{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:209a7b7e-41cd-527d-a3cf-5b225c3b864d", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.3", "type": "library", "group": "io.netty", "name": "netty-codec-mqtt", "version": "4.1.130.Final-tuxcare.3", "purl": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.3" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:a3139e21-d114-5d6a-8801-516cf5b53386", "id": "CVE-2025-55163", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-55163 does not affect version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-mqtt. already_fixed \u2014 The target Netty 4.1.130.Final repository already contains the complete MadeYouReset (CVE-2025-55163) mitigation. The Http2MaxRstFrameLimitEncoder defense class is present, integrated into the HTTP/2 connection handler builder, and enabled by default for servers with a threshold of 200 RST_STREAM frames per 30-second window. All protocol-error-triggered RST writes route through the protected en..." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:e0b65896-5063-5cfa-8ff1-aa27469755b9", "id": "CVE-2026-33870", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33870 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:32fa20c5-6c25-5e05-9106-0da0e48ab648", "id": "CVE-2026-33871", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33871 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:88b88878-ea31-5910-8ff8-785e38312a27", "id": "CVE-2026-41417", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41417 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:c7497b71-327d-5d20-b34b-8b1c01186e0d", "id": "CVE-2026-42578", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42578 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:756b5b02-878f-560f-8e7a-5aabed6d614c", "id": "CVE-2026-42579", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42579 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:728ef65a-07b8-59c0-8d71-234e0a03d271", "id": "CVE-2026-42580", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42580 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:6b38cb88-4f4e-546c-a667-b2b3b907f304", "id": "CVE-2026-42581", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42581 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:1ad14786-e7ed-5ca2-9fa9-542cd149f67a", "id": "CVE-2026-42583", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42583 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:cfeb6bac-e124-5477-a44f-68f1f46fc90b", "id": "CVE-2026-42584", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42584 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:4f6a2aea-50ee-5c59-8af6-dccd88ee3aea", "id": "CVE-2026-42585", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42585 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:516bf315-0f22-5f9f-a6fd-813c44182ef1", "id": "CVE-2026-42586", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42586 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:26b38d4f-07c9-588e-bf9c-8b2e45faf836", "id": "CVE-2026-42587", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42587 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:88e3b33f-d280-585e-93da-a822538b8e04", "id": "CVE-2026-44248", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44248 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:ea99567b-aea6-51fe-8436-0f66f995f134", "id": "CVE-2026-44249", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44249 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:ab65efd6-811b-5c76-a869-0aedb77bc4d1", "id": "CVE-2026-44250", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44250 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:35028984-bc1e-5e7a-a1ca-42b32f4849d4", "id": "CVE-2026-44890", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:1b2efbbf-0096-5546-8010-a779ce437b4e", "id": "CVE-2026-44891", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44891 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:12a83425-400a-5ae7-be19-b62f501a8096", "id": "CVE-2026-44893", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44893 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:4be629a1-3c45-59c3-9183-2300af3fe394", "id": "CVE-2026-45416", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45416 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:3d2a57c5-cb0d-50c3-9022-6b544c874316", "id": "CVE-2026-45536", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45536 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:5c860fb4-7140-5184-aabd-65b24b6dddb0", "id": "CVE-2026-45673", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-45673 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:4ef5142f-1580-5dee-965b-56b576127c47", "id": "CVE-2026-45674", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-45674 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:c3a7f4ed-3fd0-5670-a3a6-e521bee1c9f2", "id": "CVE-2026-46340", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46340 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:d7c07434-4796-5f21-90a8-505b3e246a96", "id": "CVE-2026-47244", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47244 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:fadd2fde-0baf-513e-b5a6-d8ffb5554843", "id": "CVE-2026-47691", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47691 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:0940b77c-1ed1-5c77-b365-8947a8659cb6", "id": "CVE-2026-48006", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48006 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:90a2de44-6fcb-581f-a5c6-207e5b881c00", "id": "CVE-2026-48043", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48043 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:b6224982-0519-5433-8621-c9ee1197be4c", "id": "CVE-2026-48059", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48059 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:59b693b1-8571-5890-a35f-32edda07e5d7", "id": "CVE-2026-50010", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50010 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:7381abbf-993d-5547-adaa-3018005902e3", "id": "CVE-2026-50011", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-50011 does not affect version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-mqtt. Patches already applied: bff98ee51b5d0b7ee25fd5005f2169f2a0467efa (already in target via d5b4e38845f5 'Backport CVE-2026-44890 to 4.1.130.Final')" }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:4d3a6bad-344d-5591-9571-8b517ffb9802", "id": "CVE-2026-50020", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50020 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:786be044-c348-518b-9919-03499c53f97f", "id": "CVE-2026-50560", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:486b728a-9d76-5983-a9ee-94eebe225856", "id": "CVE-2026-55831", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-55831 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:f994073e-41ae-5fe1-b2ca-c4498816fcfa", "id": "CVE-2026-55833", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-55833 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:9d8dabba-f712-5793-a50b-fa52a29d3ff5", "id": "CVE-2026-55851", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-55851 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:61dbb8cf-369f-5cf7-a008-c7bbab0ee729", "id": "CVE-2026-56745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56745 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:58af95a5-5912-5b24-a4f8-70e3546d4148", "id": "CVE-2026-56746", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56746 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:47e6e07f-23f1-5067-b5c6-310840106eeb", "id": "CVE-2026-56817", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56817 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:6db62d12-f9c6-5459-99a0-08f0a9f44a89", "id": "CVE-2026-56818", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56818 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:fa00ebaf-3df8-5814-b406-312bde0be4c5", "id": "CVE-2026-56819", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56819 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:b3d7a0ba-0395-5096-b49b-7b1e5bad6d14", "id": "CVE-2026-56820", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56820 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:cba0cf02-e6d9-5d55-a214-fb4c5bb36f0a", "id": "CVE-2026-56821", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56821 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:732267c9-e1ee-5067-819c-62e3d8defd93", "id": "CVE-2026-56822", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56822 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:1ad4054b-8997-54f3-8c61-8d0295bf6d31", "id": "CVE-2026-59898", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59898 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:a852a06c-43c4-51e3-8ac1-e5f89a913cd2", "id": "CVE-2026-59899", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59899 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:9fa5252e-c4a1-5d8c-bfee-bca0784e9330", "id": "CVE-2026-59900", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59900 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:567485aa-faa0-5216-aa20-232832426b85", "id": "CVE-2026-59901", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59901 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:f30a5a42-03d4-58d9-9768-897a385c8f94", "id": "CVE-2026-59902", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59902 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:92ab3f70-3dfb-54d0-9652-2fd39c31b7eb", "id": "CVE-2026-59903", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59903 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:b648c02f-8de4-523c-aa02-e7ad34163371", "id": "CVE-2026-59919", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59919 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:68126908-293a-5bf8-be44-f7ba0c1d803f", "id": "CVE-2026-59920", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59920 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:fbfdd5a8-f47a-5015-a440-51501c15ed87", "id": "CVE-2026-59921", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59921 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:7769d54a-b8e7-530c-9a43-2c5b7d798eaa", "id": "CVE-2026-73507", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-73507 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:a1763dff-bcbe-59b7-b060-a7179bac840e", "id": "CVE-2026-73508", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-73508 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:10ac6297-3ba9-505a-be32-3f68989856be", "id": "GHSA-mfg7-5gfp-c4w3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:bf0d6c1d-188f-5b08-8c79-cd495a51e54f", "id": "GHSA-v74w-7mr3-4qg3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-mqtt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.3" } ] } ], "dependencies": [ { "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.130.Final-tuxcare.3" } ] }