{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:acc8d713-4248-5ee1-97a1-dd4a2dc211cf",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.82.Final-tuxcare.7",
      "type": "library",
      "group": "io.netty",
      "name": "netty-codec-smtp",
      "version": "4.1.82.Final-tuxcare.7",
      "purl": "pkg:maven/io.netty/netty-codec-smtp@4.1.82.Final-tuxcare.7"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:5c977ada-c3bd-55ae-bf48-fdbcf2727137",
      "id": "CVE-2022-41881",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-41881 is fixed in version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a3a5c358-a8c6-53b3-a1e4-5a2f7819ac31",
      "id": "CVE-2022-41915",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-41915 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a25b5ce5-60c2-57fc-a4ac-f98cc9eeaf69",
      "id": "CVE-2023-34462",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-34462 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:aa385cec-4d56-5bd9-a32f-00894f34d6c5",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-44487 is fixed in version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1e93a6cc-93d0-531b-b29a-5321810d4850",
      "id": "CVE-2023-4586",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2023-4586 is a false positive for io.netty:netty-codec-smtp 4.1.82.Final-tuxcare.7."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:703f679b-4d12-5130-b03f-6c36aa40066a",
      "id": "CVE-2024-29025",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-29025 is fixed in version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9c32c9a0-4d56-554c-a196-5b735f55b858",
      "id": "CVE-2024-47535",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-47535 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:22806273-d7f6-5bcb-ba64-1796a983f5f2",
      "id": "CVE-2025-24970",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-24970 is fixed in version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fb16c752-8bda-5ee7-b595-df0e37553c0c",
      "id": "CVE-2025-25193",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-25193 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:df5a8c0a-d21f-5a18-819d-2e83b08cafb5",
      "id": "CVE-2025-55163",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55163 is fixed in version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6e836237-7a8a-5f30-92a1-35248648214e",
      "id": "CVE-2025-58056",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58056 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0e82bed6-9c89-5bdb-9ed9-49c9d1ea8295",
      "id": "CVE-2025-58057",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-58057 is fixed in version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:835c2d26-0543-55ef-ac35-aa6c97ca85c9",
      "id": "CVE-2025-59419",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-59419 is fixed in version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5da66ea1-e2a5-506d-9c21-25ac332e3698",
      "id": "CVE-2025-67735",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-67735 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fd17e242-7186-517f-893f-8738d8593188",
      "id": "CVE-2026-33870",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33870 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:553cc572-3b83-5aa3-9079-a5b8104eca49",
      "id": "CVE-2026-33871",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33871 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7a7b02cc-9896-50e6-9285-b01f79a44c57",
      "id": "CVE-2026-41417",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41417 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2be96086-f276-5ac8-891b-d06d610e5091",
      "id": "CVE-2026-42577",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42577 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bcfbe6e2-0c18-51c5-af34-41cf1eb2c6d0",
      "id": "CVE-2026-42578",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42578 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d40d90cc-238c-50da-9e72-98ba94e9e8e1",
      "id": "CVE-2026-42579",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42579 is fixed in version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a4fb4631-6565-55ec-8620-33762aedcf4b",
      "id": "CVE-2026-42580",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42580 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:52b20b7a-031e-59a0-bb32-c20ebe998d85",
      "id": "CVE-2026-42581",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42581 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bf18ec33-fe8e-5bfc-8fad-42b88dfb75a0",
      "id": "CVE-2026-42583",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42583 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d19141be-b096-5d5a-a41c-2c3b7332fa85",
      "id": "CVE-2026-42584",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42584 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9ee9d96f-a720-5135-800f-7d37abd724ef",
      "id": "CVE-2026-42585",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42585 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:622f4799-eedc-59c2-8cc5-8b4d86272c9e",
      "id": "CVE-2026-42586",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42586 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8408a2f0-58da-5ea7-b76c-b631bc6eb2a8",
      "id": "CVE-2026-42587",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42587 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c5998586-402f-5522-9037-e35439ffeb3e",
      "id": "CVE-2026-44248",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44248 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f29febc6-05bf-5c35-9607-4dc709cfd8bb",
      "id": "CVE-2026-44249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44249 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c6c421f5-8339-5656-b708-e65a553bc675",
      "id": "CVE-2026-44250",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44250 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a49b99cb-cee5-532d-9969-69501a76f405",
      "id": "CVE-2026-44890",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ae8a558b-2c72-59cf-a7fb-70943791dd35",
      "id": "CVE-2026-44891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44891 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3057b190-e9b9-5aa1-ae25-20e93bbc0ce1",
      "id": "CVE-2026-44893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44893 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:222b94a7-8687-5abc-a1e9-65d5f842e152",
      "id": "CVE-2026-45416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45416 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8555892e-ad70-5d15-82b2-4ccfabd75e1d",
      "id": "CVE-2026-45536",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45536 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4b9e330f-97e7-56b2-8ac0-e1f89f78db8c",
      "id": "CVE-2026-45673",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45673 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cbf0ead5-2131-5d93-8166-a50b8c404a77",
      "id": "CVE-2026-45674",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-45674 is fixed in version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:76f6f268-26a0-5950-8832-461cf4e86d4c",
      "id": "CVE-2026-46340",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-46340 is fixed in version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bbaa5a1f-1433-55a5-9342-4aa40494247e",
      "id": "CVE-2026-47244",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47244 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5965cb96-f18f-5fce-b666-3f8416226474",
      "id": "CVE-2026-47691",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47691 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3149282c-477b-500b-999e-97367a3b94cd",
      "id": "CVE-2026-48006",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48006 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6c4b087f-050e-5781-a60d-cbd360b16031",
      "id": "CVE-2026-48043",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-48043 is fixed in version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3de1cc67-93b4-5c0a-898f-bee0e2abfa3a",
      "id": "CVE-2026-48059",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48059 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c378b8c2-6388-56bc-87d5-98d03b4c6fc4",
      "id": "CVE-2026-50010",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50010 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:24db6026-fc69-5617-abf2-3d51bc7061e8",
      "id": "CVE-2026-50011",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50011 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9da75a13-89b9-5652-85d1-cdf69fc14b9b",
      "id": "CVE-2026-50020",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50020 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a7796426-482b-57f1-adba-2ae2593d0f8a",
      "id": "CVE-2026-50560",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e7cdc4ce-c0af-56e4-b528-9a5b8318da08",
      "id": "CVE-2026-55831",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55831 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fe5ec358-27e4-559e-b621-f3924e34112a",
      "id": "CVE-2026-55833",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55833 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3cd308bd-93a4-5d8c-838f-18864e827907",
      "id": "CVE-2026-55851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55851 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:60b10a5b-16ab-5b65-8ccb-4bc6e8e1158a",
      "id": "CVE-2026-56745",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56745 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:97e88694-f12a-5d33-8be3-ffc09ce1fd4d",
      "id": "CVE-2026-56746",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56746 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2a8a557d-1e48-5e6e-a9b9-c005a8ee2bee",
      "id": "CVE-2026-56817",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56817 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:74d45c5f-15a1-51c8-bc91-363f90cca603",
      "id": "CVE-2026-56818",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-56818 does not affect version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-smtp. not_affected \u2014 Version 4.1.82.Final is not affected by CVE-2026-56818. The vulnerability exists in the maxElements limit check that was introduced in version 4.1.135.Final (commit e51c64c964). Version 4.1.82.Final predates this security feature entirely - it has no maxElements configuration, no maxElements validation check, and therefore cannot exhibit the vulnerable pattern described in the CVE (throwing wit..."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2b3eb347-5348-51b4-918c-92324ea57caa",
      "id": "CVE-2026-56819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56819 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3976ba37-08de-5821-b47b-fa8b9c2f00cb",
      "id": "CVE-2026-59898",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59898 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:51e0bbf7-b325-5125-9cb2-72bd20935b47",
      "id": "CVE-2026-59899",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59899 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7eb773ab-d23d-5e83-99f5-bf37db802087",
      "id": "CVE-2026-59900",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59900 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8998f529-c2e7-5cda-9f2c-fda28c0f6f51",
      "id": "CVE-2026-59901",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59901 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:00681b9b-ab4b-59a9-9c2e-7e7e3bfc5cdb",
      "id": "CVE-2026-59902",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59902 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fbbf27ca-2082-5bd5-8573-4b9533f9c338",
      "id": "CVE-2026-59903",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59903 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7599d650-30f7-5cd9-8f68-07510861b1d9",
      "id": "CVE-2026-59919",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59919 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cfc1766b-301b-5fe4-aca1-5eaaab7dfa07",
      "id": "CVE-2026-59920",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59920 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:628552a8-d8aa-5290-9ddc-26d8094f0480",
      "id": "CVE-2026-59921",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59921 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7b8fd9fa-4e94-56fb-b049-a75cd256afac",
      "id": "CVE-2026-73507",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-73507 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4c5b3906-5b81-509c-b8f8-1a1bf892efc4",
      "id": "CVE-2026-73508",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-73508 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d6c85342-bad8-542d-8143-7ce9a6f1c5a5",
      "id": "GHSA-mfg7-5gfp-c4w3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:590f3a75-2c9a-5216-af1e-796a73267581",
      "id": "GHSA-v74w-7mr3-4qg3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cc2cbd40-9bf9-5db7-bb59-a3b597f407a8",
      "id": "GHSA-xpw8-rcwv-8f8p",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-xpw8-rcwv-8f8p is fixed in version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-smtp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.82.Final-tuxcare.7"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.netty/netty-codec-smtp@4.1.82.Final-tuxcare.7"
    }
  ]
}