{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:99cc4643-cb0b-5e9d-9d47-c8d1b49a11ca", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.1", "type": "library", "group": "io.netty", "name": "netty-codec-smtp", "version": "4.1.130.Final-tuxcare.1", "purl": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.1" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:d90d91a8-6449-546d-898f-9d87d7231bba", "id": "CVE-2025-55163", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-55163 does not affect version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-smtp. already_fixed \u2014 The target Netty 4.1.130.Final repository already contains the complete MadeYouReset (CVE-2025-55163) mitigation. The Http2MaxRstFrameLimitEncoder defense class is present, integrated into the HTTP/2 connection handler builder, and enabled by default for servers with a threshold of 200 RST_STREAM frames per 30-second window. All protocol-error-triggered RST writes route through the protected en..." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:402d936e-c849-51ac-8ef0-ec24a6b15cb3", "id": "CVE-2026-33870", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33870 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:4eb1dff5-5eee-5e0f-a282-c7d32b72451d", "id": "CVE-2026-33871", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33871 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:1410242b-bc2c-5e4f-bb0e-6d1696818917", "id": "CVE-2026-41417", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41417 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:1459f9ce-cfeb-5e1a-8f21-87f25674e85d", "id": "CVE-2026-42578", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42578 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:341d4dd2-699c-5f04-a194-cd624d4fe8c9", "id": "CVE-2026-42579", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42579 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:cfa644dc-3a5b-5e4a-b2cc-bafb603e412f", "id": "CVE-2026-42580", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42580 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:35029b77-10da-53ce-9249-024cc6a492d2", "id": "CVE-2026-42581", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42581 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:9ccf2f6a-b0de-51d5-883b-caed308e56d5", "id": "CVE-2026-42583", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42583 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:7035d384-44bb-56aa-ad86-52aae7a58582", "id": "CVE-2026-42584", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42584 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:b2b0a625-ec12-5b16-bbfe-26c71b5da204", "id": "CVE-2026-42585", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42585 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:81303ca3-87b1-5a48-8ec4-6a16ecedd7fe", "id": "CVE-2026-42586", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42586 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:2f31d4f1-e256-5aa3-a7bf-8e25fa7686d5", "id": "CVE-2026-42587", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42587 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:1b7a09c6-7491-5205-96e8-971a3b7b130c", "id": "CVE-2026-44248", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44248 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:83bcc14c-f8b1-5427-abed-eb20626b1224", "id": "CVE-2026-44249", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44249 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:34f4c4ba-1ced-5ccb-ab61-0b63a35a7dc5", "id": "CVE-2026-44250", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44250 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:087d2c16-a5f3-5167-87dc-90636e9882c6", "id": "CVE-2026-44890", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:9ca3d26f-2519-52a2-b155-cbf467ca4dee", "id": "CVE-2026-44891", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44891 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:bbe96a83-115c-5786-a13e-8431c396eca6", "id": "CVE-2026-44893", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44893 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:fa032ab0-fb2a-5bf4-b53a-14ad1c15b9af", "id": "CVE-2026-45416", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45416 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:4af5e536-12ed-5098-90c2-6512700b02ee", "id": "CVE-2026-45536", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45536 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:cdc73f6d-1f15-5cc6-aeac-1b9c9ccb7068", "id": "CVE-2026-45673", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45673 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:41d3a6aa-e4df-5f76-b535-d5c41c721c1e", "id": "CVE-2026-45674", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45674 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:f0c957b1-9e16-50d5-9759-576bbafd116c", "id": "CVE-2026-46340", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-46340 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:a443e03d-d8ec-540f-9be6-f2c902d2072e", "id": "CVE-2026-47244", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47244 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:b3dc0366-9b7e-5836-86a6-680dbcafd511", "id": "CVE-2026-47691", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47691 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:6a22f8d3-c450-5792-be05-f5a1bb8b1c67", "id": "CVE-2026-48006", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-48006 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:5b50a07f-4ac4-57d9-aa6c-e430aeac5383", "id": "CVE-2026-48043", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48043 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:e3f17be0-21c0-55e0-919a-b1c9d87dadb3", "id": "CVE-2026-48059", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48059 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:df4286d9-6fdc-597e-b778-730bb44e80a8", "id": "CVE-2026-50010", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50010 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:bbfe820e-9cc3-585d-9525-ad5898063fce", "id": "CVE-2026-50011", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-50011 does not affect version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-smtp. Patches already applied: bff98ee51b5d0b7ee25fd5005f2169f2a0467efa (already in target via d5b4e38845f5 'Backport CVE-2026-44890 to 4.1.130.Final')" }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:8ff3c85b-944e-5209-ba6e-8ce59b43f623", "id": "CVE-2026-50020", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50020 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:2cb350a0-346d-510c-bc16-3e1278813187", "id": "CVE-2026-50560", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:88a9d091-6d45-5398-8526-9230bc091e3e", "id": "CVE-2026-55831", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55831 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:7fc34dd6-dd2e-5ea1-b31f-d6a99a7a803c", "id": "CVE-2026-55833", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55833 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:4986e1da-a3a5-5b19-a04f-442c319ed08c", "id": "CVE-2026-55851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55851 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:d4bb559d-cc15-54b2-9274-7b932d9032d6", "id": "CVE-2026-56745", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56745 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:cda192d9-bb5a-509e-a233-0bc38e3eb347", "id": "CVE-2026-56746", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56746 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:4be05921-b074-55df-9498-9f4be7d19955", "id": "CVE-2026-56817", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56817 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:58040b7a-bccc-5708-84b0-b2beb8391c0f", "id": "CVE-2026-56818", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56818 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:a2d04674-a46e-5ed9-95bc-9a75dd054933", "id": "CVE-2026-56819", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56819 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:ed82f927-0d72-563a-a71f-58c8ae010d5d", "id": "CVE-2026-56820", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56820 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:0d4ccb85-557a-529c-a8e5-c41b82858e6f", "id": "CVE-2026-56821", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56821 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:70464b91-4b82-55ce-8d78-0284b1f1d1f5", "id": "CVE-2026-56822", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56822 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:3722dc15-7992-5bc7-a1da-8d7640399a8a", "id": "CVE-2026-59898", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59898 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:8739fb18-c8af-5d9e-b9ca-5622d8ddfc4c", "id": "CVE-2026-59899", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59899 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:513aa74e-9f0b-55de-a619-d25c079b92e5", "id": "CVE-2026-59900", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59900 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:3840407a-a71c-5280-a363-905575047426", "id": "CVE-2026-59901", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59901 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:f9ab6869-d0c3-5310-8b3b-db3f9f906a08", "id": "CVE-2026-59902", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59902 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:65a903ee-60b6-53a5-85a9-5006e599b892", "id": "CVE-2026-59903", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59903 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:6b02f34c-364a-5c42-a891-e35420550c0a", "id": "CVE-2026-59919", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59919 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:ca77b31d-61a4-5bd7-88eb-fa3de6f76349", "id": "CVE-2026-59920", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59920 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:8fc6ecab-dd31-51a0-87d1-07b9d764cb2e", "id": "CVE-2026-59921", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59921 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:5adec053-3adf-5477-b5f4-7628066e606e", "id": "CVE-2026-73507", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-73507 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:3bf1f429-f915-598d-be82-ac6eac88be61", "id": "CVE-2026-73508", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-73508 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:97ab60b0-dda4-57d8-9dbe-45f7980b9b53", "id": "GHSA-mfg7-5gfp-c4w3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:36df5c52-d078-5831-8bda-1bb49064aa56", "id": "GHSA-v74w-7mr3-4qg3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.1" } ] } ], "dependencies": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.1" } ] }