{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:e4d4ea88-dd8e-54dd-9ada-782b2dc20790",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.122.Final-tuxcare.2",
      "type": "library",
      "group": "io.netty",
      "name": "netty-codec-smtp",
      "version": "4.1.122.Final-tuxcare.2",
      "purl": "pkg:maven/io.netty/netty-codec-smtp@4.1.122.Final-tuxcare.2"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:1192215b-9665-55bf-a407-7e172dea13b1",
      "id": "CVE-2025-55163",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55163 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:12dc6b02-3013-599a-964d-5b7fdae1382b",
      "id": "CVE-2025-58056",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-58056 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:82355d75-4c49-5545-859f-7368653ca73b",
      "id": "CVE-2025-58057",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-58057 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5fec2972-e055-5249-a0f4-f41f540a75c3",
      "id": "CVE-2025-59419",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-59419 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4e32feeb-80e1-5e2e-9f60-aa9c9b4caabd",
      "id": "CVE-2025-67735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-67735 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c19fec40-8299-5cf6-91ec-6e36e0d1321b",
      "id": "CVE-2026-33870",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-33870 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e9836e79-80d6-5fe2-99d7-7d0282f71eca",
      "id": "CVE-2026-33871",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-33871 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6e882084-8423-5e1a-9f2a-9d5cfca715ca",
      "id": "CVE-2026-41417",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41417 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2a68f1b3-43b6-54a7-a312-bd35a176f32c",
      "id": "CVE-2026-42577",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-42577 does not affect version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-smtp. CVE-2026-42577 affects Netty 4.2.x only (advisory range >= 4.2.0.Final, < 4.2.13.Final). An fd left registered with an epoll event mask of 0 is woken forever by the unmaskable EPOLLERR/EPOLLHUP after a RST on a half-closed connection. Target 4.1.122.Final is NOT affected due to architectural differences. The patch modifies EpollIoHandler.java and EpollIoOps.java, part of 4.2's IoHandler/IoOps abstraction. Neither file exists in 4.1.x, which registers via EpollEventLoop.modify() off AbstractEpollChannel.flags. That field is seeded Native.EPOLLET, and no read/close/half-close path clears it (only the explicit pre-registration setEpollMode(LEVEL_TRIGGERED) opt-in), so the registration stays edge-triggered and the RST is reported once per edge instead of on every epoll_wait. The chain from INPUT (connection state change) to GOAL (CPU busy-loop via empty event mask) is broken at step (ii): the target cannot produce an empty event mask. Verdict: not_affected. Justification: code_not_reachable (Rule 5 Type A2)."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d311eb0f-f779-5c2b-9733-9df368e5bc7c",
      "id": "CVE-2026-42578",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42578 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f5e734e1-ee6c-577a-b3a1-39e6e9bbb54d",
      "id": "CVE-2026-42579",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42579 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:56fdb016-10ba-5836-bd4f-493dc5d3828e",
      "id": "CVE-2026-42580",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42580 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:85a9e5d2-b282-5143-80c4-e6d643354068",
      "id": "CVE-2026-42581",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42581 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:853b5cc4-f905-5983-9246-aaf13b282403",
      "id": "CVE-2026-42583",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42583 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:206e0328-a176-5b69-a7e0-fbff5ef5c4bd",
      "id": "CVE-2026-42584",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42584 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b290680c-df52-5c34-9967-ee84c08d2c93",
      "id": "CVE-2026-42585",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42585 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f7b34249-cf38-5d9a-a6bf-0c00375d773a",
      "id": "CVE-2026-42586",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42586 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:84b0bb08-d342-528f-93ad-868e926930c3",
      "id": "CVE-2026-42587",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42587 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a85347cd-ae0a-5fa7-ab89-f3aa04f9ff70",
      "id": "CVE-2026-44248",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44248 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:178965d1-b48a-59d6-ae31-cd27c7fd4ffc",
      "id": "CVE-2026-44249",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44249 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ed70e4ae-4fe0-5766-a3a0-00b99002970f",
      "id": "CVE-2026-44250",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44250 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:22efc7bf-c3be-5b38-ba12-423b215fce8a",
      "id": "CVE-2026-44890",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5eb7a27d-a6fc-5035-989a-5277eb952bda",
      "id": "CVE-2026-44891",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44891 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2dc2634c-6f2e-5a4f-b00a-9351bc6f4ae5",
      "id": "CVE-2026-44893",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44893 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6d649163-c8fe-54d5-b89e-ae508c036218",
      "id": "CVE-2026-45416",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-45416 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3341df47-27f9-5605-823b-4250fdcd1667",
      "id": "CVE-2026-45536",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-45536 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0161a61b-8191-5c48-a027-81a571412554",
      "id": "CVE-2026-45673",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-45673 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:acc17355-27ad-5646-aba3-2899e462abcd",
      "id": "CVE-2026-45674",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-45674 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fa4e8aa8-1925-5499-b2cd-d960dd3f7ea8",
      "id": "CVE-2026-46340",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-46340 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:89aaadd1-b85f-55a5-88b7-6b603778f000",
      "id": "CVE-2026-47244",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47244 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:934a2bd6-39a8-59a6-ad4f-20b6dc88681c",
      "id": "CVE-2026-47691",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47691 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9ba49514-61d0-512a-b33e-28c962a8ccb9",
      "id": "CVE-2026-48006",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-48006 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a0b29116-b319-50c9-a4e7-abe7d30df666",
      "id": "CVE-2026-48043",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-48043 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e91cf05a-0e06-5350-9af3-d49909a75748",
      "id": "CVE-2026-48059",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-48059 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3779b1f1-5c54-5d2e-b421-9fa208e9726f",
      "id": "CVE-2026-50010",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50010 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:892d263d-8fde-5aba-9889-f65703f34516",
      "id": "CVE-2026-50011",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50011 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ea39104f-f19b-5e37-a37d-25b83bc8cb8d",
      "id": "CVE-2026-50020",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50020 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bc69c524-281e-529d-85ae-248f95532a8e",
      "id": "CVE-2026-50560",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e6462998-f74d-507a-a246-42d3d31ebad8",
      "id": "CVE-2026-55831",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-55831 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ef137470-b044-5b6e-aff0-928c339d257f",
      "id": "CVE-2026-55833",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-55833 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:74b16f04-25f1-58da-8376-50cadee3fa17",
      "id": "CVE-2026-55851",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-55851 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1b919c34-a5ad-55bf-9651-a9364088f058",
      "id": "CVE-2026-56745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-56745 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3581a1a5-a552-5c4d-bb59-5b406f93706c",
      "id": "CVE-2026-56746",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-56746 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1ab99df2-c502-5d73-b142-b7740c147c4c",
      "id": "CVE-2026-56817",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-56817 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9783fb49-12fc-5786-919a-4d00d344a83a",
      "id": "CVE-2026-56818",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-56818 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b920e3fa-878e-5f4b-be03-f7a61e4a5c72",
      "id": "CVE-2026-56819",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-56819 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e6c8a79d-622e-563a-8877-699bdd8533b4",
      "id": "CVE-2026-56820",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-56820 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8ff179fe-e645-5284-9298-dc89d35daf79",
      "id": "CVE-2026-56821",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-56821 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b6457d4e-4248-5dd7-b193-499d08ebd582",
      "id": "CVE-2026-56822",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-56822 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a4f6f52a-0aa9-5e5c-a619-5f9e80f62371",
      "id": "CVE-2026-59898",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59898 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b3592072-f356-5e6d-8e49-5172e467fa24",
      "id": "CVE-2026-59899",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59899 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b70e5885-9dc0-5559-8414-3f5ba80fd164",
      "id": "CVE-2026-59900",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59900 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:33575644-82ba-58c3-aa01-65aed3451cd2",
      "id": "CVE-2026-59901",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59901 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cb217ea7-386c-5d5a-b6b7-2eb6b29180e8",
      "id": "CVE-2026-59902",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59902 affects version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0804fd55-451c-5841-b13b-0dc7401c3277",
      "id": "CVE-2026-59903",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59903 affects version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a10ed93a-4b5e-5e2d-a0de-fb7298881885",
      "id": "CVE-2026-59919",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59919 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3d2e3dd9-0bbd-55ec-9733-85d0063ffc36",
      "id": "CVE-2026-59920",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59920 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6144cf8b-07b7-51a3-9b15-c1594f08349b",
      "id": "CVE-2026-59921",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59921 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d7e9b53b-0d0a-583b-9bf6-1b1457eb9b89",
      "id": "CVE-2026-73507",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-73507 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1fc49959-b003-530b-a7c2-81b6d0880eb1",
      "id": "CVE-2026-73508",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-73508 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:435b8201-fd46-5bcc-8a69-440d962a0388",
      "id": "GHSA-mfg7-5gfp-c4w3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5ff3ea6f-1a4d-53ef-a55f-dc4b2b1b3497",
      "id": "GHSA-v74w-7mr3-4qg3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.122.Final-tuxcare.2"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.122.Final-tuxcare.2"
    }
  ]
}