{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:774d8621-7565-5011-8d28-54fccf21fcd3",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.92.Final-tuxcare.5",
      "type": "library",
      "group": "io.netty",
      "name": "netty-codec-stomp",
      "version": "4.1.92.Final-tuxcare.5",
      "purl": "pkg:maven/io.netty/netty-codec-stomp@4.1.92.Final-tuxcare.5"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:adf2f83e-df94-5f67-9e0d-159a78f7b843",
      "id": "CVE-2023-34462",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-34462 is fixed in version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec-stomp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2f1fad2e-3ab5-5dde-a702-cd3b630c99e8",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-44487 is fixed in version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec-stomp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0d5b7475-14d3-5268-986d-3d80f99125a9",
      "id": "CVE-2023-4586",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2023-4586 is a false positive for io.netty:netty-codec-stomp 4.1.92.Final-tuxcare.5."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3b88fcc9-5225-50e6-8104-d05895e3c2a6",
      "id": "CVE-2024-29025",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-29025 is fixed in version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec-stomp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:daca9685-d203-59ed-bae4-a6be4f3e0599",
      "id": "CVE-2024-47535",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-47535 is fixed in version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec-stomp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:afc71371-246b-5597-ab7f-02a3ff5f7d1b",
      "id": "CVE-2025-24970",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-24970 is fixed in version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec-stomp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:32d7afdd-8140-57d9-b8d0-b1656b7e39b6",
      "id": "CVE-2025-25193",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-25193 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec-stomp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d8f017d1-640e-568a-b924-ad793120038c",
      "id": "CVE-2025-55163",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55163 is fixed in version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec-stomp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e6ea08ba-cab0-5502-80d3-95bd50d8d1a7",
      "id": "CVE-2025-58056",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-58056 is fixed in version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec-stomp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f7be33f2-ec34-50e8-9d0b-b2c33c2822b9",
      "id": "CVE-2025-58057",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58057 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec-stomp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3d2c5039-3267-5883-a8fe-7569efbcaa81",
      "id": "CVE-2025-59419",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-59419 is fixed in version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec-stomp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:16a34a7c-536c-5ed5-ac7b-51b36c2a29aa",
      "id": "CVE-2025-67735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-67735 is fixed in version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec-stomp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1b0acf6e-5c0b-59f4-a220-98ef3b28ca6f",
      "id": "CVE-2026-33870",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-33870 is fixed in version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec-stomp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8baf88fa-7acf-5573-b9c3-1de1cc9ef2fb",
      "id": "CVE-2026-33871",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33871 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec-stomp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4f0d17a8-2a0e-5248-b482-2e5047229d10",
      "id": "CVE-2026-41417",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41417 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec-stomp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:74c1cba6-306e-5b06-a993-d27f1fc51ecb",
      "id": "CVE-2026-42577",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42577 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec-stomp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:304e853a-c4b8-5941-b0fe-148c536b3080",
      "id": "CVE-2026-42578",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42578 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec-stomp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9b07b79a-9cc0-5475-9b03-889279b83c4a",
      "id": "CVE-2026-42579",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42579 is fixed in version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec-stomp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:58d5de83-faf8-58e5-8e1d-be44d3a7f6eb",
      "id": "CVE-2026-42580",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42580 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec-stomp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a047a3dc-eca5-58c9-8c4c-520071dc5f35",
      "id": "CVE-2026-42581",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42581 is fixed in version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec-stomp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bdee2746-f857-5944-be91-0826bec36cda",
      "id": "CVE-2026-42583",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42583 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec-stomp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:aa72ea63-a63a-5fc7-9d8d-795c5dde16d8",
      "id": "CVE-2026-42584",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42584 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec-stomp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1e969bc3-f49f-56d6-a401-8b9fb284a508",
      "id": "CVE-2026-42585",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42585 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec-stomp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9edc6583-22de-5c3b-ad28-caae31735cbf",
      "id": "CVE-2026-42586",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42586 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec-stomp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b75c9e73-dddb-5901-8098-c47f545917bc",
      "id": "CVE-2026-42587",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42587 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec-stomp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0a77bda3-3d65-5069-9469-cafea678c195",
      "id": "CVE-2026-44248",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44248 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec-stomp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:421a2c96-a1ca-529b-b5f8-7451e47ab62f",
      "id": "CVE-2026-44249",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44249 is fixed in version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec-stomp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a77da4f7-85ad-5110-8605-0dee0035976d",
      "id": "CVE-2026-44250",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44250 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec-stomp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9d2549ff-17f3-5a20-b920-05bcf0dcd716",
      "id": "CVE-2026-44890",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec-stomp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:af935e5c-4153-5bee-b7d3-e8715729634c",
      "id": "CVE-2026-44891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44891 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec-stomp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d3437325-ca52-5677-9827-ef9daa03c463",
      "id": "CVE-2026-44893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44893 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec-stomp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5ac9b32d-aea1-540b-bd9f-09d9e80ba764",
      "id": "CVE-2026-45416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45416 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec-stomp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ffd6f405-371a-5bd6-8d48-678be76480b1",
      "id": "CVE-2026-45536",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45536 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec-stomp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3896e2c2-1662-5733-8dc9-a63e48554081",
      "id": "CVE-2026-45673",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45673 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec-stomp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ded368aa-dbe0-55f2-8489-5ed89522ea48",
      "id": "CVE-2026-45674",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-45674 is fixed in version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec-stomp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a75e4b9a-32f0-5740-8a5c-d4039069c36f",
      "id": "CVE-2026-46340",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-46340 is fixed in version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec-stomp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ede9afb0-dab2-5993-82db-fb4cd6a28d20",
      "id": "CVE-2026-47244",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47244 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec-stomp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0fde9af5-4f6e-5e6b-8c1e-08d8ed6632ae",
      "id": "CVE-2026-47691",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47691 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec-stomp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6c8a9595-f816-5946-acd9-74b14f7ac9d0",
      "id": "CVE-2026-48006",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48006 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec-stomp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:abbb9e1e-088f-5e8a-a3f7-2b7d13c89aac",
      "id": "CVE-2026-48043",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-48043 does not affect version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec-stomp. not_affected \u2014 The target repository (Netty 4.1.92.Final-tuxcare.3) is not affected by CVE-2026-48043. The vulnerability exists in a newer architectural pattern (ChannelInboundHandlerAdapter-based decompression handling) that was introduced after version 4.1.92. The target uses an older architecture that processes HTTP/2 decompression directly in the onDataRead() method with existing try-finally protection."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dcc9873d-eaef-569a-a065-e17ef8dedc48",
      "id": "CVE-2026-48059",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48059 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec-stomp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5c0aeb7e-cb55-521d-8259-c178773d3b57",
      "id": "CVE-2026-50010",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50010 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec-stomp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:41a75e73-c5d8-5bab-9aec-d17977870bd5",
      "id": "CVE-2026-50011",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50011 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec-stomp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ced2d3b4-89bd-5c23-b8f5-ff80c27f3687",
      "id": "CVE-2026-50020",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50020 is fixed in version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec-stomp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0129eadd-d299-545b-b226-768e8dca9f35",
      "id": "CVE-2026-50560",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec-stomp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:468f95ac-1a81-5026-a54a-27da619d2ef0",
      "id": "CVE-2026-55831",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55831 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec-stomp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2ab1ee07-b88a-5fcb-ae48-cfeb13246e76",
      "id": "CVE-2026-55833",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55833 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec-stomp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:43413e0b-ae64-5677-9b10-dcff18dad2bc",
      "id": "CVE-2026-55851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55851 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec-stomp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9a51edb0-11b3-586e-8ff4-5c685a57ef6a",
      "id": "CVE-2026-56745",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56745 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec-stomp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c1621ad2-082f-5079-8001-690b0b65b0c5",
      "id": "CVE-2026-56746",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56746 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec-stomp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8bcf52c7-55f9-5eb0-ad1e-effc9beb92a8",
      "id": "CVE-2026-56817",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56817 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec-stomp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d12487cb-7bb1-53fb-bd9c-8b8ad81c9404",
      "id": "CVE-2026-56818",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56818 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec-stomp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:beda22a1-c7a6-5d86-b86d-19915fd94a60",
      "id": "CVE-2026-56819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56819 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec-stomp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:938a0bae-f99b-532c-b8a2-a9d9542bdf7a",
      "id": "CVE-2026-56820",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56820 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec-stomp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:55ea075c-e312-569c-9f38-dfb219f95cfa",
      "id": "CVE-2026-56821",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56821 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec-stomp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f02350eb-67e7-5a02-851a-f584c029c9ed",
      "id": "CVE-2026-56822",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56822 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec-stomp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:93d683f6-9a75-5149-bc7d-e183efd2072a",
      "id": "CVE-2026-59898",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59898 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec-stomp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1e138457-e704-5a61-b6c4-6e9eab7f3eda",
      "id": "CVE-2026-59899",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59899 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec-stomp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d1b2cb18-81a5-5c74-b863-0d63329fda42",
      "id": "CVE-2026-59900",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59900 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec-stomp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f7304da5-8eb7-537e-9993-4a167620fa17",
      "id": "CVE-2026-59901",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59901 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec-stomp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:18665de6-63a9-59fc-bc56-e3309d8b3dd5",
      "id": "CVE-2026-59902",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59902 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec-stomp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:244cc7e6-620b-57a7-9f38-5a1033514e7c",
      "id": "CVE-2026-59903",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59903 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec-stomp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9cea118d-eef7-59b2-834b-ae93a4cde81d",
      "id": "CVE-2026-59919",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59919 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec-stomp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d188dff1-7eb1-5e1b-b204-e887f1242df2",
      "id": "CVE-2026-59920",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59920 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec-stomp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c5daa8c6-543e-5b63-a6e5-0c2a71875184",
      "id": "CVE-2026-59921",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59921 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec-stomp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c2a3af77-1d8c-5a13-8a4a-bf7ab4f1c25e",
      "id": "CVE-2026-73507",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-73507 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec-stomp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:16a07fef-d104-5179-860c-e77c4ea936ed",
      "id": "CVE-2026-73508",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-73508 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec-stomp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b0a91b11-8341-5d17-a051-e4e56c3e754a",
      "id": "GHSA-mfg7-5gfp-c4w3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec-stomp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6a65f759-1183-5c7f-ad9a-83fe3a6dbb9e",
      "id": "GHSA-v74w-7mr3-4qg3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec-stomp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ecef4c77-3602-5567-a840-de8e389a34a9",
      "id": "GHSA-xpw8-rcwv-8f8p",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability GHSA-xpw8-rcwv-8f8p does not affect version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec-stomp. The version is not vulnerable. [terminalized not_affected from patch_application_manual/not_vulnerable]"
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.92.Final-tuxcare.5"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.netty/netty-codec-stomp@4.1.92.Final-tuxcare.5"
    }
  ]
}