{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:de66a004-6045-5e18-97fd-c248956a77ca", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/io.netty/netty-codec-xml@4.1.122.Final-tuxcare.1", "type": "library", "group": "io.netty", "name": "netty-codec-xml", "version": "4.1.122.Final-tuxcare.1", "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.122.Final-tuxcare.1" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:edc6e761-668c-5e04-a9d8-c8706888950f", "id": "CVE-2025-55163", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-55163 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:8bb205a2-bcdd-5895-a161-d6d820496eaa", "id": "CVE-2025-58056", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-58056 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:20280d04-622c-5089-8a2b-7f77f7c12aef", "id": "CVE-2025-58057", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-58057 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:40481f65-829a-5752-9179-246feb37bb64", "id": "CVE-2025-59419", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-59419 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:77e24b07-0408-563c-b9aa-728e76251ae1", "id": "CVE-2025-67735", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-67735 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:9ba86a14-d7ab-5086-9109-ed2a296a1c97", "id": "CVE-2026-33870", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33870 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:797aa69a-5173-5fd4-af0b-eccaa1d900f3", "id": "CVE-2026-33871", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33871 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:8c95013e-19c0-5887-a7f8-054e67861403", "id": "CVE-2026-41417", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41417 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:61b89c4a-864e-5432-9e79-2582ded415c9", "id": "CVE-2026-42577", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-42577 does not affect version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-xml. CVE-2026-42577 affects Netty 4.2.x only (advisory range >= 4.2.0.Final, < 4.2.13.Final). An fd left registered with an epoll event mask of 0 is woken forever by the unmaskable EPOLLERR/EPOLLHUP after a RST on a half-closed connection. Target 4.1.122.Final is NOT affected due to architectural differences. The patch modifies EpollIoHandler.java and EpollIoOps.java, part of 4.2's IoHandler/IoOps abstraction. Neither file exists in 4.1.x, which registers via EpollEventLoop.modify() off AbstractEpollChannel.flags. That field is seeded Native.EPOLLET, and no read/close/half-close path clears it (only the explicit pre-registration setEpollMode(LEVEL_TRIGGERED) opt-in), so the registration stays edge-triggered and the RST is reported once per edge instead of on every epoll_wait. The chain from INPUT (connection state change) to GOAL (CPU busy-loop via empty event mask) is broken at step (ii): the target cannot produce an empty event mask. Verdict: not_affected. Justification: code_not_reachable (Rule 5 Type A2)." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:cb8bf39b-c0eb-55c2-a451-5578938c696e", "id": "CVE-2026-42578", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42578 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:2646d3eb-d895-5930-bbe2-e941abc39c2f", "id": "CVE-2026-42579", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42579 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:7719166f-4cfe-585f-aab2-1285c045ffd4", "id": "CVE-2026-42580", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42580 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:ac8c0e13-ce46-5ad4-8f7b-5496c0fcce01", "id": "CVE-2026-42581", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42581 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:a8d8acf1-ab87-5347-8423-8f551b640db3", "id": "CVE-2026-42583", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42583 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:b64c5e72-8948-5be5-bf02-f6eb98cce6cb", "id": "CVE-2026-42584", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42584 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:a8354aea-462f-5e21-a7e6-e1855e0ba482", "id": "CVE-2026-42585", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42585 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:7cbcae44-1fae-55ed-98ad-ac92e09bbd06", "id": "CVE-2026-42586", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42586 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:069060d6-58e5-5d45-a3d0-85ea64386262", "id": "CVE-2026-42587", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42587 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:c7f7b9eb-fe71-52e7-b468-f1c7c1a7fba3", "id": "CVE-2026-44248", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44248 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:9c6df51a-debb-5bcd-b283-bfd7a3498cf0", "id": "CVE-2026-44249", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44249 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:22fd043e-cf9d-59ec-8dd6-acf8de2ab05f", "id": "CVE-2026-44250", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44250 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:7c88f8af-9a67-5c34-a11b-7e06c414d8e2", "id": "CVE-2026-44890", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44890 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:efec964f-e1bf-502f-8c39-121af24e8070", "id": "CVE-2026-44891", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44891 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:c19d761e-b087-548f-b646-08a42b6e025a", "id": "CVE-2026-44893", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44893 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:53eb2804-6673-5991-80b3-107cf45d906e", "id": "CVE-2026-45416", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45416 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:ca5dc041-f951-5d8b-b1a8-97e70385a862", "id": "CVE-2026-45536", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45536 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:6f71b7d1-2d13-5571-8676-0535439a8598", "id": "CVE-2026-45673", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45673 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:d9fbf244-54de-574f-b271-131cfca18734", "id": "CVE-2026-45674", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45674 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:316d8ea9-1974-515a-b23f-d9f5cf79ebde", "id": "CVE-2026-46340", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-46340 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:2cdc9c3b-a697-51d1-aa2e-c4e7af0099e5", "id": "CVE-2026-47244", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47244 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:38e604d6-2635-5fca-9c9a-4356170d8de7", "id": "CVE-2026-47691", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47691 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:e26736cd-5b2e-5fb5-858b-cc1799e67db5", "id": "CVE-2026-48006", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-48006 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:41ced679-bc2a-5d7a-a37c-5a8d827a94d9", "id": "CVE-2026-48043", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-48043 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:c83fe3d2-5df4-5dbd-aa0d-8551e61204e9", "id": "CVE-2026-48059", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-48059 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:f2356a15-ef7f-5205-8ace-e88c885208c7", "id": "CVE-2026-50010", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50010 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:c9639d0b-8c3b-52a9-84df-0e5fae1efad2", "id": "CVE-2026-50011", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50011 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:85282fc1-8ceb-504e-bf68-144b8a165b98", "id": "CVE-2026-50020", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50020 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:d1fa35ee-0061-509f-ac2f-194306dc5bfb", "id": "CVE-2026-50560", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50560 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:2f20a293-b22c-53b2-af1f-994b4e9569de", "id": "CVE-2026-55831", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55831 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:988571fe-4a09-5b6b-9b58-99315476d4af", "id": "CVE-2026-55833", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55833 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:e2dbb7fa-ae43-55f4-b39d-6e98a141f9fd", "id": "CVE-2026-55851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55851 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:7c626311-ec56-56ee-bd3d-71e2c46a22e3", "id": "CVE-2026-56745", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56745 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:27ad8647-aef3-5e97-b33d-ea77119dc33e", "id": "CVE-2026-56746", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56746 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:020f00e4-2dc1-5395-bdea-ba78fe2c5307", "id": "CVE-2026-56817", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56817 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:e9e62342-2871-55f1-8508-75991f973c2f", "id": "CVE-2026-56818", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56818 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:e8370974-4ccb-5401-be36-29c2b4619a76", "id": "CVE-2026-56819", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56819 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:f0194fbb-51f8-5cc5-881d-890762e0ebe4", "id": "CVE-2026-56820", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56820 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:63f0d636-93e6-5840-ae41-04ed7acd610a", "id": "CVE-2026-56821", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56821 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:6d432db9-cbfc-51b3-aa19-1b447f2f9036", "id": "CVE-2026-56822", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56822 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:5f61d059-417e-56b1-9dc3-60a82552a34d", "id": "CVE-2026-59898", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59898 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:d460f908-aed6-5836-8b6a-156f1ce88ea3", "id": "CVE-2026-59899", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59899 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:79502eb6-e6fc-5c70-8fe6-5b86f51dad1e", "id": "CVE-2026-59900", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59900 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:df27916b-b4f1-5d9b-936c-22d91240597d", "id": "CVE-2026-59901", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59901 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:87e127b0-2544-5856-b097-198842b64d0b", "id": "CVE-2026-59902", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59902 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:d0fdb589-fa42-5fb1-96d4-60789a9fca59", "id": "CVE-2026-59903", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59903 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:0cd60395-b135-5da1-ade3-16382d1b3a02", "id": "CVE-2026-59919", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59919 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:cfe691c9-a875-5571-b24e-8012d7e2d7bc", "id": "CVE-2026-59920", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59920 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:e17133fd-7286-5a0c-a24d-3f87ed3bfe71", "id": "CVE-2026-59921", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59921 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:4e874a2b-b103-5673-aede-0a383d0703a9", "id": "CVE-2026-73507", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-73507 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:6a01064e-5992-5e04-9167-cc20e5eeb485", "id": "CVE-2026-73508", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-73508 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:94839331-e7e3-5349-a32b-36b8340c961d", "id": "GHSA-mfg7-5gfp-c4w3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:2e8a3c16-c520-543e-a275-61cab1fd64a0", "id": "GHSA-v74w-7mr3-4qg3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.122.Final-tuxcare.1" } ] } ], "dependencies": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.122.Final-tuxcare.1" } ] }