{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:f04d262b-a9c8-5fec-99c9-eb2ca42a65c3",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.73.Final-tuxcare.4",
      "type": "library",
      "group": "io.netty",
      "name": "netty-codec-memcache",
      "version": "4.1.73.Final-tuxcare.4",
      "purl": "pkg:maven/io.netty/netty-codec-memcache@4.1.73.Final-tuxcare.4"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:4a189c03-25d9-5dd4-b1b6-f8de8dca7f7d",
      "id": "CVE-2022-24823",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-24823 is fixed in version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d211ff4f-8a61-53c6-8c8c-033ee0728630",
      "id": "CVE-2022-41881",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-41881 is fixed in version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:db006479-e0c4-5bcc-aeeb-8a9b063fbc50",
      "id": "CVE-2022-41915",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-41915 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e32a8f6e-9b8b-5e64-9ae3-e17465aaa933",
      "id": "CVE-2023-34462",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-34462 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2f6c2801-bd7a-5e42-9d36-16afb9b34d81",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-44487 is fixed in version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:21536a95-b257-5cb7-a906-91a1dddad8ae",
      "id": "CVE-2023-4586",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2023-4586 is a false positive for io.netty:netty-codec-memcache 4.1.73.Final-tuxcare.4."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e5f7da6c-da46-5482-8705-2251b2fe52ae",
      "id": "CVE-2024-29025",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-29025 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:21d09670-5457-5c39-97de-95c6af18036d",
      "id": "CVE-2024-47535",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-47535 is fixed in version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c510ebd8-e94f-5c7e-a704-e0869666ff2e",
      "id": "CVE-2025-24970",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-24970 is fixed in version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9b155304-cbbd-5129-b8c4-5917e8de27ca",
      "id": "CVE-2025-25193",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-25193 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:38ee08de-ce21-5840-bead-809e90f3b0dd",
      "id": "CVE-2025-55163",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-55163 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:45b027dc-ef47-5057-b399-cddbabc9fbb8",
      "id": "CVE-2025-58056",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58056 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a2088222-adb0-57ca-a7a9-03b47eee3c9c",
      "id": "CVE-2025-58057",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58057 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2e1e84c9-93cf-5bf1-8d1b-9628ca9aac2f",
      "id": "CVE-2025-59419",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-59419 is fixed in version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:01d1b24e-b5ec-5b75-aeba-853673c357e4",
      "id": "CVE-2025-67735",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-67735 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:041efd35-414b-581d-97cb-44e60d18523c",
      "id": "CVE-2026-33870",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33870 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1821f2ac-d822-5b96-8507-5d1f73682a28",
      "id": "CVE-2026-33871",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33871 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b68f283e-bc6b-5096-9ac9-641a79f930c2",
      "id": "CVE-2026-41417",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41417 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:73aacaac-2694-565a-95b8-d04fef19de05",
      "id": "CVE-2026-42577",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42577 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9268612e-5c1f-5ad1-914d-a49c1c9e92b3",
      "id": "CVE-2026-42578",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42578 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ed1b4350-fee5-5794-8491-18b70a34cff4",
      "id": "CVE-2026-42579",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42579 is fixed in version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c6711ac9-07fe-5fe9-a74b-6cde60386f91",
      "id": "CVE-2026-42580",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42580 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9ed87099-c294-5c4b-b4ae-962bbd2d6d7c",
      "id": "CVE-2026-42581",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42581 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a4f6543a-9c36-5a1b-8777-625cb439fc42",
      "id": "CVE-2026-42583",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42583 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f322fc45-4775-5f1e-ba1a-017dcf0744f3",
      "id": "CVE-2026-42584",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42584 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c87f1e84-1773-5e5b-b6ff-4afac5513fbc",
      "id": "CVE-2026-42585",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42585 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d868028d-3963-5c46-9c88-2eba4bd73fa4",
      "id": "CVE-2026-42586",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42586 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2c6c6af1-2384-5ea0-89bb-7f21d9f52611",
      "id": "CVE-2026-42587",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42587 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a139c0bc-05c6-5a98-8dac-fd4726dead73",
      "id": "CVE-2026-44248",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44248 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6b11e793-1c70-5520-a682-7b4ec2494737",
      "id": "CVE-2026-44249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44249 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d5d3a5ac-5fff-5c34-a4c1-a05d666cf644",
      "id": "CVE-2026-44250",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44250 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:db90e421-619e-5f26-b3a3-0e4c29625d0a",
      "id": "CVE-2026-44890",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:64326c4a-8651-5d1a-a590-52cf336e7f6c",
      "id": "CVE-2026-44891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44891 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:15737ecd-deb1-5488-b665-c6b78e5c86b5",
      "id": "CVE-2026-44893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44893 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:99f32fd9-03eb-5c35-9134-635935d04808",
      "id": "CVE-2026-45416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45416 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:73d0a21c-f983-57b4-b14b-8b90ec7b6f45",
      "id": "CVE-2026-45536",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45536 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:398af91f-f895-56b9-8fa1-decd5478cbd5",
      "id": "CVE-2026-45673",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45673 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0f4fd796-163f-508d-bcd4-be5df414fd12",
      "id": "CVE-2026-45674",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-45674 is fixed in version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:330e2a91-0f85-5ac7-ace6-91a82b2d93d7",
      "id": "CVE-2026-46340",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-46340 is fixed in version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e34653e6-ae89-5450-a46e-5884547ef0dc",
      "id": "CVE-2026-47244",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47244 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dedba487-b8d6-5bf6-a43a-4a87b72e77b9",
      "id": "CVE-2026-47691",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47691 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f44b4e1f-5ba1-544f-b782-41796d48337d",
      "id": "CVE-2026-48006",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48006 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bfcf0af0-6f2b-5e37-b85a-778dce4e1f52",
      "id": "CVE-2026-48043",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-48043 does not affect version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-memcache. not_affected \u2014 Version 4.1.73 is not affected by CVE-2026-48043. The target uses a loop-based architecture with try-finally protection (introduced in 2016) that prevents the buffer leak described in the CVE. The vulnerable ChannelInboundHandlerAdapter pattern that the upstream patch fixes does not exist in this version."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bb7bff66-980c-5665-bc65-86e9c0d0a28f",
      "id": "CVE-2026-48059",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48059 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:274d41ea-49cb-5c82-8124-8adf4119674a",
      "id": "CVE-2026-50010",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50010 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:83c10911-0e58-5d04-b302-6ecf8efa0c2c",
      "id": "CVE-2026-50011",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50011 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fa1cc9eb-14a9-57d5-9e38-1cd299a9fa34",
      "id": "CVE-2026-50020",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50020 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:96121b17-3da4-5ebd-a3d1-017a4d2c006b",
      "id": "CVE-2026-50560",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:659afecd-d56a-5287-a77a-78f2285b63d1",
      "id": "CVE-2026-55831",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55831 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f57cdc4f-9b13-5e26-980e-a8cc31292beb",
      "id": "CVE-2026-55833",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55833 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:138635c7-99ef-5b92-a6fc-f74ab2df4624",
      "id": "CVE-2026-55851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55851 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b1b00814-1999-5078-b464-4bebfcad2d46",
      "id": "CVE-2026-56745",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56745 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f11edd11-6dc3-5630-b3da-8c39d58e2adb",
      "id": "CVE-2026-56746",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56746 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1e3fa181-9790-5475-adf9-dec0f1a4df9f",
      "id": "CVE-2026-56817",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56817 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:98406d5c-8ad8-5e07-8ec8-7084db2b73dc",
      "id": "CVE-2026-56818",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-56818 does not affect version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-memcache. not_affected \u2014 The target version 4.1.73.Final-tuxcare.2 is NOT AFFECTED by CVE-2026-56818. The vulnerable code pattern (configurable `maxElements` limit check without cleanup, contrasting with `maxNestedArrayDepth` limit check WITH cleanup) was introduced in version 4.1.135.Final through commits e51c64c964 and 728c98b8ec (dated 2026-06-01/02). The target version predates these features entirely and does not ..."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d2c2b2b1-b6f6-5b13-8fb7-2b5d1312932b",
      "id": "CVE-2026-56819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56819 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f9555324-0691-5e1d-be39-a5d0ac09a2ab",
      "id": "CVE-2026-59898",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59898 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e78922d9-0fdf-58bc-a955-dda341ecfcc2",
      "id": "CVE-2026-59899",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59899 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:07059768-0e70-5b6f-9370-5df4f71a85e1",
      "id": "CVE-2026-59900",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59900 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d310303f-15e6-5d0e-b86b-a718335d1bcd",
      "id": "CVE-2026-59901",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59901 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3e469aa8-3566-591d-811d-b6f726c9be5b",
      "id": "CVE-2026-59902",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59902 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e7f15dbc-d127-518e-b20d-6604b66b4c90",
      "id": "CVE-2026-59903",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59903 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d5e5b8b3-fe4a-5a0c-bde0-746a9328d43c",
      "id": "CVE-2026-59919",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59919 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9267fdd5-3379-5dd3-9e32-158a446ffd8b",
      "id": "CVE-2026-59920",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59920 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:438337e7-2bb9-597a-8aad-2ef7c36519db",
      "id": "CVE-2026-59921",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59921 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1ff3cfa7-a74b-521f-a0df-32fb0a6e8d91",
      "id": "CVE-2026-73507",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-73507 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:97d69e25-e8c8-5a90-b96a-541a427174ad",
      "id": "CVE-2026-73508",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-73508 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0f996065-7fdf-5c59-b869-b3f68acb9bce",
      "id": "GHSA-mfg7-5gfp-c4w3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6c235be1-0021-5ddd-bf01-f7c9ed555915",
      "id": "GHSA-v74w-7mr3-4qg3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6f5a6cc9-fab6-59a7-b6a8-371e1707a9a3",
      "id": "GHSA-xpw8-rcwv-8f8p",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-xpw8-rcwv-8f8p affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-memcache."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.73.Final-tuxcare.4"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.netty/netty-codec-memcache@4.1.73.Final-tuxcare.4"
    }
  ]
}