f87-8060-ccc71cdaaf86", "id": "CVE-2026-59901", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59901 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:d8aa4bcf-0c5d-55cc-865a-3af7916411da", "id": "CVE-2026-59902", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59902 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:18f20403-eda5-5a63-9b6e-30d00e642b3d", "id": "CVE-2026-59903", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59903 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:dc66d85b-cded-5d7a-9c82-5124e4144da7", "id": "CVE-2026-59919", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59919 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:1b2e1d2b-34fe-5bb4-9487-02ee10bff4b9", "id": "CVE-2026-59920", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59920 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:c3d3f6af-6e9e-5c4f-8d85-c54b05461f5e", "id": "CVE-2026-59921", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59921 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:906ccfa6-e16b-528f-981f-4a7497ca259c", "id": "CVE-2026-73507", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-73507 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:d15b56fa-a884-563f-8b72-e382560a34c5", "id": "CVE-2026-73508", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-73508 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:a21325d3-0a6a-5e6c-a5a2-e5308aee447c", "id": "GHSA-mfg7-5gfp-c4w3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:bd0cd544-8edf-58d3-9e5b-56fd91942700", "id": "GHSA-v74w-7mr3-4qg3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.1" } ] } ], "dependencies": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.1" } ] }