{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:055d94ab-47da-5ef8-bc0d-1046af84e53a",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.82.Final-tuxcare.7",
      "type": "library",
      "group": "io.netty",
      "name": "netty-codec-mqtt",
      "version": "4.1.82.Final-tuxcare.7",
      "purl": "pkg:maven/io.netty/netty-codec-mqtt@4.1.82.Final-tuxcare.7"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:8fc220ea-4038-54b0-807b-a07449907249",
      "id": "CVE-2022-41881",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-41881 is fixed in version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:33bfb2ae-c804-55f8-a94d-15b278a4baaf",
      "id": "CVE-2022-41915",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-41915 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7b413d33-a665-5688-bb92-bd23901ff27e",
      "id": "CVE-2023-34462",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-34462 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:12f1c206-ff4d-5671-904b-def466fcd472",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-44487 is fixed in version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:40ca2790-8b3c-5bdd-b83f-0d61cd0d46aa",
      "id": "CVE-2023-4586",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2023-4586 is a false positive for io.netty:netty-codec-mqtt 4.1.82.Final-tuxcare.7."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e5a08e9d-47f2-5578-a092-0d1d9f7895d1",
      "id": "CVE-2024-29025",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-29025 is fixed in version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b9416877-3369-5c56-86e0-f95a5fef1b26",
      "id": "CVE-2024-47535",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-47535 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a78aea8e-1409-534a-8f7e-e939ef1803d6",
      "id": "CVE-2025-24970",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-24970 is fixed in version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6d4c8bc6-c793-5b91-9684-58a18f126d8e",
      "id": "CVE-2025-25193",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-25193 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cdb36528-6270-5054-9f53-3ed09d0880d6",
      "id": "CVE-2025-55163",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55163 is fixed in version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:40c574db-8398-5196-b21d-bdefb05c2c81",
      "id": "CVE-2025-58056",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58056 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:693d515e-8eb9-5315-a089-48a51f752388",
      "id": "CVE-2025-58057",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-58057 is fixed in version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:681aa846-2234-577e-928f-01ed938077b6",
      "id": "CVE-2025-59419",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-59419 is fixed in version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2b470450-98f0-5036-8cd8-71ee4fc76fe1",
      "id": "CVE-2025-67735",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-67735 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9f7a15d9-04fb-57c2-a79b-d04fce5bae7e",
      "id": "CVE-2026-33870",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33870 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0b7c2325-4517-5e6a-9ea5-2373f658ac74",
      "id": "CVE-2026-33871",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33871 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:49295ceb-11f6-5bad-ab95-3c933c36fdd2",
      "id": "CVE-2026-41417",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41417 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a657f345-c708-5364-92e8-04268167cb0e",
      "id": "CVE-2026-42577",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42577 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fd54feac-2566-5af5-b8ed-f0db338ddf88",
      "id": "CVE-2026-42578",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42578 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:27ac1307-2228-54da-9384-9d9057b5ce7e",
      "id": "CVE-2026-42579",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42579 is fixed in version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9027103a-5967-5e8a-89c1-2d67d83533b8",
      "id": "CVE-2026-42580",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42580 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1d87b505-7f0a-5cad-a286-6d83e40ad2c1",
      "id": "CVE-2026-42581",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42581 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ac1568b4-d73c-5315-bb77-a97bd1fc226d",
      "id": "CVE-2026-42583",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42583 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2d648a2a-bd72-50bc-9dc2-a410541818f3",
      "id": "CVE-2026-42584",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42584 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:780575e9-42be-5bd5-bc45-2e9e47958231",
      "id": "CVE-2026-42585",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42585 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:38287653-d6d7-56ec-b9e6-a697d734530d",
      "id": "CVE-2026-42586",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42586 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:027dfd20-0794-5e8f-9f0a-0cb464b6b17b",
      "id": "CVE-2026-42587",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42587 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2060be86-fb44-54c5-a1c3-65fb05c69a83",
      "id": "CVE-2026-44248",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44248 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e354441a-4f87-584e-bd57-9045b5063284",
      "id": "CVE-2026-44249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44249 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:aae4bc18-8157-54b9-a3b8-6b9f74ed6749",
      "id": "CVE-2026-44250",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44250 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c341aa68-d2ae-5654-9810-4ef666f5293e",
      "id": "CVE-2026-44890",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c9ae0c1b-63ad-513f-8afa-1f98982d9d07",
      "id": "CVE-2026-44891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44891 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:34ee26e1-a250-5d14-884f-ca8e0e44e654",
      "id": "CVE-2026-44893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44893 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c849c29e-e83b-528f-b4dc-9e52c06bc97a",
      "id": "CVE-2026-45416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45416 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:675aa530-d34c-514e-a23b-c14fa42cf7bc",
      "id": "CVE-2026-45536",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45536 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7672b5c5-c2dd-5a82-893b-9fd445568bc5",
      "id": "CVE-2026-45673",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45673 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7b1df8f3-3b0b-5f4a-ac39-15fe12e43ef7",
      "id": "CVE-2026-45674",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-45674 is fixed in version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c965df2a-6169-592e-af61-caa92696d7c2",
      "id": "CVE-2026-46340",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-46340 is fixed in version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1b010a55-0124-588f-91f6-b79e25ab2141",
      "id": "CVE-2026-47244",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47244 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:99ec46ba-ab47-5b1c-97a7-31b3b5faab55",
      "id": "CVE-2026-47691",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47691 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:89346d3d-4376-5ec5-835a-ce6146f782a3",
      "id": "CVE-2026-48006",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48006 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f6d39023-c4b8-5799-897f-54513d233dcb",
      "id": "CVE-2026-48043",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-48043 is fixed in version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c56c8338-ee8e-512a-b4e5-fc8c4e8b0173",
      "id": "CVE-2026-48059",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48059 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e85502c9-bcea-5358-b67c-59620eb78588",
      "id": "CVE-2026-50010",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50010 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9f7b722a-3e90-5034-82ba-10fbf6e40e71",
      "id": "CVE-2026-50011",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50011 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7d423a98-4846-55ca-9609-4020aca9742b",
      "id": "CVE-2026-50020",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50020 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:78541aed-6208-5d91-bc01-bd2dec37c0e8",
      "id": "CVE-2026-50560",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b869d579-fb8e-5e4d-b212-5b1c1e6af935",
      "id": "CVE-2026-55831",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55831 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2880c994-01d6-509e-8422-8f914e1b3f2e",
      "id": "CVE-2026-55833",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55833 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:15e7573e-9b12-5992-82b8-c0ee0b3e84fe",
      "id": "CVE-2026-55851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55851 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:027f4dc3-0fbd-5460-9a1f-097d113d1883",
      "id": "CVE-2026-56745",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56745 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:00b2c7ed-00b1-562b-8d46-4a25e759e70d",
      "id": "CVE-2026-56746",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56746 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:14a60aa8-9205-58f2-b25b-ed606e814ed2",
      "id": "CVE-2026-56817",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56817 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3a9fa889-d180-5691-a80e-6821b0bc988b",
      "id": "CVE-2026-56818",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-56818 does not affect version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-mqtt. not_affected \u2014 Version 4.1.82.Final is not affected by CVE-2026-56818. The vulnerability exists in the maxElements limit check that was introduced in version 4.1.135.Final (commit e51c64c964). Version 4.1.82.Final predates this security feature entirely - it has no maxElements configuration, no maxElements validation check, and therefore cannot exhibit the vulnerable pattern described in the CVE (throwing wit..."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4a3f4db6-5e15-545f-9796-86b54e896086",
      "id": "CVE-2026-56819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56819 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8e8ce1cc-7f47-5118-829a-afad7551de48",
      "id": "CVE-2026-59898",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59898 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d3326f4c-f0dc-5fcb-87b8-58792dd1d91e",
      "id": "CVE-2026-59899",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59899 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d6c3892c-afe0-52b0-8ac0-17b75edac08e",
      "id": "CVE-2026-59900",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59900 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:42325906-185b-5642-805e-e2870b477d18",
      "id": "CVE-2026-59901",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59901 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5ed1770f-55b4-504e-addd-c2f333e7c7ba",
      "id": "CVE-2026-59902",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59902 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:57477fd4-d8f8-509b-9af2-2357349aa870",
      "id": "CVE-2026-59903",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59903 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1f410d7d-6602-507f-b903-9741848cf36d",
      "id": "CVE-2026-59919",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59919 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d1b93aaf-7412-5838-98bb-38166abc70e5",
      "id": "CVE-2026-59920",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59920 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e361aca3-1420-5eb1-b298-ad7f5f8aa31b",
      "id": "CVE-2026-59921",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59921 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cf255a52-6f8d-5711-af77-9928472a46c6",
      "id": "CVE-2026-73507",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-73507 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:072bd672-dab7-5671-8b3b-9a3df16fd4da",
      "id": "CVE-2026-73508",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-73508 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4981bd62-8e09-5e0c-87fd-02334bde7392",
      "id": "GHSA-mfg7-5gfp-c4w3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3f219b75-67ca-5200-adf5-c67be72e7d37",
      "id": "GHSA-v74w-7mr3-4qg3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d42c98b1-71ee-5e07-bada-e011b3b26037",
      "id": "GHSA-xpw8-rcwv-8f8p",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-xpw8-rcwv-8f8p is fixed in version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-mqtt."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.82.Final-tuxcare.7"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.netty/netty-codec-mqtt@4.1.82.Final-tuxcare.7"
    }
  ]
}