{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:73f91ca5-453d-5d36-a837-afefb913febb",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/io.netty/netty-codec-http2@4.1.82.Final-tuxcare.7",
      "type": "library",
      "group": "io.netty",
      "name": "netty-codec-http2",
      "version": "4.1.82.Final-tuxcare.7",
      "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.82.Final-tuxcare.7"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:33eec7b7-0711-55bc-8422-dca0c16e6279",
      "id": "CVE-2022-41881",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-41881 is fixed in version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:56cb6e3b-af82-5205-a652-c8623e6c244a",
      "id": "CVE-2022-41915",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-41915 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c8e4cdc5-1347-5116-a442-190b4e92bc69",
      "id": "CVE-2023-34462",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-34462 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fa8c4f33-0521-5051-8553-5db80e37ad29",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-44487 is fixed in version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bfb1edae-0d65-5a3e-80ce-7bb1b0b6fcb0",
      "id": "CVE-2023-4586",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2023-4586 is a false positive for io.netty:netty-codec-http2 4.1.82.Final-tuxcare.7."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a821afba-99bf-5137-812c-5ad94d6c3755",
      "id": "CVE-2024-29025",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-29025 is fixed in version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e26cf3c4-9e8b-51bb-bc51-188aa974f66b",
      "id": "CVE-2024-47535",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-47535 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3091fde1-3339-5f2f-9841-8a5d3755a5ac",
      "id": "CVE-2025-24970",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-24970 is fixed in version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5b823e94-cc8a-5df9-8b32-cf92aa10be6f",
      "id": "CVE-2025-25193",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-25193 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:53b61552-2eeb-5efd-a984-b867965f749a",
      "id": "CVE-2025-55163",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55163 is fixed in version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0738427c-3628-5547-9e4b-b5835f4e627e",
      "id": "CVE-2025-58056",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58056 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6713a6e0-ad65-5082-a229-b0cf72327049",
      "id": "CVE-2025-58057",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-58057 is fixed in version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9037addb-8e05-5e92-b2d9-d66e9060171a",
      "id": "CVE-2025-59419",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-59419 is fixed in version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:492a9f6c-591f-56ef-ae70-1a5603a66505",
      "id": "CVE-2025-67735",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-67735 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f69d4b77-650c-5181-9183-21a505ae884e",
      "id": "CVE-2026-33870",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33870 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:94767da5-f750-5b16-856e-27b6a94d6b6b",
      "id": "CVE-2026-33871",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33871 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5c6464e7-3a02-50d7-807e-73cf307a599f",
      "id": "CVE-2026-41417",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41417 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a75be862-834b-5a83-bf52-56bba08b5093",
      "id": "CVE-2026-42577",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42577 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:251f7a3f-a743-5738-87c0-b71354a421ce",
      "id": "CVE-2026-42578",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42578 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3ed743dc-a2ce-5fb5-96b9-68d505e7828b",
      "id": "CVE-2026-42579",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42579 is fixed in version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b72d33d1-0bc6-5064-8062-39469a50a7a5",
      "id": "CVE-2026-42580",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42580 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0b6bf5ce-4fc2-5c99-8b2a-8e09b81ea58e",
      "id": "CVE-2026-42581",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42581 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:68e3a6aa-e402-5f31-9615-6809b295aaad",
      "id": "CVE-2026-42583",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42583 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b47d93c4-a20d-502b-b24d-fb9bc0e0e0ae",
      "id": "CVE-2026-42584",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42584 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1877fa47-8155-5eaa-a0bf-c5be5bd96965",
      "id": "CVE-2026-42585",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42585 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:90035262-053d-5c42-badd-3556f60660c1",
      "id": "CVE-2026-42586",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42586 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:15c67224-9dc6-5513-8fc5-8392e33a74ac",
      "id": "CVE-2026-42587",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42587 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f39dc59e-edf0-500a-8b30-b20b696e182b",
      "id": "CVE-2026-44248",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44248 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5f4d8fd9-133c-5ff9-80c5-9a89cac84b79",
      "id": "CVE-2026-44249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44249 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9e2ce257-bad9-59d0-8caf-18e96d24c586",
      "id": "CVE-2026-44250",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44250 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fd0eef2a-074c-52e7-b6fa-a7be552f4bc8",
      "id": "CVE-2026-44890",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5086c4bb-d5a7-5b0f-b8d2-1cd1a90c8a60",
      "id": "CVE-2026-44891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44891 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:577bb7a3-abc8-5002-ac45-3023ea6817f0",
      "id": "CVE-2026-44893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44893 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bd6394d7-a741-54c5-84af-68a7f6099a19",
      "id": "CVE-2026-45416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45416 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e69aeb50-21fa-55f3-a9e3-18598acc3afb",
      "id": "CVE-2026-45536",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45536 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:278f5b02-2a73-5ac5-bddd-076297c03f9b",
      "id": "CVE-2026-45673",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45673 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:51ec071b-e94d-5242-8140-b292b23c2b60",
      "id": "CVE-2026-45674",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-45674 is fixed in version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6b4ff847-623d-5e12-97f0-54df268678ae",
      "id": "CVE-2026-46340",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-46340 is fixed in version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ee806bfc-5db1-5ffd-af62-e089a18c76b2",
      "id": "CVE-2026-47244",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47244 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:eec4f1f1-067a-5b1c-8f15-cb4979cb8dfb",
      "id": "CVE-2026-47691",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47691 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ea8dd24c-d173-591e-98a3-c7be70c3dba8",
      "id": "CVE-2026-48006",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48006 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:64bfb8b9-d977-5781-a48e-b877d09f9a91",
      "id": "CVE-2026-48043",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-48043 is fixed in version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9454cb6d-4cbb-5cd0-aa35-cd1a0bc3ad1a",
      "id": "CVE-2026-48059",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48059 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8628950b-c750-5259-ad65-d05e1aea7398",
      "id": "CVE-2026-50010",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50010 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:18a3ed14-2e76-5fd9-8183-ea1407a63282",
      "id": "CVE-2026-50011",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50011 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a9e13945-c933-5425-9962-c0a728ec01a1",
      "id": "CVE-2026-50020",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50020 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:df4e78bf-6ba7-59f9-a227-d23eeda880e2",
      "id": "CVE-2026-50560",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:efb183f1-44fc-54a3-aacc-08d036047c0f",
      "id": "CVE-2026-55831",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55831 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:35546546-a07a-5205-b68b-09a410cc98ea",
      "id": "CVE-2026-55833",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55833 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ab161273-838e-50ef-99c6-728b5ee22fbd",
      "id": "CVE-2026-55851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55851 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:58a163d0-e806-5e0d-95ad-0e4e5325dcea",
      "id": "CVE-2026-56745",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56745 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:22819df8-6a19-5396-9832-30a7db972446",
      "id": "CVE-2026-56746",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56746 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3ede59b9-e2e3-528d-b669-4d08b2ace840",
      "id": "CVE-2026-56817",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56817 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e65a0b3b-ba39-55ee-87be-5e044dd64f36",
      "id": "CVE-2026-56818",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-56818 does not affect version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-http2. not_affected \u2014 Version 4.1.82.Final is not affected by CVE-2026-56818. The vulnerability exists in the maxElements limit check that was introduced in version 4.1.135.Final (commit e51c64c964). Version 4.1.82.Final predates this security feature entirely - it has no maxElements configuration, no maxElements validation check, and therefore cannot exhibit the vulnerable pattern described in the CVE (throwing wit..."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cd3f0710-03fb-5cf7-a57a-344d8abc525a",
      "id": "CVE-2026-56819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56819 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:261d0e5d-95fa-568e-ac69-781dae08ac98",
      "id": "CVE-2026-59898",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59898 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:03f949e7-f833-5695-8197-d34443a58fbb",
      "id": "CVE-2026-59899",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59899 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bf70e24e-f9b9-5659-8614-6f7b480aafc5",
      "id": "CVE-2026-59900",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59900 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e4a4432f-8f8a-5717-bffa-abf173d65a9c",
      "id": "CVE-2026-59901",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59901 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:85b451b0-ef74-5653-a39c-0a80da39ace7",
      "id": "CVE-2026-59902",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59902 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bd835808-799b-51ab-955b-20bea6547358",
      "id": "CVE-2026-59903",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59903 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1bcc48b0-4c6c-54ea-976c-766142fcce77",
      "id": "CVE-2026-59919",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59919 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b90c9804-f094-54ae-8cc2-0bdc6859bdd0",
      "id": "CVE-2026-59920",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59920 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e0cdaf3e-cd3f-57e7-8b96-daa7c45b2650",
      "id": "CVE-2026-59921",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59921 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:38eda347-8321-5c7d-9da0-fc9eec0dcded",
      "id": "CVE-2026-73507",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-73507 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cbc9d42c-bc9f-53fb-9740-10b0c2de0320",
      "id": "CVE-2026-73508",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-73508 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ef59cb94-a344-58b9-9d42-b8ebb870d283",
      "id": "GHSA-mfg7-5gfp-c4w3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f1864e0f-499e-54d3-bf8f-31b308a075bc",
      "id": "GHSA-v74w-7mr3-4qg3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b4fe3e84-545c-5998-ab58-cccc8045f205",
      "id": "GHSA-xpw8-rcwv-8f8p",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-xpw8-rcwv-8f8p is fixed in version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.82.Final-tuxcare.7"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.82.Final-tuxcare.7"
    }
  ]
}