{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:16b322a6-a1b0-50e5-939e-73a1aa0f5c8c",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.4",
      "type": "library",
      "group": "io.netty",
      "name": "netty-codec-smtp",
      "version": "4.1.130.Final-tuxcare.4",
      "purl": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.4"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:d713e8ca-a3cb-56ea-8129-7d42ef7b91c6",
      "id": "CVE-2025-55163",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2025-55163 does not affect version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-smtp. already_fixed \u2014 The target Netty 4.1.130.Final repository already contains the complete MadeYouReset (CVE-2025-55163) mitigation. The Http2MaxRstFrameLimitEncoder defense class is present, integrated into the HTTP/2 connection handler builder, and enabled by default for servers with a threshold of 200 RST_STREAM frames per 30-second window. All protocol-error-triggered RST writes route through the protected en..."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8e51909b-4d49-56a8-bf1d-bcf386f65de2",
      "id": "CVE-2026-33870",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-33870 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dbc21e22-6e71-570c-b651-058c477c67c8",
      "id": "CVE-2026-33871",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-33871 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8361163e-7107-5684-b4f3-f89985ee0b6e",
      "id": "CVE-2026-41417",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41417 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7d856dc5-1a76-5383-96fb-530fec59d26f",
      "id": "CVE-2026-42578",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42578 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:35b718d0-9b3b-5977-a541-fc3be49ebed4",
      "id": "CVE-2026-42579",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42579 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:03f42d65-3676-5920-bd52-b8a407bbbcb3",
      "id": "CVE-2026-42580",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42580 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7383913f-b45a-56f4-b030-c7278f71b6ca",
      "id": "CVE-2026-42581",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42581 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cfe71f59-fc41-5f51-b4d9-d69e27c66941",
      "id": "CVE-2026-42583",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42583 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:265cb667-df27-56e1-a25d-65613bb5f847",
      "id": "CVE-2026-42584",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42584 affects version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0f62ad18-e1ed-5f21-8b3e-c2d4703276a2",
      "id": "CVE-2026-42585",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42585 affects version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6109ea15-d889-5017-b353-25ef87140408",
      "id": "CVE-2026-42586",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42586 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a17f1671-8f54-5237-bbb4-2082e37a8c1f",
      "id": "CVE-2026-42587",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42587 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:66bcf5e8-0eb4-5473-b8f2-1b007df94e56",
      "id": "CVE-2026-44248",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44248 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2acfa0d9-cccb-5518-9310-1edb6a16d8c3",
      "id": "CVE-2026-44249",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44249 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ada6ab77-3d0f-5044-847e-de5b19675e35",
      "id": "CVE-2026-44250",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44250 affects version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f3a885ee-92a3-57b9-abbc-204de8c0eadd",
      "id": "CVE-2026-44890",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f3494420-0288-5ed1-92f4-0eaae4fbd22f",
      "id": "CVE-2026-44891",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44891 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ff2aa7b9-d386-5098-b5cf-8472191f36f2",
      "id": "CVE-2026-44893",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44893 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:48a71986-2214-59d8-82c8-3aa0e48d1f05",
      "id": "CVE-2026-45416",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-45416 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:31a38e1f-496f-5613-b9e1-b65b060fb09d",
      "id": "CVE-2026-45536",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-45536 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:447430bf-46e4-5f89-bb1b-e1b26307cb6e",
      "id": "CVE-2026-45673",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-45673 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:11be57f6-e5a7-5189-ab5b-b47e6a5a3e84",
      "id": "CVE-2026-45674",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-45674 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:58d20431-4449-5d1d-b184-d168f3abd89b",
      "id": "CVE-2026-46340",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-46340 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:28b9e59f-ea8a-5ae4-a999-3bcf7cdab7d6",
      "id": "CVE-2026-47244",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47244 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8327fdae-5dfe-58e4-9131-9931f643133f",
      "id": "CVE-2026-47691",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47691 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c5e8a79d-6673-5a27-b1a6-b650c26f3226",
      "id": "CVE-2026-48006",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-48006 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5504bfdd-d5c2-521a-8deb-1f1ec74c0415",
      "id": "CVE-2026-48043",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-48043 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:07f80291-6ca5-562e-96d6-0a1c7c1647c4",
      "id": "CVE-2026-48059",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-48059 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a5791c79-8ac3-50d2-aa3c-e05f12e20add",
      "id": "CVE-2026-50010",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50010 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e5c0e5b4-72e9-5046-ab95-19df1d86a178",
      "id": "CVE-2026-50011",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-50011 does not affect version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-smtp. Patches already applied: bff98ee51b5d0b7ee25fd5005f2169f2a0467efa (already in target via d5b4e38845f5 'Backport CVE-2026-44890 to 4.1.130.Final')"
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c0a808b0-58ac-5d8d-b842-32cdf9342912",
      "id": "CVE-2026-50020",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50020 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bbcec881-c002-5b96-abdc-7eae77c96828",
      "id": "CVE-2026-50560",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c3b2a1c8-f060-5699-85b7-30df37ddf7e0",
      "id": "CVE-2026-55831",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-55831 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bbee4a9c-eab5-55ca-83ed-041404de60cc",
      "id": "CVE-2026-55833",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-55833 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fb41d82d-0709-5e77-b39c-94920fc657b9",
      "id": "CVE-2026-55851",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-55851 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:731e6e11-43dc-5b0e-9b48-62426b6c07b7",
      "id": "CVE-2026-56745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-56745 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e3b6a624-93a0-5ac6-a9fc-bd09ee8c688f",
      "id": "CVE-2026-56746",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-56746 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6607eae0-22b5-55b0-a296-625f0ac90e25",
      "id": "CVE-2026-56817",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-56817 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:be04615a-d42e-5dda-8753-dccf575da021",
      "id": "CVE-2026-56818",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-56818 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f53d44cc-c2d0-5bd3-b441-327e642efa08",
      "id": "CVE-2026-56819",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-56819 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:425ecc68-2873-52cc-a054-b57743cfa35c",
      "id": "CVE-2026-56820",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-56820 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fe449144-9759-5264-ac6f-392311e9dcd5",
      "id": "CVE-2026-56821",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-56821 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c6271c67-3eca-5f07-bfd3-a2600493ca16",
      "id": "CVE-2026-56822",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-56822 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f9cac321-8a20-57c6-8591-9849aee7b430",
      "id": "CVE-2026-59898",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59898 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:df5d0dcb-36d3-523a-90f4-9c900b816864",
      "id": "CVE-2026-59899",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59899 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0cf164bd-3798-5e7a-b291-f05f9e0cfbe4",
      "id": "CVE-2026-59900",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59900 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7fd99afc-33ad-5a41-95d8-b9e0febf6e35",
      "id": "CVE-2026-59901",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59901 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1be6f2b1-2fe9-5f85-a4fd-2c1fd2fffa24",
      "id": "CVE-2026-59902",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59902 affects version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ad79e635-9506-5fed-a30b-a64cee69cec6",
      "id": "CVE-2026-59903",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59903 affects version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8e7e318f-fcd0-51ea-9cfe-5ac0526c2968",
      "id": "CVE-2026-59919",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59919 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5563669a-ca5c-5b51-be15-8cf4563e7920",
      "id": "CVE-2026-59920",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59920 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:71103026-0809-551c-a535-cc1c58712b6a",
      "id": "CVE-2026-59921",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59921 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:54b5e7b6-8ec4-505b-8ccf-0d892b0df678",
      "id": "CVE-2026-73507",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-73507 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6b04a489-6089-5d85-86f2-59412f612978",
      "id": "CVE-2026-73508",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-73508 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c7ac23d0-2e50-564f-a7fa-5e8e02e6eabf",
      "id": "GHSA-mfg7-5gfp-c4w3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:31b34ce2-e593-5f58-b17e-2a2186ed83fa",
      "id": "GHSA-v74w-7mr3-4qg3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.4"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.130.Final-tuxcare.4"
    }
  ]
}