{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:b57c49b6-bf5e-501a-891a-6ffbafc29035",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.122.Final-tuxcare.2",
      "type": "library",
      "group": "io.netty",
      "name": "netty-codec-stomp",
      "version": "4.1.122.Final-tuxcare.2",
      "purl": "pkg:maven/io.netty/netty-codec-stomp@4.1.122.Final-tuxcare.2"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:b25bd7f7-93e3-5768-9273-c8c2c4959a32",
      "id": "CVE-2025-55163",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55163 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-stomp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7a0384fa-90b3-5125-a2a2-1b933e876c9b",
      "id": "CVE-2025-58056",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-58056 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-stomp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:992a6eb8-3363-584f-b46e-042f5fc4263e",
      "id": "CVE-2025-58057",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-58057 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-stomp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:10a7603e-214b-5181-9e75-65fd0f0be6d7",
      "id": "CVE-2025-59419",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-59419 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-stomp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:92f79aad-36b2-5eff-95eb-193f1d2cc65b",
      "id": "CVE-2025-67735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-67735 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-stomp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:aa4bba18-f4f1-568a-abe3-2dc7f775f7a8",
      "id": "CVE-2026-33870",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-33870 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-stomp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2075b757-d500-536e-828f-4033e094df9d",
      "id": "CVE-2026-33871",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-33871 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-stomp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d86ca2f7-f226-5265-a229-065c904e8379",
      "id": "CVE-2026-41417",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41417 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-stomp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9a133643-7091-5201-a860-c3ea63bf02f7",
      "id": "CVE-2026-42577",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-42577 does not affect version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-stomp. CVE-2026-42577 affects Netty 4.2.x only (advisory range >= 4.2.0.Final, < 4.2.13.Final). An fd left registered with an epoll event mask of 0 is woken forever by the unmaskable EPOLLERR/EPOLLHUP after a RST on a half-closed connection. Target 4.1.122.Final is NOT affected due to architectural differences. The patch modifies EpollIoHandler.java and EpollIoOps.java, part of 4.2's IoHandler/IoOps abstraction. Neither file exists in 4.1.x, which registers via EpollEventLoop.modify() off AbstractEpollChannel.flags. That field is seeded Native.EPOLLET, and no read/close/half-close path clears it (only the explicit pre-registration setEpollMode(LEVEL_TRIGGERED) opt-in), so the registration stays edge-triggered and the RST is reported once per edge instead of on every epoll_wait. The chain from INPUT (connection state change) to GOAL (CPU busy-loop via empty event mask) is broken at step (ii): the target cannot produce an empty event mask. Verdict: not_affected. Justification: code_not_reachable (Rule 5 Type A2)."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d41c04d4-56bf-577e-9056-61b5616277b6",
      "id": "CVE-2026-42578",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42578 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-stomp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1b8293a7-f837-5045-b751-84f14a7d4c21",
      "id": "CVE-2026-42579",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42579 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-stomp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:99574a89-bcf9-5168-ad4e-0da471fe2c6b",
      "id": "CVE-2026-42580",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42580 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-stomp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:99d09b30-68bd-575d-9aa2-6de7945a27b3",
      "id": "CVE-2026-42581",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42581 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-stomp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:356d5696-acd3-522e-97f0-89fa7e363c6a",
      "id": "CVE-2026-42583",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42583 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-stomp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:931b1d19-f31b-538b-817e-f2c8c09955da",
      "id": "CVE-2026-42584",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42584 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-stomp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f69f76a2-f769-5fb0-8f46-03b08f4bfaae",
      "id": "CVE-2026-42585",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42585 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-stomp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a4b1310c-813d-5503-9de6-e3c5d105bca1",
      "id": "CVE-2026-42586",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42586 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-stomp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7013277e-070a-59ce-872e-76a96a1fa3e4",
      "id": "CVE-2026-42587",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42587 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-stomp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:db6731ab-8757-5f72-b3f5-138db12d5821",
      "id": "CVE-2026-44248",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44248 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-stomp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9108002e-daaf-56df-a668-9f7feb28ab66",
      "id": "CVE-2026-44249",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44249 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-stomp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c9e590cd-3176-53ef-8e50-2ca15e769e98",
      "id": "CVE-2026-44250",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44250 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-stomp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e6e94e69-4f57-54e9-9ada-ea8874fcffb0",
      "id": "CVE-2026-44890",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-stomp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2a431130-04ea-54f0-aa75-fda1f5f03a8e",
      "id": "CVE-2026-44891",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44891 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-stomp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ed63223b-8811-56fc-bb6f-e35e4e0a6e7c",
      "id": "CVE-2026-44893",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44893 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-stomp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6b20f532-44ee-5b3d-9735-b9236cfb16bc",
      "id": "CVE-2026-45416",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-45416 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-stomp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:15f045bd-2cdb-5552-87a1-8c0cbb38ed74",
      "id": "CVE-2026-45536",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-45536 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-stomp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2697a349-c382-5cdd-887d-e58abf063f8c",
      "id": "CVE-2026-45673",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-45673 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-stomp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a7bd5209-7a27-5b4f-90bc-ae423af16ac7",
      "id": "CVE-2026-45674",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-45674 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-stomp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9c153c1f-404c-5d34-ab9e-a8b268df91db",
      "id": "CVE-2026-46340",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-46340 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-stomp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:eb93393d-15fc-5dca-82ec-8d761456dc9e",
      "id": "CVE-2026-47244",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47244 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-stomp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a29b8270-f233-501e-8012-40c6e49da82a",
      "id": "CVE-2026-47691",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47691 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-stomp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9d899cf1-bb8a-5119-9757-51cb1ac9e668",
      "id": "CVE-2026-48006",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-48006 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-stomp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d81b243c-a8e4-5170-a075-960e89be76fa",
      "id": "CVE-2026-48043",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-48043 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-stomp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7f2f96ad-9250-5504-8f3e-d8a3f2ce0b89",
      "id": "CVE-2026-48059",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-48059 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-stomp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a387e03d-5d91-50d7-b7bf-adeadad97716",
      "id": "CVE-2026-50010",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50010 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-stomp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4cf87520-440a-57a4-b222-68a3fbd2a187",
      "id": "CVE-2026-50011",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50011 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-stomp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:58205b6c-8051-52e7-8668-cc34871bb7b1",
      "id": "CVE-2026-50020",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50020 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-stomp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cc7a2ae8-1aaa-51c2-a71c-8cd83cf616b1",
      "id": "CVE-2026-50560",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-stomp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6aac75b6-dde5-5652-b2d9-4341f4603f57",
      "id": "CVE-2026-55831",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-55831 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-stomp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:50aee28c-04f2-5689-a6cf-730ec1aafd01",
      "id": "CVE-2026-55833",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-55833 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-stomp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:94acce92-8e11-5e60-9871-c10be5143e4e",
      "id": "CVE-2026-55851",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-55851 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-stomp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4d8ff94a-f385-5aa0-a3c0-1788768c1491",
      "id": "CVE-2026-56745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-56745 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-stomp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:23ed4762-1eec-5642-b641-7543b5ba4ba1",
      "id": "CVE-2026-56746",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-56746 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-stomp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e1fa7d64-6efd-515b-a379-15bbdb6f548c",
      "id": "CVE-2026-56817",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-56817 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-stomp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f4428293-a809-5ab1-b45d-30eed41056c1",
      "id": "CVE-2026-56818",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-56818 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-stomp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c1cacb17-b282-5199-a2ba-55affa3fa2a6",
      "id": "CVE-2026-56819",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-56819 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-stomp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:830930e5-dcf1-5581-bc03-b26aae32bf8f",
      "id": "CVE-2026-56820",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-56820 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-stomp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8922ec36-26d2-53b2-aade-21e77692ff62",
      "id": "CVE-2026-56821",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-56821 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-stomp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a74ad5ca-4218-5611-a829-2eb1b8e73c5b",
      "id": "CVE-2026-56822",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-56822 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-stomp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4bd966bf-0172-5e8c-9f11-e30477b54dae",
      "id": "CVE-2026-59898",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59898 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-stomp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:206ee61e-17d7-5002-9977-a1f2d99f98c3",
      "id": "CVE-2026-59899",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59899 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-stomp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f6745790-3b99-548c-ada2-bac39e2e1dbb",
      "id": "CVE-2026-59900",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59900 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-stomp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6fc34e8c-4c2b-5709-8135-e487483e60d2",
      "id": "CVE-2026-59901",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59901 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-stomp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:652e8cd9-9de4-59d2-8df5-727f5b3ce352",
      "id": "CVE-2026-59902",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59902 affects version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-stomp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8daeb46d-8f93-59aa-b924-2db5f0f4c1cf",
      "id": "CVE-2026-59903",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59903 affects version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-stomp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2d935872-e728-57e7-be6e-1e47655ac3d9",
      "id": "CVE-2026-59919",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59919 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-stomp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0899fd88-fa79-5c5b-a119-f504f6fca3e0",
      "id": "CVE-2026-59920",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59920 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-stomp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:80cbf9af-20bb-53a1-8c66-2bf0232b9574",
      "id": "CVE-2026-59921",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59921 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-stomp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9f3cab24-8bec-5c9b-98d8-3dc02f15502e",
      "id": "CVE-2026-73507",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-73507 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-stomp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f9213c6c-8e6c-56f1-8a8a-50330f261ffc",
      "id": "CVE-2026-73508",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-73508 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-stomp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:da3b5f70-dd40-5f60-8eff-79bba565c271",
      "id": "GHSA-mfg7-5gfp-c4w3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-stomp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b447fddb-1d27-5003-8933-82074dfa0b65",
      "id": "GHSA-v74w-7mr3-4qg3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-stomp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.122.Final-tuxcare.2"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.122.Final-tuxcare.2"
    }
  ]
}