{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:3c090857-8cdf-5b02-8efa-aae3c603f616", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.122.Final-tuxcare.1", "type": "library", "group": "io.netty", "name": "netty-codec-stomp", "version": "4.1.122.Final-tuxcare.1", "purl": "pkg:maven/io.netty/netty-codec-stomp@4.1.122.Final-tuxcare.1" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:257c20d6-f515-5f8a-aea9-9be4f487e12a", "id": "CVE-2025-55163", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-55163 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-stomp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:3fd5f8be-caf2-5036-ac7f-dbcd465912ec", "id": "CVE-2025-58056", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-58056 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-stomp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:a44d3c3e-7fd7-57a1-a49c-ce9d2f983707", "id": "CVE-2025-58057", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-58057 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-stomp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:1f3085f8-f9da-5974-9c00-daee84c47e3f", "id": "CVE-2025-59419", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-59419 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-stomp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:a8246a16-c0c5-50e3-92bc-470ea600a081", "id": "CVE-2025-67735", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-67735 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-stomp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:7ee7cb70-81a0-5017-a394-96c35de65933", "id": "CVE-2026-33870", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33870 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-stomp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:f8fb4770-0d6c-5128-8d16-17290d11aee1", "id": "CVE-2026-33871", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33871 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-stomp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:9e34d60b-8073-5dec-8d45-4b9d3539da18", "id": "CVE-2026-41417", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41417 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-stomp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:bd863ec9-e7fa-57ca-ad7e-7d60d26170d1", "id": "CVE-2026-42577", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-42577 does not affect version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-stomp. CVE-2026-42577 affects Netty 4.2.x only (advisory range >= 4.2.0.Final, < 4.2.13.Final). An fd left registered with an epoll event mask of 0 is woken forever by the unmaskable EPOLLERR/EPOLLHUP after a RST on a half-closed connection. Target 4.1.122.Final is NOT affected due to architectural differences. The patch modifies EpollIoHandler.java and EpollIoOps.java, part of 4.2's IoHandler/IoOps abstraction. Neither file exists in 4.1.x, which registers via EpollEventLoop.modify() off AbstractEpollChannel.flags. That field is seeded Native.EPOLLET, and no read/close/half-close path clears it (only the explicit pre-registration setEpollMode(LEVEL_TRIGGERED) opt-in), so the registration stays edge-triggered and the RST is reported once per edge instead of on every epoll_wait. The chain from INPUT (connection state change) to GOAL (CPU busy-loop via empty event mask) is broken at step (ii): the target cannot produce an empty event mask. Verdict: not_affected. Justification: code_not_reachable (Rule 5 Type A2)." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:47e6b4db-83ef-57d0-8fc1-aabfff8b78ba", "id": "CVE-2026-42578", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42578 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-stomp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:b2d4476e-9f1b-5a62-be45-6565eeee3dc1", "id": "CVE-2026-42579", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42579 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-stomp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:513dbf89-d8fd-5577-9207-86f8b8a7b36e", "id": "CVE-2026-42580", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42580 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-stomp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:3cfd116d-eb4b-5399-b11a-2b1dd430cec6", "id": "CVE-2026-42581", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42581 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-stomp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:e7597fd5-0cef-5436-b2a4-b2a8053c7f76", "id": "CVE-2026-42583", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42583 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-stomp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:cbf13b54-6d1e-579c-80bc-309ae5cccb7e", "id": "CVE-2026-42584", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42584 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-stomp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:0453136e-9a25-59f8-ab43-41563f0b5fa1", "id": "CVE-2026-42585", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42585 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-stomp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:c8f101cd-1c29-5607-8edb-e30373101c36", "id": "CVE-2026-42586", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42586 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-stomp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:0597a041-952a-5ce5-b9ba-305cecea32b0", "id": "CVE-2026-42587", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42587 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-stomp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:64bc0304-51f9-5be5-b63a-7be3308c3bbc", "id": "CVE-2026-44248", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44248 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-stomp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:def2cc71-820e-57cd-9544-5ae94bcb7279", "id": "CVE-2026-44249", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44249 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-stomp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:0bcdd72c-db95-515c-88a5-0fa72c535766", "id": "CVE-2026-44250", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44250 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-stomp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:86d51a94-9e03-577d-bba5-cc294dff70e9", "id": "CVE-2026-44890", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44890 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-stomp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:73a51808-5fcf-5818-bb28-7d4d6692d9f1", "id": "CVE-2026-44891", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44891 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-stomp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:25ec237b-2f9c-5514-b8c8-a012a9efc841", "id": "CVE-2026-44893", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44893 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-stomp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:de5ae5d6-c518-568a-9736-ae0e91557887", "id": "CVE-2026-45416", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45416 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-stomp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:4973056c-dad8-5d5f-8756-9a1edb5f24dd", "id": "CVE-2026-45536", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45536 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-stomp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:63635650-8cac-57c3-80b5-748723ee1499", "id": "CVE-2026-45673", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45673 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-stomp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:6bd5daca-8208-5c72-9294-a68425a14e7f", "id": "CVE-2026-45674", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45674 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-stomp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:26890acf-3fc1-5a10-a6b6-c00c5aa8aae3", "id": "CVE-2026-46340", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-46340 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-stomp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:4c1acc6e-9788-5dd4-bd77-ccd900b784dd", "id": "CVE-2026-47244", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47244 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-stomp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:f4cbe515-d7f1-55d6-b3e5-3bc99f58b1fa", "id": "CVE-2026-47691", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47691 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-stomp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:59dcfd13-fc7d-5668-b1d1-786100847501", "id": "CVE-2026-48006", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-48006 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-stomp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:22da59f8-32d0-5ecf-a20b-bb34ea95c14f", "id": "CVE-2026-48043", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-48043 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-stomp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:183c4602-1f0a-5099-b9d6-e01175cd26bb", "id": "CVE-2026-48059", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-48059 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-stomp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:f119782b-e226-5a48-9dd2-35b917336a04", "id": "CVE-2026-50010", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50010 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-stomp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:5486d14b-c274-5238-b35c-bf36cc866989", "id": "CVE-2026-50011", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50011 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-stomp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:140b7007-f051-5b6d-b5e8-c0d0b4d990b8", "id": "CVE-2026-50020", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50020 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-stomp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:b6abe32a-4f94-5a4f-a335-c2ba7c049a4c", "id": "CVE-2026-50560", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50560 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-stomp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:0c9fe489-b79b-5374-b75c-0e07b8dc958a", "id": "CVE-2026-55831", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55831 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-stomp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:244e0f2f-eafe-504a-b83e-5c694ebcf80d", "id": "CVE-2026-55833", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55833 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-stomp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:cebd3785-6806-5641-a77f-f507f039269f", "id": "CVE-2026-55851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55851 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-stomp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:44f80114-3d2b-59f5-bdde-bfaac4029307", "id": "CVE-2026-56745", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56745 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-stomp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:970b552b-5562-5cfb-93cb-81d4acca3d83", "id": "CVE-2026-56746", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56746 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-stomp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:e8d71527-6948-551f-8b5e-cf9e5b1069a7", "id": "CVE-2026-56817", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56817 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-stomp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:74fa9e55-3329-5f81-a6a2-54dfdd941d61", "id": "CVE-2026-56818", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56818 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-stomp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:c96f806d-5281-59fe-8834-5b0ae15e7fc1", "id": "CVE-2026-56819", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56819 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-stomp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:885063bd-1ae2-5d3c-85d1-ca98cafbaf16", "id": "CVE-2026-56820", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56820 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-stomp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:cd33369a-0a03-5a5e-b49f-bdac1cebd82c", "id": "CVE-2026-56821", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56821 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-stomp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:abd763ad-4a33-5008-ab66-8c38b1ac1694", "id": "CVE-2026-56822", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56822 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-stomp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:8e81ad05-a43f-543b-869b-74d315c571db", "id": "CVE-2026-59898", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59898 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-stomp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:fe40c661-6fed-5f75-b289-6730d0a728c7", "id": "CVE-2026-59899", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59899 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-stomp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:1742ea08-fc38-5b30-ba71-e8d2639a437f", "id": "CVE-2026-59900", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59900 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-stomp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:bf9e148b-07d8-5924-ab9b-5e3c7ada21ab", "id": "CVE-2026-59901", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59901 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-stomp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:57e16d9f-615f-5f41-8f6e-430bfedeb6ed", "id": "CVE-2026-59902", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59902 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-stomp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:9d62bdd6-c581-5079-9b93-d6395f6c0e1a", "id": "CVE-2026-59903", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59903 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-stomp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:32919618-bcca-531c-bdd1-47898e7e3e64", "id": "CVE-2026-59919", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59919 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-stomp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:bc5cf051-34b8-5e87-8eda-dac421a5fd9c", "id": "CVE-2026-59920", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59920 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-stomp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:636c6874-e248-518d-bc2d-f50eeeb06054", "id": "CVE-2026-59921", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59921 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-stomp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:63ddaee9-af4c-5bb1-b682-7dd62285e318", "id": "CVE-2026-73507", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-73507 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-stomp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:d0f062e8-32f6-5368-aced-00f00d85314e", "id": "CVE-2026-73508", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-73508 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-stomp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:17c38e3e-ccf8-56f3-8b86-5f3ad5854b7b", "id": "GHSA-mfg7-5gfp-c4w3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-stomp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:1c879b7e-7c81-518a-8bc9-ea886f7355c1", "id": "GHSA-v74w-7mr3-4qg3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-stomp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.122.Final-tuxcare.1" } ] } ], "dependencies": [ { "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.122.Final-tuxcare.1" } ] }