{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:c1353498-d327-579d-a793-48b05f324cd8", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.4", "type": "library", "group": "io.netty", "name": "netty-codec-http2", "version": "4.1.130.Final-tuxcare.4", "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.4" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:7f04f2a4-1995-5785-b516-534afdaec5f7", "id": "CVE-2025-55163", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-55163 does not affect version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-http2. already_fixed \u2014 The target Netty 4.1.130.Final repository already contains the complete MadeYouReset (CVE-2025-55163) mitigation. The Http2MaxRstFrameLimitEncoder defense class is present, integrated into the HTTP/2 connection handler builder, and enabled by default for servers with a threshold of 200 RST_STREAM frames per 30-second window. All protocol-error-triggered RST writes route through the protected en..." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:543585f6-e63b-58db-b919-af3f6d45faf4", "id": "CVE-2026-33870", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33870 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:1083aa19-d466-5c76-8b8b-48869379c6d6", "id": "CVE-2026-33871", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33871 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:73c21911-6314-5931-81d7-20a88ce04a0e", "id": "CVE-2026-41417", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41417 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:4d0fe5c7-2f16-5c74-adf3-69edf7e0d65d", "id": "CVE-2026-42578", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42578 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:70be7b4a-cfc5-51c3-9536-01e240f016b0", "id": "CVE-2026-42579", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42579 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:f3e28d24-cf39-5d67-93de-b49daddc2350", "id": "CVE-2026-42580", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42580 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:8fd56fe9-bd79-5f14-84b5-104499619a0a", "id": "CVE-2026-42581", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42581 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:dd01313f-4618-563c-9f9e-a9dffaaa51c4", "id": "CVE-2026-42583", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42583 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:276c10d5-5891-5d71-8c75-8379e62d1dbd", "id": "CVE-2026-42584", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42584 affects version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:66210dff-089c-585f-89b5-32471dd1a005", "id": "CVE-2026-42585", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42585 affects version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:aa2e0bf5-c240-53b5-a463-c7aab36e93c6", "id": "CVE-2026-42586", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42586 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:73af91d9-a7ed-5368-865f-a942e69344e4", "id": "CVE-2026-42587", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42587 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:d9b4f1c4-cb59-5056-b7d3-2b8394256ab9", "id": "CVE-2026-44248", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44248 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:cbd19694-ecd1-5976-b13e-0f534913d9cd", "id": "CVE-2026-44249", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44249 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:3db79958-7732-5e0e-865f-359807d36dc8", "id": "CVE-2026-44250", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44250 affects version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:b279310d-0b9f-52ad-8bf5-4ef825f41059", "id": "CVE-2026-44890", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:025a6604-77d8-56ac-a7b7-3b0e1cda812d", "id": "CVE-2026-44891", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44891 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:3d947836-0fe9-5f93-9342-53bd12ce3f50", "id": "CVE-2026-44893", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44893 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:25a745c5-0863-5a40-aeba-10a2b0a6aef5", "id": "CVE-2026-45416", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-45416 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:4246f1b8-de92-541a-baed-4dfaadddbd3f", "id": "CVE-2026-45536", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-45536 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:59613659-2986-52f3-94e0-c5dbeec810bd", "id": "CVE-2026-45673", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-45673 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:46621c35-3669-575b-b7eb-f4bc46e5b220", "id": "CVE-2026-45674", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-45674 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:bdc3ed64-743a-5a75-b34b-fa9974290dcf", "id": "CVE-2026-46340", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46340 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:28ad86ac-3791-5d8f-938f-e23c3da576bb", "id": "CVE-2026-47244", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47244 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:620faa16-7a3b-560a-b666-3a778258087a", "id": "CVE-2026-47691", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47691 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:6b8439e5-0e5b-50dc-977a-ec5e54d991db", "id": "CVE-2026-48006", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48006 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:32f4b0a8-0858-58de-9ad4-3350767a4aed", "id": "CVE-2026-48043", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48043 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:661d0982-9427-58b6-baff-1bf80ab4e1c0", "id": "CVE-2026-48059", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48059 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:8f9d9ea8-6ddf-5bdf-a166-f38b79b0694c", "id": "CVE-2026-50010", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50010 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:58e94095-3034-55d7-b54a-cab5468fe826", "id": "CVE-2026-50011", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-50011 does not affect version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-http2. Patches already applied: bff98ee51b5d0b7ee25fd5005f2169f2a0467efa (already in target via d5b4e38845f5 'Backport CVE-2026-44890 to 4.1.130.Final')" }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:98a898f5-f946-5694-8df3-6ed918d78088", "id": "CVE-2026-50020", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50020 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:dd53618b-8d4e-5b0e-890b-de1d50b20712", "id": "CVE-2026-50560", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:3674d31e-3fcb-5ea6-ac63-48569ab7a66e", "id": "CVE-2026-55831", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-55831 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:4ca8e675-39d3-5621-91f6-0700066a17e2", "id": "CVE-2026-55833", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-55833 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:3c3b8d82-5b20-5454-a872-7296e7f91355", "id": "CVE-2026-55851", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-55851 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:90166029-4d24-59ec-ae6b-f290b93aef05", "id": "CVE-2026-56745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56745 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:225a0b62-7e52-58c4-b37b-8ad4766adc3d", "id": "CVE-2026-56746", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56746 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:aae6e342-a871-55cb-b26f-2a511f29c2e6", "id": "CVE-2026-56817", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56817 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:302cddad-c58b-5a1f-9d98-8a3344329f12", "id": "CVE-2026-56818", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56818 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:e5209eb9-2ab0-539a-8d28-e69e592df116", "id": "CVE-2026-56819", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56819 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:a1248fdf-3d60-5347-a536-90cfa4a0d914", "id": "CVE-2026-56820", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56820 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:406a0ccf-cb0c-596d-8282-afc2e981bc8e", "id": "CVE-2026-56821", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56821 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:68e0e8a6-2306-5079-9207-7002e0730f54", "id": "CVE-2026-56822", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56822 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:1457e5cc-9331-5857-9ef9-e99993f2ce3f", "id": "CVE-2026-59898", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59898 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:50823587-85e2-5572-895d-bf42880cfa0f", "id": "CVE-2026-59899", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59899 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:5994c211-4d93-5929-923a-fd79bae86fb4", "id": "CVE-2026-59900", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59900 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:a90c6460-0ec0-5422-b82d-d98aa551e4cd", "id": "CVE-2026-59901", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59901 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:10ed0e72-cc19-54c9-8a26-e72edde1a0f2", "id": "CVE-2026-59902", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59902 affects version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:8378f798-4b51-504b-be19-12fede1a82fb", "id": "CVE-2026-59903", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59903 affects version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:e2198163-5b6d-5e04-85db-4a8dd9f04d3c", "id": "CVE-2026-59919", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59919 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:0ba9e66f-c310-570d-9bcb-f18e35d838aa", "id": "CVE-2026-59920", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59920 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:7f9109c1-64fa-5170-b0dc-a1a754048995", "id": "CVE-2026-59921", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59921 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:04c4a6cd-f09a-591d-a7df-4ac5b8f04423", "id": "CVE-2026-73507", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-73507 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:e155d55c-be49-504d-b955-e70795a8c772", "id": "CVE-2026-73508", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-73508 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:665bc13c-a0c2-5809-a597-dda581feca2a", "id": "GHSA-mfg7-5gfp-c4w3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:22c6595e-4627-5a22-8c4d-b233c6e09eb8", "id": "GHSA-v74w-7mr3-4qg3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.4" } ] } ], "dependencies": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final-tuxcare.4" } ] }