{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:f99dded1-b778-5f9b-b9b5-3e6e1ac5dcbd", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.130.Final-tuxcare.3", "type": "library", "group": "io.netty", "name": "netty-codec-stomp", "version": "4.1.130.Final-tuxcare.3", "purl": "pkg:maven/io.netty/netty-codec-stomp@4.1.130.Final-tuxcare.3" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:60a9d378-b659-518f-9ec5-3e44f5875ec1", "id": "CVE-2025-55163", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-55163 does not affect version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-stomp. already_fixed \u2014 The target Netty 4.1.130.Final repository already contains the complete MadeYouReset (CVE-2025-55163) mitigation. The Http2MaxRstFrameLimitEncoder defense class is present, integrated into the HTTP/2 connection handler builder, and enabled by default for servers with a threshold of 200 RST_STREAM frames per 30-second window. All protocol-error-triggered RST writes route through the protected en..." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:46191eca-338b-57f7-9a09-88b3dfe4c3f4", "id": "CVE-2026-33870", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33870 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-stomp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:f2e23a87-a907-52b2-8621-b2329b2d756f", "id": "CVE-2026-33871", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33871 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-stomp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:c603acbb-4531-56b0-93dd-0de6640dc71a", "id": "CVE-2026-41417", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41417 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-stomp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:8bbdc1d6-3623-559d-bf4b-3bb1314b30bf", "id": "CVE-2026-42578", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42578 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-stomp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:db02a45c-6d92-5f6c-ab93-a8bf36f5a767", "id": "CVE-2026-42579", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42579 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-stomp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:13c81f33-7867-5976-ad81-3009d248eed0", "id": "CVE-2026-42580", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42580 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-stomp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:04cd4758-2a7c-5e87-ae47-db3f7b760257", "id": "CVE-2026-42581", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42581 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-stomp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:093692cf-1a68-52f4-8c8b-c67c23742c67", "id": "CVE-2026-42583", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42583 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-stomp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:6b854cb2-52fa-5c87-8341-c2d100b00abf", "id": "CVE-2026-42584", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42584 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-stomp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:583aee46-e573-5422-8bcc-2dcc03c12441", "id": "CVE-2026-42585", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42585 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-stomp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:478bd930-d1bc-5fe1-a57b-b810dee0331c", "id": "CVE-2026-42586", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42586 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-stomp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:604a34ac-d7ca-52b6-b14c-98fa62300535", "id": "CVE-2026-42587", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42587 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-stomp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:a0e5301d-9123-5f0b-8531-2eb13430402e", "id": "CVE-2026-44248", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44248 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-stomp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:2f5dab73-9fb3-5f23-9425-858fec9b8c6c", "id": "CVE-2026-44249", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44249 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-stomp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:9999249d-24d9-541a-9f21-347b48638bda", "id": "CVE-2026-44250", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44250 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-stomp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:d18aca17-7b57-527d-9393-e2d073f5333f", "id": "CVE-2026-44890", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-stomp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:9b2e8d26-56d5-5827-beb6-a80367d6e8d8", "id": "CVE-2026-44891", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44891 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-stomp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:ae7c0bf9-074a-5235-b383-9f7aed8072a0", "id": "CVE-2026-44893", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44893 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-stomp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:5975eeef-f960-5a94-87a6-c57b5b4a0287", "id": "CVE-2026-45416", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45416 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-stomp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:68ba6484-9f44-5da5-b0ad-662f8eea5d4d", "id": "CVE-2026-45536", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45536 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-stomp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:cf4ea796-b2e0-58ef-b01d-0d63dc409c6d", "id": "CVE-2026-45673", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-45673 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-stomp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:3716d5b8-c459-5e05-919b-0380534010c8", "id": "CVE-2026-45674", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-45674 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-stomp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:4a0d22ec-8216-5a40-b147-73519d1fec21", "id": "CVE-2026-46340", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46340 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-stomp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:6db9e9f1-bdc2-54e5-9b1b-af53de786ece", "id": "CVE-2026-47244", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47244 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-stomp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:e050ab59-2b1a-5c86-b533-7a76237ba664", "id": "CVE-2026-47691", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47691 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-stomp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:244c175c-baf8-5a6f-83e4-c264bc1e5814", "id": "CVE-2026-48006", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48006 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-stomp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:8295f9b2-ecf2-5616-a9f0-b61eed07fa6e", "id": "CVE-2026-48043", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48043 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-stomp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:4ee0cefc-95ec-5f9e-8c17-19812d66a86c", "id": "CVE-2026-48059", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48059 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-stomp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:8f3d16df-d9ed-57b9-9207-6f30339177cd", "id": "CVE-2026-50010", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50010 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-stomp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:256448f7-b214-5e3d-bd27-575d2c523b57", "id": "CVE-2026-50011", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-50011 does not affect version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-stomp. Patches already applied: bff98ee51b5d0b7ee25fd5005f2169f2a0467efa (already in target via d5b4e38845f5 'Backport CVE-2026-44890 to 4.1.130.Final')" }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:812e89dc-e220-5343-8d7e-3b605de62305", "id": "CVE-2026-50020", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50020 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-stomp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:7fb70d62-7669-51d4-96ae-2d720ea35ec9", "id": "CVE-2026-50560", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-stomp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:0181366b-5ed6-564d-858f-448c9c8f663a", "id": "CVE-2026-55831", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-55831 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-stomp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:7d42e362-ae6c-582d-a601-4f04706893cf", "id": "CVE-2026-55833", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-55833 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-stomp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:6854ed2a-e6bd-5475-9c13-ff895775847a", "id": "CVE-2026-55851", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-55851 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-stomp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:bd283401-ac2e-5544-853c-8422f4f1dcbc", "id": "CVE-2026-56745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56745 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-stomp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:a347d1de-2ce1-501e-bad5-d54739a9f630", "id": "CVE-2026-56746", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56746 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-stomp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:ada059a2-87fd-5b03-8313-92c95f0870cd", "id": "CVE-2026-56817", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56817 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-stomp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:01a24309-374f-5730-bf48-49c2209123c7", "id": "CVE-2026-56818", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56818 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-stomp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:f21a2533-bccd-56cb-8a3a-d6a12ae5f6db", "id": "CVE-2026-56819", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56819 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-stomp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:2f02dff9-bcaf-501d-8544-4cdf61171756", "id": "CVE-2026-56820", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56820 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-stomp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:1a2552f7-e593-5a0d-b219-61e3ab9e29e8", "id": "CVE-2026-56821", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56821 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-stomp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:f6d5b8a3-23a5-5dcc-b2c1-29ee9501d019", "id": "CVE-2026-56822", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56822 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-stomp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:2b9ef603-1a75-526a-8ef1-621d291291a5", "id": "CVE-2026-59898", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59898 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-stomp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:4bc0fbe2-b4f1-5cf6-8b01-420c179c8de8", "id": "CVE-2026-59899", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59899 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-stomp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:3e4d0bfe-a13c-5d9d-a805-eef61f3defc9", "id": "CVE-2026-59900", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59900 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-stomp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:6446d43b-2204-517e-8b19-85dbab5d05d8", "id": "CVE-2026-59901", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59901 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-stomp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:06a06136-9aad-5916-8b76-232fa050fbe3", "id": "CVE-2026-59902", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59902 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-stomp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:ad3ceff3-1f82-554f-820c-3091d7961352", "id": "CVE-2026-59903", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59903 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-stomp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:1b04de7a-9fd2-5866-8e44-95d70f58cd28", "id": "CVE-2026-59919", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59919 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-stomp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:6a769e5f-5401-530d-8473-702bca058b3a", "id": "CVE-2026-59920", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59920 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-stomp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:d7cb3a23-496b-555c-a29c-e9025e36b019", "id": "CVE-2026-59921", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59921 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-stomp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:087c882e-14b0-54ea-bcdd-bf3dc1411e4e", "id": "CVE-2026-73507", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-73507 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-stomp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:ea4eda01-d9cd-55e5-b0af-9688f1d2edf8", "id": "CVE-2026-73508", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-73508 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-stomp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:591a32f3-f3ac-5ab5-be4f-18fc88ff758b", "id": "GHSA-mfg7-5gfp-c4w3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-stomp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:9aa24419-a102-5911-b535-25963a068a43", "id": "GHSA-v74w-7mr3-4qg3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-stomp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.130.Final-tuxcare.3" } ] } ], "dependencies": [ { "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.130.Final-tuxcare.3" } ] }