{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:2b4a27a5-3361-52b3-b989-532be3798dbd",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/io.netty/netty-codec-http2@4.1.94.Final-tuxcare.1",
      "type": "library",
      "group": "io.netty",
      "name": "netty-codec-http2",
      "version": "4.1.94.Final-tuxcare.1",
      "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.94.Final-tuxcare.1"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:869b9fef-0700-5a84-a32d-ab981c522f2d",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-44487 is fixed in version 4.1.94.Final-tuxcare.1 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.94.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:80da24f5-7ae6-551c-9e37-e81d0c972ca4",
      "id": "CVE-2023-4586",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2023-4586 is a false positive for io.netty:netty-codec-http2 4.1.94.Final-tuxcare.1."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.94.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:69009948-9225-5fc7-883f-1833aedc360e",
      "id": "CVE-2024-29025",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-29025 affects version 4.1.94.Final-tuxcare.1 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.94.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:508ae68f-01fa-5629-9cc4-118f8677a8be",
      "id": "CVE-2024-47535",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-47535 affects version 4.1.94.Final-tuxcare.1 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.94.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ec2cf3be-9f6a-5ada-a3c1-89f93045bd33",
      "id": "CVE-2025-24970",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-24970 affects version 4.1.94.Final-tuxcare.1 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.94.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:151b956d-dcb0-54a5-94bf-b16130a9a29c",
      "id": "CVE-2025-25193",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-25193 is fixed in version 4.1.94.Final-tuxcare.1 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.94.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5b063b7f-f96e-5902-917e-fc8b66c01d42",
      "id": "CVE-2025-55163",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55163 is fixed in version 4.1.94.Final-tuxcare.1 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.94.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c36f6d43-e2b4-5c24-b11d-47b61a156f3b",
      "id": "CVE-2025-58056",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-58056 is fixed in version 4.1.94.Final-tuxcare.1 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.94.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f81b3d89-8d6d-5fa4-abbe-a8390f59cf13",
      "id": "CVE-2025-58057",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-58057 is fixed in version 4.1.94.Final-tuxcare.1 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.94.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e95914a5-df4d-55ad-b155-a8543e8be105",
      "id": "CVE-2025-59419",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-59419 is fixed in version 4.1.94.Final-tuxcare.1 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.94.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:51282512-9f86-5f78-807d-7f487acd9a49",
      "id": "CVE-2025-67735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-67735 is fixed in version 4.1.94.Final-tuxcare.1 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.94.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4b1102ba-cd24-512f-be0b-faa7c1223dec",
      "id": "CVE-2026-33870",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-33870 is fixed in version 4.1.94.Final-tuxcare.1 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.94.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:99fd314c-fd10-5f55-a326-beb1081bc70c",
      "id": "CVE-2026-33871",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-33871 is fixed in version 4.1.94.Final-tuxcare.1 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.94.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bc91ba07-cc9b-5b35-a2ed-ad533873429e",
      "id": "CVE-2026-41417",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41417 is fixed in version 4.1.94.Final-tuxcare.1 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.94.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:516d3d06-17cd-5d5f-b5b5-765f0cd45b51",
      "id": "CVE-2026-42577",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42577 affects version 4.1.94.Final-tuxcare.1 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.94.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:14108061-8b01-5e7a-86f4-fdde7a0d9b9b",
      "id": "CVE-2026-42578",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42578 is fixed in version 4.1.94.Final-tuxcare.1 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.94.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a2f68f31-110d-5ec9-9ed7-f1d8a76c3ba3",
      "id": "CVE-2026-42579",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42579 is fixed in version 4.1.94.Final-tuxcare.1 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.94.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3f67de22-7079-5e49-a80f-59f1621f503c",
      "id": "CVE-2026-42580",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42580 is fixed in version 4.1.94.Final-tuxcare.1 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.94.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:896730d6-20a4-5cb5-81a3-c34f0b0f0b5b",
      "id": "CVE-2026-42581",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42581 is fixed in version 4.1.94.Final-tuxcare.1 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.94.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:263e18bc-9dae-5bcc-9ee6-11335f47900b",
      "id": "CVE-2026-42583",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42583 is fixed in version 4.1.94.Final-tuxcare.1 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.94.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:889acbc6-e982-583a-9152-1f0030fb85eb",
      "id": "CVE-2026-42584",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42584 is fixed in version 4.1.94.Final-tuxcare.1 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.94.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:be979887-6e61-5994-85c1-d6e822de627d",
      "id": "CVE-2026-42585",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42585 is fixed in version 4.1.94.Final-tuxcare.1 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.94.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:58ef9211-b712-5de2-a179-064a6283e234",
      "id": "CVE-2026-42586",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42586 is fixed in version 4.1.94.Final-tuxcare.1 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.94.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:543c1b7b-c5f3-5663-bca5-83c009cfeefc",
      "id": "CVE-2026-42587",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42587 is fixed in version 4.1.94.Final-tuxcare.1 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.94.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d3f23e66-6b11-5694-9749-c4860f3f30ff",
      "id": "CVE-2026-44248",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44248 is fixed in version 4.1.94.Final-tuxcare.1 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.94.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a28820f5-54b3-5cb8-b140-5fd6d989269d",
      "id": "CVE-2026-44249",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44249 is fixed in version 4.1.94.Final-tuxcare.1 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.94.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:790d01e5-7fd9-56c2-aa5f-4d86fef301c1",
      "id": "CVE-2026-44250",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44250 is fixed in version 4.1.94.Final-tuxcare.1 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.94.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4e9484ef-b297-5133-a806-8471efc37b63",
      "id": "CVE-2026-44890",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.94.Final-tuxcare.1 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.94.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:03ca27d9-13e6-5eb9-b72e-d887b557053a",
      "id": "CVE-2026-44891",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44891 is fixed in version 4.1.94.Final-tuxcare.1 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.94.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:aeb92121-10c8-5d0a-b676-d79a36f2761a",
      "id": "CVE-2026-44893",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44893 is fixed in version 4.1.94.Final-tuxcare.1 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.94.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0f6a02af-90d9-5b4a-8b29-b315da69610a",
      "id": "CVE-2026-45416",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-45416 is fixed in version 4.1.94.Final-tuxcare.1 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.94.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:550e153d-f1a4-5f97-b697-0659f5a3fb2a",
      "id": "CVE-2026-45536",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-45536 is fixed in version 4.1.94.Final-tuxcare.1 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.94.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ae13ade0-b825-56be-a936-946ce94637ca",
      "id": "CVE-2026-45673",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-45673 is fixed in version 4.1.94.Final-tuxcare.1 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.94.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:548224b5-a3df-51db-b6c1-6f5bcf688ea4",
      "id": "CVE-2026-45674",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-45674 is fixed in version 4.1.94.Final-tuxcare.1 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.94.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a5854e7a-b745-552f-a311-e0605fbe71c6",
      "id": "CVE-2026-46340",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-46340 is fixed in version 4.1.94.Final-tuxcare.1 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.94.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:64795eb7-b2eb-56c5-a2ab-6eea16b4b23d",
      "id": "CVE-2026-47244",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47244 is fixed in version 4.1.94.Final-tuxcare.1 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.94.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8dccbb43-1c37-554b-b31e-e4fd9c0b0f00",
      "id": "CVE-2026-47691",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47691 is fixed in version 4.1.94.Final-tuxcare.1 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.94.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1a3016ab-2a2a-5a62-9374-263b81df019a",
      "id": "CVE-2026-48006",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-48006 is fixed in version 4.1.94.Final-tuxcare.1 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.94.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:22451b19-1677-5b10-bb8a-5c674c1817da",
      "id": "CVE-2026-48043",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-48043 is fixed in version 4.1.94.Final-tuxcare.1 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.94.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:94a43129-f307-546d-9bab-92c4cc1f882d",
      "id": "CVE-2026-48059",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-48059 is fixed in version 4.1.94.Final-tuxcare.1 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.94.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ab379ff5-5f6c-5315-a279-e92dc6d0b5b0",
      "id": "CVE-2026-50010",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50010 is fixed in version 4.1.94.Final-tuxcare.1 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.94.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2e2d3ea9-5f03-532e-aa7d-0b0e311e15d3",
      "id": "CVE-2026-50011",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50011 is fixed in version 4.1.94.Final-tuxcare.1 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.94.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6a91181e-5df9-52b2-8cfa-d79491dcd4fe",
      "id": "CVE-2026-50020",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50020 is fixed in version 4.1.94.Final-tuxcare.1 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.94.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:86041bb0-7051-5dc4-a752-61c53c33ac6e",
      "id": "CVE-2026-50560",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.94.Final-tuxcare.1 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.94.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:58d4f160-7f1e-5f9c-83f0-c8096c3d3a72",
      "id": "CVE-2026-55831",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-55831 is fixed in version 4.1.94.Final-tuxcare.1 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.94.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bce4fcb4-94fc-557c-9486-6dbf8847a621",
      "id": "CVE-2026-55833",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-55833 is fixed in version 4.1.94.Final-tuxcare.1 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.94.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:53282242-c5f4-548b-a396-b1a7bc55df83",
      "id": "CVE-2026-55851",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-55851 is fixed in version 4.1.94.Final-tuxcare.1 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.94.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6452e059-10e1-58e5-9d8b-176cd522e879",
      "id": "CVE-2026-56745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-56745 is fixed in version 4.1.94.Final-tuxcare.1 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.94.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:58aebe73-037b-5791-bdd2-8b33af613993",
      "id": "CVE-2026-56746",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-56746 is fixed in version 4.1.94.Final-tuxcare.1 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.94.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:533ccf9b-63a2-523b-932e-c07ab86b4249",
      "id": "CVE-2026-56817",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-56817 is fixed in version 4.1.94.Final-tuxcare.1 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.94.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b5deb764-4835-52ec-b9a3-24990c4bd89a",
      "id": "CVE-2026-56818",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-56818 is fixed in version 4.1.94.Final-tuxcare.1 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.94.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1903132c-da9c-5838-8a19-2c737f9bf01b",
      "id": "CVE-2026-56819",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-56819 is fixed in version 4.1.94.Final-tuxcare.1 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.94.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b6c928e6-bf5d-5e03-a19b-041aaa99a6d7",
      "id": "CVE-2026-56820",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-56820 is fixed in version 4.1.94.Final-tuxcare.1 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.94.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:69c6347f-ae0b-59b5-9c83-5de0aab89132",
      "id": "CVE-2026-56821",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-56821 is fixed in version 4.1.94.Final-tuxcare.1 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.94.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4e570b22-16cf-56b6-9b05-1086f878fac0",
      "id": "CVE-2026-56822",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-56822 is fixed in version 4.1.94.Final-tuxcare.1 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.94.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e4832ef3-de96-58f9-9824-133841a8ff3e",
      "id": "CVE-2026-59898",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59898 is fixed in version 4.1.94.Final-tuxcare.1 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.94.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ce015267-5fa4-5011-933e-552a83b78eb1",
      "id": "CVE-2026-59899",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59899 is fixed in version 4.1.94.Final-tuxcare.1 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.94.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d5718970-76e0-5ab0-b2ce-2fdbac56e350",
      "id": "CVE-2026-59900",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59900 is fixed in version 4.1.94.Final-tuxcare.1 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.94.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:aa1568c6-8157-592b-9b70-789b248b7cf1",
      "id": "CVE-2026-59901",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59901 is fixed in version 4.1.94.Final-tuxcare.1 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.94.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:eb58bdee-2355-52e8-9a0c-e98ae0e545a1",
      "id": "CVE-2026-59902",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59902 affects version 4.1.94.Final-tuxcare.1 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.94.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2fdd4a54-64f6-5278-bef3-869644bddd6c",
      "id": "CVE-2026-59903",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59903 affects version 4.1.94.Final-tuxcare.1 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.94.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2221f56b-79f4-5d38-a06c-ccc480cf78c8",
      "id": "CVE-2026-59919",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59919 is fixed in version 4.1.94.Final-tuxcare.1 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.94.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:733149fe-4279-5c3c-b459-257e010f7a8a",
      "id": "CVE-2026-59920",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59920 is fixed in version 4.1.94.Final-tuxcare.1 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.94.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:edf8a29f-1f6a-530e-a161-d55864a9f7f6",
      "id": "CVE-2026-59921",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59921 is fixed in version 4.1.94.Final-tuxcare.1 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.94.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ba192483-59c8-5a2d-bd5e-5d6c5a68b85d",
      "id": "CVE-2026-73507",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-73507 is fixed in version 4.1.94.Final-tuxcare.1 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.94.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e518f86f-d68b-53d0-ad89-97c633f14d83",
      "id": "CVE-2026-73508",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-73508 is fixed in version 4.1.94.Final-tuxcare.1 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.94.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dba6cfd7-defb-5b65-8456-52f2d3912a9f",
      "id": "GHSA-mfg7-5gfp-c4w3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.94.Final-tuxcare.1 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.94.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7c75a765-4e5b-5204-986e-9ecdfb837903",
      "id": "GHSA-v74w-7mr3-4qg3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.94.Final-tuxcare.1 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.94.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:36b9e057-092b-53d9-9133-f1c50d404b87",
      "id": "GHSA-xpw8-rcwv-8f8p",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-xpw8-rcwv-8f8p affects version 4.1.94.Final-tuxcare.1 of io.netty:netty-codec-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.94.Final-tuxcare.1"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.netty/netty-codec-http2@4.1.94.Final-tuxcare.1"
    }
  ]
}