{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:06680d3e-2ebd-577e-9bdb-a19ff9dd0419", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/io.netty/netty-codec-http2@4.1.93.Final-tuxcare.3", "type": "library", "group": "io.netty", "name": "netty-codec-http2", "version": "4.1.93.Final-tuxcare.3", "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.93.Final-tuxcare.3" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:95ddeba7-3dc0-55c6-8ae4-d4733d33306e", "id": "CVE-2023-34462", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-34462 is fixed in version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.93.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:21d6e868-479a-5bae-b3b5-2f7ef877fcec", "id": "CVE-2023-44487", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-44487 is fixed in version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.93.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:58ed5acd-7dae-5abd-ba5a-7005bb7d4483", "id": "CVE-2023-4586", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2023-4586 is a false positive for io.netty:netty-codec-http2 4.1.93.Final-tuxcare.3." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.93.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:16d621b6-3b83-5a03-a29a-f557bfd5f155", "id": "CVE-2024-29025", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-29025 is fixed in version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.93.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:952f68dc-6526-5e3c-9223-1ad400387c4f", "id": "CVE-2024-47535", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-47535 is fixed in version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.93.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:0e38447b-8873-55f1-92f2-ff12810b31f8", "id": "CVE-2025-25193", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-25193 is fixed in version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.93.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:5bef95c5-8802-5960-acdf-8dc0277e4f74", "id": "CVE-2025-55163", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55163 is fixed in version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.93.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:ad707cfc-2ef2-53f5-a3ef-2d8437f39731", "id": "CVE-2025-58056", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-58056 is fixed in version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.93.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:c38ad01d-5ee8-5f08-b2be-b9f829742b92", "id": "CVE-2025-58057", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-58057 is fixed in version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.93.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:d93d3dfa-a33a-5dcd-9be0-a2d0d7c921e1", "id": "CVE-2025-59419", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59419 is fixed in version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.93.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:b780e5ab-bebc-53a7-a22b-5d27cc9128cd", "id": "CVE-2025-67735", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-67735 is fixed in version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.93.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:4bf9dee2-8bc9-5309-aa0f-f87567470c23", "id": "CVE-2026-33870", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33870 is fixed in version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.93.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:1c2dd424-5211-5a5a-a76e-415d00267351", "id": "CVE-2026-33871", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33871 is fixed in version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.93.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:dc219beb-e195-552e-9307-136f5a66d0cd", "id": "CVE-2026-41417", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41417 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.93.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:a6cc059c-0c96-551b-b3cd-5eb31463e3d8", "id": "CVE-2026-42577", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42577 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.93.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:3ea04bd4-fde4-5278-8dfb-8480452b6dce", "id": "CVE-2026-42578", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42578 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.93.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:7dee29a6-53d5-5b5c-8022-f9d18b856199", "id": "CVE-2026-42579", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42579 is fixed in version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.93.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:475afcd8-871e-5e34-af34-87e4627e0e00", "id": "CVE-2026-42580", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42580 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.93.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:73b7cad4-1d27-5a09-9bfd-e4a58421b63f", "id": "CVE-2026-42581", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42581 is fixed in version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.93.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:52e9d58d-fe99-5232-87e5-c6ea95317654", "id": "CVE-2026-42583", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42583 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.93.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:bc87d20a-44db-53d4-af87-a7ea65ed0b0f", "id": "CVE-2026-42584", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42584 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.93.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:d9c293c3-0dde-5586-89d6-573c121f620d", "id": "CVE-2026-42585", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42585 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.93.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:db8af891-fde1-55e3-bf84-b823550ff42f", "id": "CVE-2026-42586", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42586 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.93.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:683b376d-f7ae-5733-b77c-d3bd5d77b75f", "id": "CVE-2026-42587", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42587 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.93.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:981cd7cd-d801-53a6-8255-24e59615e384", "id": "CVE-2026-44248", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44248 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.93.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:932fcfd3-8354-5d3b-a29e-df7845178e6d", "id": "CVE-2026-44249", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44249 is fixed in version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.93.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:718cc85e-ca5d-57ab-b921-46f097d74995", "id": "CVE-2026-44250", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44250 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.93.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:cfd3d48f-f727-510a-8c41-0bf2707a78b3", "id": "CVE-2026-44890", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.93.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:aad3066c-cc2a-5159-b624-eb373381b93b", "id": "CVE-2026-44891", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44891 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.93.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:3ad3cca0-3643-54d9-b7df-b6c662398af0", "id": "CVE-2026-44893", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44893 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.93.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:cc79f9fa-4420-5731-a0d4-2e294d8274fd", "id": "CVE-2026-45416", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45416 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.93.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:ee6deaf1-f17d-5c31-b602-eb495e8217fa", "id": "CVE-2026-45536", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45536 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.93.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:cd0ba013-bace-529e-80a5-121c12f06ea4", "id": "CVE-2026-45673", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45673 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.93.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:88862e17-cd28-50cf-b6c2-918222938b8f", "id": "CVE-2026-45674", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-45674 is fixed in version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.93.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:c16a0b62-b60b-5443-9fbe-5cc0f27c8199", "id": "CVE-2026-46340", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46340 is fixed in version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.93.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:2fbcfa34-e4d3-525d-be55-2f761d4dde30", "id": "CVE-2026-47244", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47244 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.93.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:22734086-7c8c-5af5-bab6-db58b480bcc9", "id": "CVE-2026-47691", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47691 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.93.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:6448bc1d-0025-54a8-a8ac-39c633443a9b", "id": "CVE-2026-48006", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-48006 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.93.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:b8e59206-65a9-5092-b605-0e747cfde28a", "id": "CVE-2026-48043", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48043 is fixed in version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.93.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:ac1f0798-be3d-5bbd-98a6-85951c771dc2", "id": "CVE-2026-48059", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48059 is fixed in version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.93.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:8dfd83a2-45f2-5e7c-8c42-1fef1cfae62a", "id": "CVE-2026-50010", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50010 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.93.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:c3b329af-a32f-5d22-859f-cc1f18341018", "id": "CVE-2026-50011", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50011 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.93.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:c2054717-191a-5491-8916-e5f573cc3c9e", "id": "CVE-2026-50020", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50020 is fixed in version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.93.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:e096f761-4950-5feb-8eeb-0942912b2ebb", "id": "CVE-2026-50560", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.93.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:f958036b-3bc5-5e4f-bfc0-5d7db8e79b17", "id": "CVE-2026-55831", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55831 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.93.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:028f04e0-83ab-5c59-9bfa-9f298461b48a", "id": "CVE-2026-55833", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55833 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.93.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:1f31eaaf-0d06-5ce8-86ba-bf6759cef002", "id": "CVE-2026-55851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55851 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.93.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:65419d4e-a63a-5fbb-b6e7-d6b12173b629", "id": "CVE-2026-56745", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56745 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.93.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:ad2f7f40-f5d4-584d-a376-3b2c940a3c4f", "id": "CVE-2026-56746", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56746 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.93.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:1dbb675b-6a2e-5019-974e-8972722b9e51", "id": "CVE-2026-56817", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56817 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.93.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:a23c8b83-8f25-520c-a6c6-77614fbcde1b", "id": "CVE-2026-56818", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-56818 does not affect version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-http2. not_affected \u2014 Target version 4.1.93.Final does not contain the maxElements feature or associated code that CVE-2026-56818 describes. This CVE concerns missing cleanup when the maxElements limit check throws an exception (vs. proper cleanup in the maxNestedArrayDepth check). The maxElements feature was introduced by CVE-2026-48006's fix, which was only backported to 4.1.130.Final and later versions, not to 4...." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.93.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:e7c5bced-28d1-5727-b1c3-625ea7e7f082", "id": "CVE-2026-56819", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56819 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.93.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:cce3c313-2a88-55d2-b871-23ae9b7f5576", "id": "CVE-2026-56820", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56820 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.93.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:be0b454e-d448-5382-93aa-e7322085837c", "id": "CVE-2026-56821", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56821 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.93.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:0a1c058f-36b6-50cc-aece-0ac8b2b9b0b4", "id": "CVE-2026-56822", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56822 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.93.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:f8c0901d-2926-5ff3-b995-00718c71c168", "id": "CVE-2026-59898", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59898 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.93.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:87e8f798-8d86-583e-9ccd-9343a2c10892", "id": "CVE-2026-59899", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59899 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.93.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:8e49bda7-116a-5fa8-bcb5-c7f52ebc717c", "id": "CVE-2026-59900", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59900 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.93.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:a3b208ad-2f6a-56d1-bcb0-3d0ab03efeb2", "id": "CVE-2026-59901", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59901 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.93.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:8720e09e-8448-5ef4-bb7b-1e02b65a59a2", "id": "CVE-2026-59902", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59902 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.93.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:e2aa03dd-1b16-50f7-ad2a-59abea7fccd2", "id": "CVE-2026-59903", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59903 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.93.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:a5292387-569c-591b-a67a-8aa23e2fd639", "id": "CVE-2026-59919", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59919 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.93.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:03f4590e-88cf-54da-a34f-5dfa92c01e4e", "id": "CVE-2026-59920", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59920 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.93.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:97a5fa49-2255-5671-a860-d589d019971c", "id": "CVE-2026-59921", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59921 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.93.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:ee40c744-bcd9-524a-9851-ae8fdc4c4986", "id": "CVE-2026-73507", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-73507 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.93.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:cdd005b1-7086-5d8c-9909-a9354090dd03", "id": "CVE-2026-73508", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-73508 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.93.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:93b5603b-9f38-5a98-8ede-63c948752b0f", "id": "GHSA-mfg7-5gfp-c4w3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.93.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:5b99f4c3-6a07-534c-9e8d-3110822ba599", "id": "GHSA-v74w-7mr3-4qg3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.93.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:f2917b7c-4cc8-589f-ac3d-4c7698d70c5b", "id": "GHSA-xpw8-rcwv-8f8p", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-xpw8-rcwv-8f8p affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.93.Final-tuxcare.3" } ] } ], "dependencies": [ { "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.93.Final-tuxcare.3" } ] }