{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:8e390beb-e580-59c2-b967-51e7ada4f40f", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.1", "type": "library", "group": "io.netty", "name": "netty-codec-xml", "version": "4.1.130.Final-tuxcare.1", "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.1" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:6d75fd6a-d87c-506b-971c-d43f6986d3ef", "id": "CVE-2025-55163", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-55163 does not affect version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-xml. already_fixed \u2014 The target Netty 4.1.130.Final repository already contains the complete MadeYouReset (CVE-2025-55163) mitigation. The Http2MaxRstFrameLimitEncoder defense class is present, integrated into the HTTP/2 connection handler builder, and enabled by default for servers with a threshold of 200 RST_STREAM frames per 30-second window. All protocol-error-triggered RST writes route through the protected en..." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:0a0d33c7-7477-5784-b974-19af5000801c", "id": "CVE-2026-33870", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33870 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:4e2c7d26-9d2e-508e-b2fd-9f324e6b2185", "id": "CVE-2026-33871", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33871 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:8549bc3b-3a8b-5de8-ad94-49336a9e14bc", "id": "CVE-2026-41417", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41417 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:ac7fff28-3e84-5429-88ae-661b2523fd52", "id": "CVE-2026-42578", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42578 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:8f294ca9-15c0-5c6a-b900-411fac370be8", "id": "CVE-2026-42579", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42579 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:9b10d570-2092-5730-be46-dcbb85de104a", "id": "CVE-2026-42580", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42580 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:e6003546-6cb5-5dfc-9532-ed4da7a7d68c", "id": "CVE-2026-42581", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42581 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:1ceef4ac-85ff-5656-a690-f78ac678d032", "id": "CVE-2026-42583", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42583 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:5c924d7a-5a80-5eef-885e-5be0e7492b64", "id": "CVE-2026-42584", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42584 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:923d2f90-3a16-5715-9a92-7982e269eb9b", "id": "CVE-2026-42585", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42585 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:cdfcc361-22dd-5e02-8d63-6259028f44f2", "id": "CVE-2026-42586", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42586 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:8d9e278c-2e2a-5ab6-89d3-b68eb744b2c9", "id": "CVE-2026-42587", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42587 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:9ec35a99-29a5-5c14-b65c-8c478c2851e1", "id": "CVE-2026-44248", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44248 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:b4356773-05bf-5246-a9ca-6d3adfc5f9cb", "id": "CVE-2026-44249", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44249 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:787009b6-6bce-5836-a30a-fb81211e2be6", "id": "CVE-2026-44250", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44250 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:3724c4bb-e969-5f83-8244-736b032dcf7a", "id": "CVE-2026-44890", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:367f05de-196b-562a-b3ac-f43155b70c4b", "id": "CVE-2026-44891", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44891 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:7c269cad-0853-5714-9065-484f84819ba4", "id": "CVE-2026-44893", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44893 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:64661dee-1f31-55a8-8e26-2e3bbe57784d", "id": "CVE-2026-45416", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45416 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:7d42935b-cf1e-5a17-8acb-6156c2e6c22f", "id": "CVE-2026-45536", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45536 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:225902bf-d8d5-579f-81a8-fc7db63c48dd", "id": "CVE-2026-45673", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45673 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:84af016d-8776-5a99-9a57-517d0818b39c", "id": "CVE-2026-45674", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45674 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:9ead9f73-e83b-562b-95db-cd671dcb1547", "id": "CVE-2026-46340", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-46340 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:82fb2e80-841f-5370-935d-7a801ac51e59", "id": "CVE-2026-47244", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47244 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:705fb93d-0cf8-5855-8377-d497bb59fb5e", "id": "CVE-2026-47691", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47691 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:5dbe8549-0c3b-511d-ba72-966147badcf3", "id": "CVE-2026-48006", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-48006 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:2ffbb92d-0778-5d48-bb4e-9fab2a321ad8", "id": "CVE-2026-48043", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48043 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:5f9eadaf-7abd-596a-b7a0-32ddff5caf33", "id": "CVE-2026-48059", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48059 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:bea9a46a-6e0c-565a-9a90-974752e49bdf", "id": "CVE-2026-50010", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50010 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:5f0df66c-ea83-55b0-9bc5-e807e4517195", "id": "CVE-2026-50011", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-50011 does not affect version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-xml. Patches already applied: bff98ee51b5d0b7ee25fd5005f2169f2a0467efa (already in target via d5b4e38845f5 'Backport CVE-2026-44890 to 4.1.130.Final')" }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:a8300b00-2840-5f9c-a457-287fa68b68e7", "id": "CVE-2026-50020", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50020 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:c2aa1908-61fb-5c12-9051-66b06e579297", "id": "CVE-2026-50560", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:d780fc0a-4c31-5d6e-bc7c-32c579072300", "id": "CVE-2026-55831", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55831 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:059ccd9b-bcee-5286-9b10-a16039893751", "id": "CVE-2026-55833", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55833 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:956195ec-6d92-58c0-8c32-2c10cc430d9e", "id": "CVE-2026-55851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55851 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:d6f2facf-71e1-5e37-b836-df2a8531a1d1", "id": "CVE-2026-56745", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56745 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:cef0e217-9415-59b1-85b0-459d7eb35d02", "id": "CVE-2026-56746", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56746 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:36a3af4b-2dfd-5763-85fd-bf3086ace483", "id": "CVE-2026-56817", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56817 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:7a774352-60a5-5830-b20b-b7d7859c2d34", "id": "CVE-2026-56818", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56818 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:b95638d5-ac1d-529d-bb55-dae46f92adb5", "id": "CVE-2026-56819", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56819 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:0b8e8939-b389-595f-9bcb-ee92ad69df0a", "id": "CVE-2026-56820", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56820 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:f7efba02-b8be-558e-804c-513d8a3bdf84", "id": "CVE-2026-56821", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56821 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:a2265d82-d360-56a6-bbf0-b1d8e616fe65", "id": "CVE-2026-56822", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56822 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:6e7592ed-ebff-57d2-bf69-5baef3e42424", "id": "CVE-2026-59898", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59898 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:0d99d7d6-2da3-513c-96c6-c17627b47776", "id": "CVE-2026-59899", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59899 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:160a96e3-403c-5768-978c-72bff93a0405", "id": "CVE-2026-59900", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59900 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:825de9a8-1b18-512d-bef3-18e6a5ad305d", "id": "CVE-2026-59901", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59901 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:c185b535-3bd0-51d3-9826-4db0eb575ca5", "id": "CVE-2026-59902", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59902 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:de782073-bc36-5a2d-a5e6-b1e9406e00c0", "id": "CVE-2026-59903", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59903 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:2acea5f2-80b4-5ddd-b9cf-809624691dca", "id": "CVE-2026-59919", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59919 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:014fe5e4-2667-5af6-a997-76e827276ba4", "id": "CVE-2026-59920", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59920 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:0c7c3f62-ba20-5259-bf0a-2941bebb6b2b", "id": "CVE-2026-59921", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59921 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:14f370dd-b6ae-52ab-9349-693264f1f278", "id": "CVE-2026-73507", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-73507 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:5faf4bb4-04db-5798-8140-099422d48fdc", "id": "CVE-2026-73508", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-73508 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:94177e6e-bf31-5f72-85a8-4e570f18d402", "id": "GHSA-mfg7-5gfp-c4w3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:4c219008-22ef-55e1-9867-52fa71a9f401", "id": "GHSA-v74w-7mr3-4qg3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.1" } ] } ], "dependencies": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.1" } ] }