{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:8d5c9b13-02ba-5d09-a23e-313f4fca89c8", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.1", "type": "library", "group": "io.netty", "name": "netty-codec-mqtt", "version": "4.1.130.Final-tuxcare.1", "purl": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.1" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:5515f871-2087-5dd1-8ad9-ab0833ec8c26", "id": "CVE-2025-55163", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-55163 does not affect version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-mqtt. already_fixed \u2014 The target Netty 4.1.130.Final repository already contains the complete MadeYouReset (CVE-2025-55163) mitigation. The Http2MaxRstFrameLimitEncoder defense class is present, integrated into the HTTP/2 connection handler builder, and enabled by default for servers with a threshold of 200 RST_STREAM frames per 30-second window. All protocol-error-triggered RST writes route through the protected en..." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:e64c01d0-a764-511c-a873-4c1953cde7b7", "id": "CVE-2026-33870", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33870 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:3b556024-39f1-534c-8224-343063a36bac", "id": "CVE-2026-33871", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33871 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:8f53eaf1-67aa-594a-af5a-e41356de7a0d", "id": "CVE-2026-41417", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41417 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:0850c78b-01a4-5af1-b302-ba3269d300bf", "id": "CVE-2026-42578", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42578 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:0423d420-09e1-530c-b5c9-3cd9184adbbd", "id": "CVE-2026-42579", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42579 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:d11384a7-48bc-5140-a98a-47cb5e006036", "id": "CVE-2026-42580", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42580 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:079109fc-972e-5fed-bdb1-1f8342e2a3d6", "id": "CVE-2026-42581", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42581 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:f9ed2dd8-9701-5cde-92b4-fc0e8c2b17eb", "id": "CVE-2026-42583", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42583 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:3b3e7bb7-8b17-5ec5-811f-d41efdf1d7eb", "id": "CVE-2026-42584", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42584 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:c6785c2b-13c2-5e6f-bd17-5ea8919d2953", "id": "CVE-2026-42585", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42585 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:805f2891-fa6c-51e3-b3d8-ecc31ca53a83", "id": "CVE-2026-42586", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42586 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:a872b8ca-47ea-52dd-9a0f-66bb4859022c", "id": "CVE-2026-42587", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42587 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:01c8f66a-493a-5942-9f08-b15941471834", "id": "CVE-2026-44248", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44248 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:e469f0ea-c9bc-5f76-904f-4b2b8ee36c42", "id": "CVE-2026-44249", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44249 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:04f29237-faaa-5b2e-9469-3b82c13db6f4", "id": "CVE-2026-44250", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44250 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:35d3a2b0-5c7d-5279-a93a-28533a8228e0", "id": "CVE-2026-44890", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:e6ceff99-e5c7-503f-9e58-99ed1ec9eda7", "id": "CVE-2026-44891", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44891 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:b2d6910d-c966-5e13-b161-7325b83ecbbc", "id": "CVE-2026-44893", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44893 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:ff83c9a5-2631-5ba1-ae18-72eb0c34fc69", "id": "CVE-2026-45416", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45416 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:eef23fcb-ff65-511d-8a27-7da832d102c6", "id": "CVE-2026-45536", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45536 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:94f08f0b-35dd-5cea-a672-fccd34f6a9d6", "id": "CVE-2026-45673", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45673 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:3a4358aa-1bee-5c94-bf93-f645ea7528ca", "id": "CVE-2026-45674", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45674 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:c0295191-7bb2-5239-b828-2b61afd9c903", "id": "CVE-2026-46340", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-46340 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:95588690-3ce4-50a9-b15b-8b13f4c72472", "id": "CVE-2026-47244", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47244 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:b6783bbb-e00a-516b-962f-ac82e42cb026", "id": "CVE-2026-47691", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47691 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:9ecf70c6-8b37-593a-8f94-791a5f9966a3", "id": "CVE-2026-48006", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-48006 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:c8f9ce97-4e42-5e53-8ef7-00ed0dcb91af", "id": "CVE-2026-48043", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48043 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:d5ed47d1-0862-51fa-9963-7fffb04cefe4", "id": "CVE-2026-48059", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48059 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:c52c7f0b-1b5a-5d5e-9074-4dc894fa26b7", "id": "CVE-2026-50010", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50010 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:3d45a2c3-54a7-5e58-b764-e867fa05a343", "id": "CVE-2026-50011", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-50011 does not affect version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-mqtt. Patches already applied: bff98ee51b5d0b7ee25fd5005f2169f2a0467efa (already in target via d5b4e38845f5 'Backport CVE-2026-44890 to 4.1.130.Final')" }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:6ed3aca1-f8b5-5aa3-ac69-32821c783600", "id": "CVE-2026-50020", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50020 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:d73da275-d9c0-54e9-a469-6f5523ee3d57", "id": "CVE-2026-50560", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:5e634325-54d1-5771-8ccf-466c9a6e9a85", "id": "CVE-2026-55831", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55831 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:106f5ffc-7531-57e4-95ee-ed41da36d6a7", "id": "CVE-2026-55833", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55833 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:20a360a1-f4c3-5e5e-b9b6-3185ecce5a77", "id": "CVE-2026-55851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55851 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:0c04e589-ce34-54bc-b0d3-282ad34e3bf1", "id": "CVE-2026-56745", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56745 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:e69b3e57-f5cb-52e7-8025-1b16c09f81f2", "id": "CVE-2026-56746", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56746 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:73b38be9-7cd5-5744-aee0-a0d1c0d61fbe", "id": "CVE-2026-56817", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56817 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:0a53786f-badd-50f9-8121-73b25692fd2b", "id": "CVE-2026-56818", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56818 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:3f21f5b7-c7b9-5d40-840e-62bbbdfd53ca", "id": "CVE-2026-56819", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56819 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:3820c69a-a3fd-5c4f-9e48-6d650f089cd2", "id": "CVE-2026-56820", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56820 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:cbfadb67-9034-57e6-843c-30b900ca4c7f", "id": "CVE-2026-56821", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56821 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:ea2b1bed-aa3b-5be9-992d-134fca2825e6", "id": "CVE-2026-56822", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56822 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:88551271-5379-56c2-a569-bd049ac4bbb8", "id": "CVE-2026-59898", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59898 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:79038183-2f44-5417-8a91-f1e575bbab4c", "id": "CVE-2026-59899", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59899 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:e14b6689-1d48-5cf6-a99e-2ebc70b14b16", "id": "CVE-2026-59900", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59900 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:62e86d43-0408-584e-9658-6efb364c9020", "id": "CVE-2026-59901", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59901 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:1c3e47c9-6796-5edc-ab86-89adf953e4da", "id": "CVE-2026-59902", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59902 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:f9a4b72d-0aee-5a55-91d9-9ff555bc2b26", "id": "CVE-2026-59903", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59903 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:88c0b96b-257c-5527-9c8d-e0d339440630", "id": "CVE-2026-59919", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59919 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:e0226723-7143-5e00-ae06-9db475e6c77c", "id": "CVE-2026-59920", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59920 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:ec423f1a-cd92-52cf-a06a-a82f7825d46f", "id": "CVE-2026-59921", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59921 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:1a62cc22-b33f-58bf-89fc-d5fb84c8798b", "id": "CVE-2026-73507", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-73507 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:735195cb-4dd0-5d78-85d0-bb45029be231", "id": "CVE-2026-73508", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-73508 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:6b2088d4-e1ed-5fb4-9d81-69a915126de6", "id": "GHSA-mfg7-5gfp-c4w3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:6a560e61-09d9-56a2-aca6-53e1717b6bc2", "id": "GHSA-v74w-7mr3-4qg3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.1" } ] } ], "dependencies": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.1" } ] }