{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:39a1b6d7-77a4-5181-ae3f-cac28eefadc6", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.122.Final-tuxcare.1", "type": "library", "group": "io.netty", "name": "netty-codec-smtp", "version": "4.1.122.Final-tuxcare.1", "purl": "pkg:maven/io.netty/netty-codec-smtp@4.1.122.Final-tuxcare.1" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:1e41600c-d3c0-5ceb-83a8-aff2eb54ff3a", "id": "CVE-2025-55163", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-55163 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:2fa51d97-ef03-580c-9d70-7df2e4b4752f", "id": "CVE-2025-58056", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-58056 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:05797e1b-acf3-50a1-b059-ffa09f3e2c76", "id": "CVE-2025-58057", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-58057 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:3a651bd0-e58a-5fad-93b3-96b555189a83", "id": "CVE-2025-59419", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-59419 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:8f57c682-119f-5069-971e-bfedc9f77734", "id": "CVE-2025-67735", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-67735 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:d0a02bf3-f156-529c-8ab7-d0c1ed78d55b", "id": "CVE-2026-33870", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33870 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:ca675da0-bd2a-5be7-8244-2e6d1dd7bd7a", "id": "CVE-2026-33871", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33871 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:708b1423-3c2c-5f8c-9ab1-18fe08023384", "id": "CVE-2026-41417", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41417 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:3b94afe3-cae7-5be3-add5-b90c84d1a9f9", "id": "CVE-2026-42577", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-42577 does not affect version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-smtp. CVE-2026-42577 affects Netty 4.2.x only (advisory range >= 4.2.0.Final, < 4.2.13.Final). An fd left registered with an epoll event mask of 0 is woken forever by the unmaskable EPOLLERR/EPOLLHUP after a RST on a half-closed connection. Target 4.1.122.Final is NOT affected due to architectural differences. The patch modifies EpollIoHandler.java and EpollIoOps.java, part of 4.2's IoHandler/IoOps abstraction. Neither file exists in 4.1.x, which registers via EpollEventLoop.modify() off AbstractEpollChannel.flags. That field is seeded Native.EPOLLET, and no read/close/half-close path clears it (only the explicit pre-registration setEpollMode(LEVEL_TRIGGERED) opt-in), so the registration stays edge-triggered and the RST is reported once per edge instead of on every epoll_wait. The chain from INPUT (connection state change) to GOAL (CPU busy-loop via empty event mask) is broken at step (ii): the target cannot produce an empty event mask. Verdict: not_affected. Justification: code_not_reachable (Rule 5 Type A2)." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:9813e44e-36ce-53a1-ad8b-4d2f5f66d4d1", "id": "CVE-2026-42578", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42578 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:d4507dfa-9012-5743-9204-520edab727a5", "id": "CVE-2026-42579", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42579 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:475315ad-6b5b-5d5d-b11f-0c77af037253", "id": "CVE-2026-42580", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42580 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:3229c5a9-3504-55df-88f8-fba92204a7f9", "id": "CVE-2026-42581", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42581 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:6d2356c7-c6c3-564f-afbb-2b41a5245215", "id": "CVE-2026-42583", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42583 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:9c7b9019-189a-5e26-81d2-84d9b88f8879", "id": "CVE-2026-42584", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42584 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:a2fa6971-ff22-5f10-b388-9d0ca1b9e118", "id": "CVE-2026-42585", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42585 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:d3c690ce-d827-585b-aa98-bf47c55c1148", "id": "CVE-2026-42586", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42586 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:520a96a9-759a-5b2b-be69-763c7fd78760", "id": "CVE-2026-42587", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42587 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:0b57ee1a-8af8-5ad9-8514-22d9497a93ac", "id": "CVE-2026-44248", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44248 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:8cd5378c-21ed-5df3-8502-77cb074432a1", "id": "CVE-2026-44249", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44249 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:ba8874ff-6f61-508b-9c23-bdfdc9582f4b", "id": "CVE-2026-44250", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44250 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:0b4f7465-3edf-52ce-a690-5966410495ff", "id": "CVE-2026-44890", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44890 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:2fc3b328-24ed-5e41-867c-db16dde5f071", "id": "CVE-2026-44891", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44891 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:4be0246c-165f-5a00-ab8b-83f499aea8cd", "id": "CVE-2026-44893", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44893 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:99140a48-74a8-5210-bb74-9b4242dd9c78", "id": "CVE-2026-45416", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45416 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:ed45a09e-aea7-5b0c-a44a-1e1545c0cc68", "id": "CVE-2026-45536", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45536 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:3d827d5f-90f0-5099-8ef6-ea4c173b199a", "id": "CVE-2026-45673", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45673 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:5371b7e1-2810-5c23-8629-60d3fc305eb0", "id": "CVE-2026-45674", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45674 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:f6b2df72-35ba-512a-8b2c-a1067f690693", "id": "CVE-2026-46340", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-46340 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:c97dcabc-43f1-5214-814d-f5dce716a63a", "id": "CVE-2026-47244", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47244 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:b1287dab-3bbf-5bbc-abdd-5561829a973b", "id": "CVE-2026-47691", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47691 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:5c2acbbc-f7bb-5315-b544-c436ccbc0ffd", "id": "CVE-2026-48006", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-48006 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:92814d21-57e3-563d-9bac-d667e1c31af0", "id": "CVE-2026-48043", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-48043 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:63f6d638-e300-5d16-916c-7abbf5ba4391", "id": "CVE-2026-48059", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-48059 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:c599285e-b4ea-5be8-bb17-ed7af628f129", "id": "CVE-2026-50010", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50010 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:3fcbe773-2071-5cb6-a4ce-570d159be49d", "id": "CVE-2026-50011", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50011 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:ee27e1c8-e08f-57da-838a-720789a503ec", "id": "CVE-2026-50020", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50020 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:ea5a3412-de95-5e39-a3a0-02b12dda3a16", "id": "CVE-2026-50560", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50560 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:cef6321e-f10f-5d8b-a79d-3d31429f2dfc", "id": "CVE-2026-55831", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55831 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:67f56346-8e86-5c8d-90c1-55de3865b5d3", "id": "CVE-2026-55833", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55833 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:2fcba8f3-ca43-5f45-851b-605c577c723f", "id": "CVE-2026-55851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55851 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:3d3a9b1f-965a-5e19-a7a8-f9ea5064ce95", "id": "CVE-2026-56745", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56745 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:efaa3582-7f0c-5827-8861-ce03df569b30", "id": "CVE-2026-56746", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56746 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:a3faf081-8b85-58f0-80ed-bedc0ebd7a25", "id": "CVE-2026-56817", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56817 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:bdbefd41-9137-5744-9953-7ac5b7e528c2", "id": "CVE-2026-56818", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56818 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:f57666dd-0f37-527a-85ac-8f9da0f9ef4d", "id": "CVE-2026-56819", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56819 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:02a83b20-8129-553b-b879-484e9930bcb5", "id": "CVE-2026-56820", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56820 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:bab009f6-51d4-51b5-a384-9b33b2f869ac", "id": "CVE-2026-56821", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56821 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:7cbaca91-409f-50cf-88cc-8b170e126dd5", "id": "CVE-2026-56822", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56822 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:08d2f90a-7509-591d-ab41-e5e009bec93b", "id": "CVE-2026-59898", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59898 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:d62e6b0a-86c2-5d4d-8f66-735ea91aef7b", "id": "CVE-2026-59899", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59899 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:7cab719b-5692-539c-a918-e0712c70830a", "id": "CVE-2026-59900", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59900 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:b6b3e201-cbc8-589e-a591-e19a27edb8ed", "id": "CVE-2026-59901", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59901 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:a3a7be38-4fbd-55d5-a207-bd33d867ed9b", "id": "CVE-2026-59902", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59902 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:10d597af-904c-5984-ac40-d3f546359a80", "id": "CVE-2026-59903", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59903 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:6e352f53-9c41-5174-a9e2-40989db0714b", "id": "CVE-2026-59919", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59919 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:f535710a-32c3-5e89-bab2-4830ffd83b74", "id": "CVE-2026-59920", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59920 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:5bbac685-149c-52a4-8d43-7d4511988d25", "id": "CVE-2026-59921", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59921 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:99e75006-08a0-5206-95ce-3873a589cf28", "id": "CVE-2026-73507", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-73507 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:729cc98d-4658-5194-9ab6-da2c1964c64c", "id": "CVE-2026-73508", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-73508 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:b510a0af-af19-502d-91a3-80c9738dbd16", "id": "GHSA-mfg7-5gfp-c4w3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:5905d57a-82fc-566d-aaa8-daee0fc41710", "id": "GHSA-v74w-7mr3-4qg3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.122.Final-tuxcare.1" } ] } ], "dependencies": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.122.Final-tuxcare.1" } ] }