{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:e8bf30b4-68c9-5f19-9a87-8a66ac2ff825",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/io.netty/netty-codec-redis@4.1.73.Final-tuxcare.4",
      "type": "library",
      "group": "io.netty",
      "name": "netty-codec-redis",
      "version": "4.1.73.Final-tuxcare.4",
      "purl": "pkg:maven/io.netty/netty-codec-redis@4.1.73.Final-tuxcare.4"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:c1f3390f-d4c2-5513-add6-6cd5e26c30d3",
      "id": "CVE-2022-24823",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-24823 is fixed in version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:15fe65d2-afa3-5b79-9d72-6c7601122477",
      "id": "CVE-2022-41881",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-41881 is fixed in version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:000419e7-3993-58ff-a1df-94b69331fc94",
      "id": "CVE-2022-41915",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-41915 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7a06e974-fac1-5de2-abcf-f72f34567f72",
      "id": "CVE-2023-34462",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-34462 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9c23d2e3-6123-5b96-8dac-19814728082a",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-44487 is fixed in version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:646f3260-b089-5f30-b921-0102468ee7ab",
      "id": "CVE-2023-4586",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2023-4586 is a false positive for io.netty:netty-codec-redis 4.1.73.Final-tuxcare.4."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bf9f0280-b5f0-56aa-bf22-3735ce5c6aad",
      "id": "CVE-2024-29025",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-29025 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8561ae79-d830-5517-9df7-b6d88b2fa67a",
      "id": "CVE-2024-47535",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-47535 is fixed in version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:51b5c2d0-558f-5314-8eae-c5b20264937d",
      "id": "CVE-2025-24970",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-24970 is fixed in version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:efab1dcf-abc4-5f1f-aebb-bbd5ce4dadb4",
      "id": "CVE-2025-25193",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-25193 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cdc91a93-5a05-5f52-873c-b019395edf3d",
      "id": "CVE-2025-55163",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-55163 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e2bec788-ad16-553f-997f-0c2c215148d5",
      "id": "CVE-2025-58056",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58056 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:38b8be67-1458-5362-ace4-271731af6a87",
      "id": "CVE-2025-58057",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58057 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:03cf0710-4ba7-5286-ad91-7a576af786d3",
      "id": "CVE-2025-59419",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-59419 is fixed in version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d3ada731-a3c4-5b30-8c26-acdcb591c0b1",
      "id": "CVE-2025-67735",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-67735 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dc83a5db-8eb4-5321-bd05-73f429f2e01b",
      "id": "CVE-2026-33870",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33870 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a65ca95c-dbb5-5972-ac10-b1820229ca71",
      "id": "CVE-2026-33871",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33871 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:16f1f737-3e42-56b3-84dd-c88c8ca0f7ee",
      "id": "CVE-2026-41417",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41417 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e5bd7e0c-1630-5729-918b-579ee991b391",
      "id": "CVE-2026-42577",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42577 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4d827488-65d9-5bfa-8f30-e854c74af773",
      "id": "CVE-2026-42578",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42578 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:078ace60-2946-530f-a817-b7b32e0eac5f",
      "id": "CVE-2026-42579",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42579 is fixed in version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:05a83c44-3cac-5f78-99b3-40e2da71857b",
      "id": "CVE-2026-42580",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42580 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a2216f27-c48f-5916-be1c-2f5266baab8a",
      "id": "CVE-2026-42581",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42581 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:62bf4e39-89c0-5a1c-b2c8-c0855e72904a",
      "id": "CVE-2026-42583",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42583 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6d7ecf79-aa0d-5976-bc1d-1a0be91bf51a",
      "id": "CVE-2026-42584",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42584 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8a96e700-cf00-58ce-8a86-f60f7d9ad8c3",
      "id": "CVE-2026-42585",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42585 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:46a2a1fd-3ade-5ad1-9684-e8f84e6d2853",
      "id": "CVE-2026-42586",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42586 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8b2eb39b-8826-5f1d-bf27-ff5a1cc616d0",
      "id": "CVE-2026-42587",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42587 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e4395723-ff4b-541e-af6b-6967387e6966",
      "id": "CVE-2026-44248",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44248 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7e31d6f1-82fe-5fa8-bfcc-2348db9b7a21",
      "id": "CVE-2026-44249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44249 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a11bf7b0-4656-5c1e-8903-dde407b56ae6",
      "id": "CVE-2026-44250",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44250 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2671940f-ecce-5f29-9d1b-9d6854152428",
      "id": "CVE-2026-44890",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cc99ba2b-cf59-5303-8c11-459c8f9a8cc2",
      "id": "CVE-2026-44891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44891 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c30b080d-8262-5152-9108-632d06b6eabf",
      "id": "CVE-2026-44893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44893 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f5be2abf-9796-5ba5-b8b7-79bb0bc170a5",
      "id": "CVE-2026-45416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45416 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:13b16ff4-3bc4-5f41-8466-db9af68a68df",
      "id": "CVE-2026-45536",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45536 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2cf46e9d-b5eb-549e-a8a6-4734219f4204",
      "id": "CVE-2026-45673",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45673 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b12a5cd7-0a73-5a54-b93d-7c137608bec9",
      "id": "CVE-2026-45674",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-45674 is fixed in version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e2937dd4-c034-5474-99cf-b57cb2d790be",
      "id": "CVE-2026-46340",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-46340 is fixed in version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1297685b-f2c9-5da5-bdfa-f2066e8459ab",
      "id": "CVE-2026-47244",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47244 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:70c8761c-ce3e-5ff0-a9f2-453a8d8ab637",
      "id": "CVE-2026-47691",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47691 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d95ca221-4ddc-5d7e-9924-c7e43fd84ebc",
      "id": "CVE-2026-48006",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48006 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:90cd147a-5b7d-5e1f-b57c-17542d1a2280",
      "id": "CVE-2026-48043",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-48043 does not affect version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-redis. not_affected \u2014 Version 4.1.73 is not affected by CVE-2026-48043. The target uses a loop-based architecture with try-finally protection (introduced in 2016) that prevents the buffer leak described in the CVE. The vulnerable ChannelInboundHandlerAdapter pattern that the upstream patch fixes does not exist in this version."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9230ccc2-de78-5717-83ad-0161882376ad",
      "id": "CVE-2026-48059",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48059 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bc87fe50-3135-5aa8-a406-eb087699bafc",
      "id": "CVE-2026-50010",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50010 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1070879e-b2f4-5aa9-a1c0-d21a30053e68",
      "id": "CVE-2026-50011",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50011 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5e487060-ca41-5432-80c7-10ae0e110631",
      "id": "CVE-2026-50020",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50020 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8ec8a912-d31e-5f88-acd4-81b98fbb9ec2",
      "id": "CVE-2026-50560",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6bd77b56-0580-5e0a-baf3-81c8c3dba844",
      "id": "CVE-2026-55831",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55831 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bab2d2d1-21d8-5fe4-af48-da9a41fc658d",
      "id": "CVE-2026-55833",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55833 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7620a090-3b83-56d3-a1ae-afbde3653d7b",
      "id": "CVE-2026-55851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55851 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:61f5c120-4273-59f4-8d55-771ac151830c",
      "id": "CVE-2026-56745",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56745 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:86bd9258-67ef-533b-9ee5-9b6709a1989f",
      "id": "CVE-2026-56746",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56746 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1e4efcd8-bf59-58a6-a746-72b52f077fdb",
      "id": "CVE-2026-56817",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56817 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:01cc6fba-9888-570f-95cc-8826708b669a",
      "id": "CVE-2026-56818",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-56818 does not affect version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-redis. not_affected \u2014 The target version 4.1.73.Final-tuxcare.2 is NOT AFFECTED by CVE-2026-56818. The vulnerable code pattern (configurable `maxElements` limit check without cleanup, contrasting with `maxNestedArrayDepth` limit check WITH cleanup) was introduced in version 4.1.135.Final through commits e51c64c964 and 728c98b8ec (dated 2026-06-01/02). The target version predates these features entirely and does not ..."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6fda21a3-6ed1-563d-80d9-79e6f5b1e17f",
      "id": "CVE-2026-56819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56819 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8efc2bd6-e17b-560c-b52b-12c126c1033c",
      "id": "CVE-2026-59898",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59898 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c723ee45-cbe9-5e40-84a1-a048065c467a",
      "id": "CVE-2026-59899",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59899 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5fe94fe6-d0da-5756-8bb0-48b7611ccf88",
      "id": "CVE-2026-59900",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59900 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cc265b22-eda1-5e0f-ba1a-e3d264acaf00",
      "id": "CVE-2026-59901",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59901 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:12e09e8e-8558-5cfc-a775-dea0286f6e57",
      "id": "CVE-2026-59902",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59902 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:701627f4-4279-5c94-b99a-5ff3cd6b6bf1",
      "id": "CVE-2026-59903",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59903 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fcd475e7-a743-535b-8cb9-2701cdb6fd65",
      "id": "CVE-2026-59919",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59919 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f2d90101-e078-5137-a513-afbbcbe6d905",
      "id": "CVE-2026-59920",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59920 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7b7b13cc-1e06-543b-9027-608a0ff6a40f",
      "id": "CVE-2026-59921",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59921 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:040989aa-c78c-570e-8731-22587f67fae7",
      "id": "CVE-2026-73507",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-73507 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:15761beb-7673-5385-ae2d-c4d086195e57",
      "id": "CVE-2026-73508",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-73508 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:02dac359-aa90-5951-9e03-015766a38228",
      "id": "GHSA-mfg7-5gfp-c4w3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bbc599bb-87e1-56e9-9428-16cd8e541ee4",
      "id": "GHSA-v74w-7mr3-4qg3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c7bd88aa-6a0c-5e72-b1de-fd06cb30e11d",
      "id": "GHSA-xpw8-rcwv-8f8p",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-xpw8-rcwv-8f8p affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-codec-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.73.Final-tuxcare.4"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.netty/netty-codec-redis@4.1.73.Final-tuxcare.4"
    }
  ]
}