{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:5a89a9d1-b596-5ffa-b998-9894e6460013", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.2", "type": "library", "group": "io.netty", "name": "netty-codec-smtp", "version": "4.1.130.Final-tuxcare.2", "purl": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.2" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:82e953df-2e58-509d-9914-013d1974bc81", "id": "CVE-2025-55163", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-55163 does not affect version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-smtp. already_fixed \u2014 The target Netty 4.1.130.Final repository already contains the complete MadeYouReset (CVE-2025-55163) mitigation. The Http2MaxRstFrameLimitEncoder defense class is present, integrated into the HTTP/2 connection handler builder, and enabled by default for servers with a threshold of 200 RST_STREAM frames per 30-second window. All protocol-error-triggered RST writes route through the protected en..." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:1814516f-e32f-5b62-a6b2-cef5b3396b0b", "id": "CVE-2026-33870", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33870 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:85f59efb-9691-5724-bfdf-44e806fa8ff9", "id": "CVE-2026-33871", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33871 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:c15256c2-5855-5f5d-a37f-ceba39f10bac", "id": "CVE-2026-41417", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41417 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:0821cab0-738e-50d0-aeca-a927cefc6d72", "id": "CVE-2026-42578", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42578 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:8cee4e26-41fd-5ae6-836b-83c977a25563", "id": "CVE-2026-42579", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42579 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:f52a9ef8-5ab0-5073-978b-abb87bc9b673", "id": "CVE-2026-42580", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42580 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:9cd421b1-d822-5870-b718-9832891cc02d", "id": "CVE-2026-42581", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42581 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:7e0d2132-c7d5-5417-877c-9860bc0eba85", "id": "CVE-2026-42583", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42583 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:99dfa1c9-9ddb-5560-b517-837543b92d31", "id": "CVE-2026-42584", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42584 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:db8a4f40-627a-5caf-930b-c68262e5e63d", "id": "CVE-2026-42585", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42585 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:f450dfe6-3bce-5ebe-b432-b388bd077a6a", "id": "CVE-2026-42586", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42586 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:3a302f1d-5dee-5dd7-86c4-b6b1ac57ad21", "id": "CVE-2026-42587", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42587 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:f5c0196d-5eee-53a9-9a86-bf661f162e8a", "id": "CVE-2026-44248", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44248 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:61d769d7-2716-5f01-81c7-c291994932ac", "id": "CVE-2026-44249", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44249 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:4def8123-ae5d-5924-ad2c-33fbfd8f4bef", "id": "CVE-2026-44250", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44250 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:a57de4f3-c3d4-5469-ac66-792f30c1936d", "id": "CVE-2026-44890", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:9a07e924-c533-5008-b621-c0bb7a811c9a", "id": "CVE-2026-44891", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44891 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:88ce0b20-cec8-577f-8b96-7442be90f31c", "id": "CVE-2026-44893", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44893 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:bbf15920-e0b8-50ba-93ce-29f36dc0f463", "id": "CVE-2026-45416", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45416 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:2493ff5e-b83a-523a-8fb3-30e10bc74be4", "id": "CVE-2026-45536", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45536 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:85bd189c-52b6-567b-a52d-ee7388040a67", "id": "CVE-2026-45673", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-45673 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:d0a751d6-dd02-59fc-a774-2ef55aa2b1cf", "id": "CVE-2026-45674", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-45674 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:86c273b0-0af2-50ef-9a00-aa78ef970838", "id": "CVE-2026-46340", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46340 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:5b8e6cf4-d169-50c6-a57b-43bdcae34af0", "id": "CVE-2026-47244", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47244 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:ff10b612-b7ad-5d67-91d4-97875040e7ed", "id": "CVE-2026-47691", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47691 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:fc568bcb-2873-54f0-ab1a-2e30d1433987", "id": "CVE-2026-48006", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48006 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:d802e052-6ba0-5115-85f1-6222f246e438", "id": "CVE-2026-48043", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48043 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:ad9b0e13-6a9e-5f66-b278-553ab38d1bff", "id": "CVE-2026-48059", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48059 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:01b6366b-c0f0-5470-a7ef-aa636c686181", "id": "CVE-2026-50010", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50010 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:27d38fdc-0101-5e73-a3cd-ae109159f72b", "id": "CVE-2026-50011", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-50011 does not affect version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-smtp. Patches already applied: bff98ee51b5d0b7ee25fd5005f2169f2a0467efa (already in target via d5b4e38845f5 'Backport CVE-2026-44890 to 4.1.130.Final')" }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:464502f9-1670-559b-a649-ff9e2d4fb464", "id": "CVE-2026-50020", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50020 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:03c5d61c-ae8b-53fe-b830-614e35763c73", "id": "CVE-2026-50560", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:33506849-99a6-5fea-b482-dd1c4aa00943", "id": "CVE-2026-55831", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55831 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:1b16fb7c-9023-5254-b0ab-4c2053c08890", "id": "CVE-2026-55833", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55833 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:0eacdcdf-4ee7-5c98-8162-43af7b144b22", "id": "CVE-2026-55851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55851 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:c6824d6d-4a4d-5c13-8626-6d6035ab8ed8", "id": "CVE-2026-56745", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56745 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:9a06eefe-ec12-50f3-a8b8-410fa3d767ad", "id": "CVE-2026-56746", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56746 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:caab1555-9559-558f-835e-253a17a3974f", "id": "CVE-2026-56817", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56817 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:346885d0-166e-5264-a17d-8d5f14c974b3", "id": "CVE-2026-56818", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56818 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:aff40e3b-affc-56fd-8c59-6bdb83ec8db4", "id": "CVE-2026-56819", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56819 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:21c0aa5f-b619-5670-a0c5-3063633ff9c6", "id": "CVE-2026-56820", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56820 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:4a7ec92a-af6c-5995-98fc-4790d174d8fc", "id": "CVE-2026-56821", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56821 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:5de73b45-3371-5c29-896f-fee98a59d33b", "id": "CVE-2026-56822", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56822 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:3d120d83-7c3e-537b-b313-2c45e8bb724c", "id": "CVE-2026-59898", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59898 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:e6aef6c9-9166-5499-bf5c-3d24b9a21dfd", "id": "CVE-2026-59899", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59899 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:3338c528-133a-5e38-90b5-d268aecd4391", "id": "CVE-2026-59900", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59900 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:37b22eb9-95b0-5d74-839d-cb7fd314ac8b", "id": "CVE-2026-59901", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59901 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:030d7fc8-fa7c-51b9-a477-611103ae1ef5", "id": "CVE-2026-59902", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59902 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:7eac2dbe-3e25-5af3-a7ea-403c6eb67f26", "id": "CVE-2026-59903", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59903 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:54eafe9a-459d-5771-bf04-3da81e062295", "id": "CVE-2026-59919", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59919 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:8e03106a-2c17-55ed-b14a-7a716ee4091b", "id": "CVE-2026-59920", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59920 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:117e7ec0-3a5f-5dae-ae77-e7aae545c2d6", "id": "CVE-2026-59921", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59921 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:f20226a4-fbf7-5571-aeac-1bd7ed959069", "id": "CVE-2026-73507", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-73507 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:7aeaf69f-3d97-5186-bc4f-981d750f3bb2", "id": "CVE-2026-73508", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-73508 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:1497a817-eef4-5cd6-8616-cff67ba28d23", "id": "GHSA-mfg7-5gfp-c4w3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:e05ee908-2669-56d1-b41a-9dd167fa308a", "id": "GHSA-v74w-7mr3-4qg3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-smtp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.2" } ] } ], "dependencies": [ { "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.2" } ] }