{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:7841a2cd-3cdd-5267-bf11-bfe0da80e517", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.3", "type": "library", "group": "io.netty", "name": "netty-codec-http2", "version": "4.1.130.Final-tuxcare.3", "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.3" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:06e3f67b-2cda-5276-ad07-45ffce6e6b72", "id": "CVE-2025-55163", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-55163 does not affect version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-http2. already_fixed \u2014 The target Netty 4.1.130.Final repository already contains the complete MadeYouReset (CVE-2025-55163) mitigation. The Http2MaxRstFrameLimitEncoder defense class is present, integrated into the HTTP/2 connection handler builder, and enabled by default for servers with a threshold of 200 RST_STREAM frames per 30-second window. All protocol-error-triggered RST writes route through the protected en..." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:7adc48d3-927a-5674-b985-9d520dc2b21a", "id": "CVE-2026-33870", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33870 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:1275c95f-6dfc-5f8a-899b-35fb293dc2ff", "id": "CVE-2026-33871", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33871 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:b1623a79-d6f6-5074-a6ef-4ff762a3d412", "id": "CVE-2026-41417", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41417 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:899fb984-863c-5d8b-abb5-9d6519a85632", "id": "CVE-2026-42578", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42578 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:bf80c803-dbc6-5a2d-b2f4-16b3142b9c13", "id": "CVE-2026-42579", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42579 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:f16f0d49-89f7-52d1-8c11-768f81fdf958", "id": "CVE-2026-42580", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42580 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:9036a89a-877e-59b5-8331-894adc799f40", "id": "CVE-2026-42581", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42581 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:56ad7b74-1ee1-5ada-a761-6b7ad6f1c0e4", "id": "CVE-2026-42583", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42583 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:5b2c607f-c2e8-513e-9fe1-5d81ed0c06e9", "id": "CVE-2026-42584", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42584 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:e2e3170b-6d45-5340-982f-b4114262fe02", "id": "CVE-2026-42585", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42585 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:62b9377a-3358-5ed6-8edb-f2f481fa687c", "id": "CVE-2026-42586", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42586 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:c7b68fff-0189-525e-818f-7f23bc393a8c", "id": "CVE-2026-42587", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42587 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:9b1d10ed-e04c-5d0b-b184-bcf0f38840cf", "id": "CVE-2026-44248", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44248 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:ff54879d-0b71-5cff-a91f-21d0d47654ae", "id": "CVE-2026-44249", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44249 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:06f0ad9e-5cbe-53c8-9057-a3a89a78cff8", "id": "CVE-2026-44250", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44250 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:06010347-db6e-5284-b63f-09eb2a3b6f6e", "id": "CVE-2026-44890", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:058ebee6-dc8c-57dc-93d9-673d192bf68a", "id": "CVE-2026-44891", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44891 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:a1ed934c-a59b-551a-8962-cf29266b77f1", "id": "CVE-2026-44893", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44893 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:6fe0e5da-a10e-5233-b256-41420525df30", "id": "CVE-2026-45416", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45416 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:ea3dc9c8-bf4b-524f-9297-a930f80e1e1c", "id": "CVE-2026-45536", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45536 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:d29aee7d-bcc2-54c9-b4f5-6f9ecef9836f", "id": "CVE-2026-45673", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-45673 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:7135dcb4-0370-5bb0-9401-71eaf13f6091", "id": "CVE-2026-45674", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-45674 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:261a33a2-3228-577f-b78c-ce2e80171996", "id": "CVE-2026-46340", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46340 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:8353d996-9a02-5f4d-b212-6046bbc55cda", "id": "CVE-2026-47244", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47244 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:16763ad7-5eb3-59eb-b483-dd751fd499a1", "id": "CVE-2026-47691", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47691 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:37f9af0a-582f-5f9c-ae3f-e1f8c4f25752", "id": "CVE-2026-48006", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48006 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:300d0d54-0018-5dfd-88ce-a0ae00e3de83", "id": "CVE-2026-48043", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48043 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:f8c5349f-3fa4-5db9-8887-4a82d163a66e", "id": "CVE-2026-48059", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48059 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:3a6d89e4-1964-5021-b360-7b8dd4645d3c", "id": "CVE-2026-50010", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50010 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:ee5de706-bf96-50a2-a422-926c6782b0cf", "id": "CVE-2026-50011", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-50011 does not affect version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-http2. Patches already applied: bff98ee51b5d0b7ee25fd5005f2169f2a0467efa (already in target via d5b4e38845f5 'Backport CVE-2026-44890 to 4.1.130.Final')" }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:f13c42be-0fd3-5fd5-aa5d-2f2f03c6a9bd", "id": "CVE-2026-50020", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50020 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:8ebfd9ae-b182-5290-953c-f536d836ea98", "id": "CVE-2026-50560", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:bdc10e9d-13f0-5cd9-acb3-fbed087a78ba", "id": "CVE-2026-55831", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-55831 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:3f39b61e-a8a2-5960-8b0b-e26912d208a1", "id": "CVE-2026-55833", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-55833 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:3316f1ce-0724-5154-82b8-880e15a0a5c4", "id": "CVE-2026-55851", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-55851 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:b21873bd-9442-5beb-b5cf-24bb9680566a", "id": "CVE-2026-56745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56745 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:d5e789b6-67cd-5a73-b23d-916129c1c9e4", "id": "CVE-2026-56746", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56746 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:811b2527-2994-508b-9157-c29c1a4e3544", "id": "CVE-2026-56817", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56817 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:645d2338-d420-5dc2-89ed-01130edb3a93", "id": "CVE-2026-56818", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56818 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:b7ee87f2-09bc-5c8c-81cf-5c8b9ff7102f", "id": "CVE-2026-56819", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56819 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:df8156e4-2af4-5a14-8d37-759faac17481", "id": "CVE-2026-56820", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56820 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:36bf8f87-a706-5708-8a84-0e2439e1cca4", "id": "CVE-2026-56821", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56821 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:26b5c77c-68b3-5349-9a74-42677289548e", "id": "CVE-2026-56822", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56822 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:4f1ace48-016f-5bff-b9cb-eea949a82a00", "id": "CVE-2026-59898", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59898 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:bb7bb103-a0d2-5eb4-aa6e-484b931bc38d", "id": "CVE-2026-59899", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59899 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:2d2fe08e-637b-53c7-8026-cbc00e0dc36f", "id": "CVE-2026-59900", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59900 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:8ff97120-2692-571c-91ee-cbf224432a57", "id": "CVE-2026-59901", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59901 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:1dd3d324-e9a5-5ac2-953b-1cfad8268a25", "id": "CVE-2026-59902", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59902 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:22ddc247-5567-59a8-9388-439ceea93645", "id": "CVE-2026-59903", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59903 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:17316fcb-0ec7-58bb-b13a-1c7878910465", "id": "CVE-2026-59919", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59919 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:27325ade-7dcc-5a4d-83b6-1cba4532d37f", "id": "CVE-2026-59920", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59920 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:b08876b8-5a05-51c9-a3d0-3f74c9b21561", "id": "CVE-2026-59921", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59921 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:592cd6df-e991-50ee-a26a-9ae6e187e3dd", "id": "CVE-2026-73507", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-73507 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:719c5b4d-dac0-5cc2-9575-24a6e6a20ba7", "id": "CVE-2026-73508", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-73508 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:ea0b6307-b9b0-5c4c-ac2e-b7bf336724fe", "id": "GHSA-mfg7-5gfp-c4w3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:6cc8086f-64a7-584b-8e44-8604bcdade3f", "id": "GHSA-v74w-7mr3-4qg3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.3" } ] } ], "dependencies": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.3" } ] }