{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:275edcdf-4cb2-5daf-9ff9-aa92ae548abc", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.2", "type": "library", "group": "io.netty", "name": "netty-codec-mqtt", "version": "4.1.130.Final-tuxcare.2", "purl": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.2" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:76c44923-6ba2-5caf-9c70-fde768443997", "id": "CVE-2025-55163", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-55163 does not affect version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-mqtt. already_fixed \u2014 The target Netty 4.1.130.Final repository already contains the complete MadeYouReset (CVE-2025-55163) mitigation. The Http2MaxRstFrameLimitEncoder defense class is present, integrated into the HTTP/2 connection handler builder, and enabled by default for servers with a threshold of 200 RST_STREAM frames per 30-second window. All protocol-error-triggered RST writes route through the protected en..." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:534f0246-114c-51c4-953e-4cf35ab0ef39", "id": "CVE-2026-33870", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33870 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:22886cdd-61a5-5ffb-a150-ac4b950b52c3", "id": "CVE-2026-33871", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33871 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:7d1eb1c2-4cc1-5ae4-a547-ffd4a6937db8", "id": "CVE-2026-41417", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41417 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:7a20a69c-89b9-5663-8f91-57627bceb03f", "id": "CVE-2026-42578", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42578 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:4210efd3-501e-54ec-ae09-57b11416ef56", "id": "CVE-2026-42579", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42579 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:9875c4ee-6d02-5122-a05a-98ac68a13010", "id": "CVE-2026-42580", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42580 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:1d73a23e-b57a-56ce-96da-c33e91f4a14e", "id": "CVE-2026-42581", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42581 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:606f0bf7-ea6d-51b1-b3e8-d873e6c085d9", "id": "CVE-2026-42583", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42583 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:d02a3a65-d24d-5e27-8996-4f5cf9690bc6", "id": "CVE-2026-42584", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42584 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:922987fd-3505-5850-b73e-ae35946f9346", "id": "CVE-2026-42585", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42585 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:313a5b4d-a59e-5fce-88b7-4b300843131c", "id": "CVE-2026-42586", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42586 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:06abd4e7-1a27-58e2-8020-204740e51092", "id": "CVE-2026-42587", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42587 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:37393f5a-25da-548f-b10e-c2b3b1456a6a", "id": "CVE-2026-44248", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44248 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:d08fd054-89e5-5a33-8982-f75b61c3ec19", "id": "CVE-2026-44249", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44249 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:3aee1a7e-e48d-5adf-b1c2-80e30f321d85", "id": "CVE-2026-44250", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44250 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:a1f8bd4c-eb33-53fa-9b44-74ccf48b7e85", "id": "CVE-2026-44890", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:91e89312-c068-54b9-92a4-8eaec33a215b", "id": "CVE-2026-44891", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44891 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:94ab18c5-762c-5f4f-b053-42fa3f2b685c", "id": "CVE-2026-44893", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44893 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:1c18f4a8-4980-58a0-a4c0-506319055068", "id": "CVE-2026-45416", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45416 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:16378d2b-6922-541a-baaa-a52f2cfe896b", "id": "CVE-2026-45536", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45536 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:e48c63ac-8f35-5cc9-bbe2-44210ef7d648", "id": "CVE-2026-45673", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-45673 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:47e87ad3-0f0c-5aaf-b8ad-3c0054bdddef", "id": "CVE-2026-45674", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-45674 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:8942f420-b091-50cf-bfa6-9ed994559537", "id": "CVE-2026-46340", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46340 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:02e1dd19-8a5e-5202-a78d-c125b28d4659", "id": "CVE-2026-47244", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47244 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:e0f1cc47-565d-5b79-b652-5b8492445628", "id": "CVE-2026-47691", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47691 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:ac77a787-246d-5ab5-8743-70833cc04803", "id": "CVE-2026-48006", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48006 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:6813df7d-a2b9-5cd6-a4c8-1dbb503822a1", "id": "CVE-2026-48043", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48043 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:62956ce2-05df-5a4d-bc47-9a51800220be", "id": "CVE-2026-48059", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48059 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:00bc5d6c-a9e9-5f71-9369-8db0a567f763", "id": "CVE-2026-50010", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50010 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:da9f6a09-fffb-5fe2-bb70-f7129ebe9fa5", "id": "CVE-2026-50011", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-50011 does not affect version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-mqtt. Patches already applied: bff98ee51b5d0b7ee25fd5005f2169f2a0467efa (already in target via d5b4e38845f5 'Backport CVE-2026-44890 to 4.1.130.Final')" }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:8c65bb06-8fa7-578f-86f8-12086befca12", "id": "CVE-2026-50020", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50020 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:83fce8bd-96b1-5400-9891-87740050481b", "id": "CVE-2026-50560", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:b165fa3c-a35b-5a17-8e37-14b1e775163e", "id": "CVE-2026-55831", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55831 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:0c466656-d50d-50f4-a4a9-fd08482c9c31", "id": "CVE-2026-55833", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55833 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:9dca1927-78e4-5be0-aa1e-593543b016ff", "id": "CVE-2026-55851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55851 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:fad9469a-dd70-55a0-89b4-364fa1684e0f", "id": "CVE-2026-56745", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56745 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:f66fc13b-1051-5403-beb6-2efab4a6d215", "id": "CVE-2026-56746", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56746 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:b4941126-1250-5e3e-b786-ee3a52ac1037", "id": "CVE-2026-56817", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56817 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:9d9b956f-4b84-5709-82fa-cde82c386343", "id": "CVE-2026-56818", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56818 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:4c31023d-8095-5e26-aa1f-185626763d07", "id": "CVE-2026-56819", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56819 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:2922e728-9185-5ee2-8d02-321985b7319c", "id": "CVE-2026-56820", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56820 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:bf7a0fa0-8b0f-5951-8f65-955ed70b3d91", "id": "CVE-2026-56821", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56821 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:44e1fa19-a58a-5925-95f0-372a40322b65", "id": "CVE-2026-56822", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56822 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:974da7d3-2006-5d2e-bff3-c70cafcb6942", "id": "CVE-2026-59898", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59898 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:bc65f36b-958d-5f4c-b6be-004be2c10055", "id": "CVE-2026-59899", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59899 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:81eea3c8-2443-5656-a466-9cbe7e078014", "id": "CVE-2026-59900", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59900 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:cc1d0456-a025-5945-8cff-005ea47d505a", "id": "CVE-2026-59901", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59901 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:b700f613-3a6e-5703-99a1-7e97dd06f4f2", "id": "CVE-2026-59902", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59902 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:cae2261f-c3a8-5829-b8ae-4564eb76ab3e", "id": "CVE-2026-59903", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59903 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:9c36f769-a382-5de8-a57c-fccc5f3c7b90", "id": "CVE-2026-59919", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59919 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:5f28d002-21e4-5f60-8004-40e07f460942", "id": "CVE-2026-59920", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59920 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:5f2a5553-7dfb-547a-9f8d-07cb08133417", "id": "CVE-2026-59921", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59921 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:d2667f05-8e4c-5405-8bb5-a43adbba8dda", "id": "CVE-2026-73507", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-73507 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:2c28dcdd-79da-55c7-9350-17b9a2b3e2f2", "id": "CVE-2026-73508", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-73508 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:211c4072-3489-5823-8621-b6ee7c6ce8cb", "id": "GHSA-mfg7-5gfp-c4w3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:81829638-4cba-596e-9079-f27b3f641b31", "id": "GHSA-v74w-7mr3-4qg3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.2" } ] } ], "dependencies": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.2" } ] }