{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:1bd203dc-57b6-53b6-8ad0-1905f822a84c", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.2", "type": "library", "group": "io.netty", "name": "netty-codec-http2", "version": "4.1.130.Final-tuxcare.2", "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.2" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:67f4b597-6743-5584-90f3-33085fa0d2ee", "id": "CVE-2025-55163", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-55163 does not affect version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-http2. already_fixed \u2014 The target Netty 4.1.130.Final repository already contains the complete MadeYouReset (CVE-2025-55163) mitigation. The Http2MaxRstFrameLimitEncoder defense class is present, integrated into the HTTP/2 connection handler builder, and enabled by default for servers with a threshold of 200 RST_STREAM frames per 30-second window. All protocol-error-triggered RST writes route through the protected en..." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:b7f5dd34-b68d-5cd6-a3ce-ef71f6c07cc7", "id": "CVE-2026-33870", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33870 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:1af8b6d5-d261-54e0-aa5f-290c756f578e", "id": "CVE-2026-33871", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33871 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:735db000-15fa-5f8f-a325-1cbd770a3c5e", "id": "CVE-2026-41417", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41417 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:05fae38d-df12-5a5d-81d7-0dac30f741e6", "id": "CVE-2026-42578", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42578 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:18389509-5a00-5715-94c9-d298d55f7ad9", "id": "CVE-2026-42579", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42579 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:c1de6f08-b635-5ef9-8df2-1724a60141b7", "id": "CVE-2026-42580", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42580 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:88d23feb-a69b-5758-b76e-d01a1ce6bdac", "id": "CVE-2026-42581", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42581 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:f5deba36-ce4e-5b05-9d80-208716bfc3f6", "id": "CVE-2026-42583", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42583 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:ef67f9cb-4355-5b5c-83d8-e7caf73a5875", "id": "CVE-2026-42584", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42584 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:25a11847-cc04-569a-a068-30425e8648a6", "id": "CVE-2026-42585", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42585 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:d8407347-fc3c-57d7-9d03-4bf182b2588f", "id": "CVE-2026-42586", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42586 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:1ab395ff-e60a-5e46-acf2-09f41fa44967", "id": "CVE-2026-42587", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42587 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:caac8b1f-8188-5393-b0e3-2ff3e3804e2d", "id": "CVE-2026-44248", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44248 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:8e614db4-1a3d-572b-a580-e99915f7f041", "id": "CVE-2026-44249", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44249 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:6b02c333-614f-5a12-bef3-e4fe61ada5fd", "id": "CVE-2026-44250", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44250 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:07304091-9203-5a8e-ba89-fb5297616f6a", "id": "CVE-2026-44890", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:fd152739-de16-58a4-a029-4afc5ade5f01", "id": "CVE-2026-44891", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44891 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:0875d79c-0606-5cb6-89f7-cd44cbd339d5", "id": "CVE-2026-44893", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44893 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:b77faf3b-f640-5939-b98f-053525d0c906", "id": "CVE-2026-45416", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45416 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:96a5315b-5218-5906-849e-d03f01ccd987", "id": "CVE-2026-45536", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45536 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:35d0c64d-4a7b-5053-b09e-5bf505b12cf7", "id": "CVE-2026-45673", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-45673 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:255d0d0a-4d52-552e-87a1-0d5fe9ac98af", "id": "CVE-2026-45674", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-45674 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:fd028951-f699-537c-a1d6-93988c4d5304", "id": "CVE-2026-46340", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46340 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:4d47324d-aa3b-5fbd-9783-63a5bfd8eef6", "id": "CVE-2026-47244", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47244 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:b75f06ec-c034-53a8-88f7-3c3366461a8a", "id": "CVE-2026-47691", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47691 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:f82b3f5b-e6d0-512a-9026-140185203555", "id": "CVE-2026-48006", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48006 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:c56fb764-a8ad-5b25-a22b-fae9bb025dd4", "id": "CVE-2026-48043", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48043 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:333e852a-0614-5f0a-81fb-46386dc7f669", "id": "CVE-2026-48059", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48059 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:fd3572f9-64cb-50ff-86c5-832eaa10fa70", "id": "CVE-2026-50010", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50010 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:ef6c2ca0-b90c-589c-828a-23acb5fe9bca", "id": "CVE-2026-50011", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-50011 does not affect version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-http2. Patches already applied: bff98ee51b5d0b7ee25fd5005f2169f2a0467efa (already in target via d5b4e38845f5 'Backport CVE-2026-44890 to 4.1.130.Final')" }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:8ca0e790-ee49-50be-b8ea-5cb715f12354", "id": "CVE-2026-50020", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50020 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:a8ff5d3c-063d-5d8e-99a8-9aef6b9e2b93", "id": "CVE-2026-50560", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:bd838350-2a93-529a-b58d-3fd7b407a371", "id": "CVE-2026-55831", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55831 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:d586ad42-78e5-5817-8b9f-50af83bea2b7", "id": "CVE-2026-55833", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55833 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:85e2c933-7734-548d-9b60-5fd984ab0ebb", "id": "CVE-2026-55851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55851 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:f5fd6081-f3b2-5c86-ba50-ef8c6a0a0e5c", "id": "CVE-2026-56745", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56745 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:5c5088e2-e6fd-5c46-93fe-6ca4b03a6137", "id": "CVE-2026-56746", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56746 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:eb09059f-c080-595c-add2-b83476246356", "id": "CVE-2026-56817", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56817 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:5e40a0e3-0421-51ae-be4d-d69892a03659", "id": "CVE-2026-56818", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56818 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:e40a6918-4506-50ac-b0e1-636ee4a3f307", "id": "CVE-2026-56819", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56819 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:be1bb6a3-5eec-535e-b8fb-2761c0760ab2", "id": "CVE-2026-56820", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56820 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:8177e429-bb2f-5241-af83-bcc0db8e277c", "id": "CVE-2026-56821", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56821 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:f06657df-c743-5bfc-8850-0d66d09c62af", "id": "CVE-2026-56822", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56822 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:e827deeb-4560-56be-859d-d86f9d41de82", "id": "CVE-2026-59898", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59898 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:2f3a789e-cae0-54aa-b2c6-457bdbbe172d", "id": "CVE-2026-59899", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59899 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:87b3ae5d-4009-54f7-af0c-912576c83f7f", "id": "CVE-2026-59900", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59900 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:628ba408-8f61-5f6f-a8ad-3acb8e917f29", "id": "CVE-2026-59901", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59901 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:76e0da63-1857-5c6b-bf3f-b32aee8db1b9", "id": "CVE-2026-59902", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59902 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:a6768012-9deb-5d4b-b1cd-72c3e1a22d06", "id": "CVE-2026-59903", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59903 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:d9f11bd0-ad73-533b-a9c3-ac96ed384e8a", "id": "CVE-2026-59919", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59919 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:1368506b-d56c-5a85-99eb-ee8a051efbd9", "id": "CVE-2026-59920", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59920 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:e4369458-bfe8-5ae3-8dd8-8922e3498493", "id": "CVE-2026-59921", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59921 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:cb6ba018-db31-5907-b6a9-3fed399354d0", "id": "CVE-2026-73507", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-73507 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:98ceca19-6e51-53d7-acbf-187398ec90c2", "id": "CVE-2026-73508", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-73508 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:6eded4cf-30af-5853-95d6-07b917843aa1", "id": "GHSA-mfg7-5gfp-c4w3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:4b47a87e-7cc4-5a77-93c9-119dc5285e1c", "id": "GHSA-v74w-7mr3-4qg3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.2" } ] } ], "dependencies": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.2" } ] }