{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:53b91fb8-e2fe-53d2-827d-2a3169099c4d", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.2", "type": "library", "group": "io.netty", "name": "netty-codec-xml", "version": "4.1.130.Final-tuxcare.2", "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.2" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:1855c3d9-4f35-5cce-9845-a48d30b645d7", "id": "CVE-2025-55163", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-55163 does not affect version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-xml. already_fixed \u2014 The target Netty 4.1.130.Final repository already contains the complete MadeYouReset (CVE-2025-55163) mitigation. The Http2MaxRstFrameLimitEncoder defense class is present, integrated into the HTTP/2 connection handler builder, and enabled by default for servers with a threshold of 200 RST_STREAM frames per 30-second window. All protocol-error-triggered RST writes route through the protected en..." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:40d73e19-e240-525c-a522-55e1eeb2ee56", "id": "CVE-2026-33870", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33870 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:9bfb6c39-3a7b-536d-b143-48a364ca17d1", "id": "CVE-2026-33871", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33871 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:5c2b4199-0d94-52b5-a470-5b789055a669", "id": "CVE-2026-41417", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41417 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:e050cff0-2264-52a8-b31a-6e9a41e6ece7", "id": "CVE-2026-42578", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42578 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:d135a2ab-da26-51dd-98a6-bf34edc41df2", "id": "CVE-2026-42579", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42579 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:1bfa1e92-b31a-50d9-845e-46f7b2142007", "id": "CVE-2026-42580", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42580 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:d7465a93-0c9d-595c-ba64-03ed9355d6cc", "id": "CVE-2026-42581", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42581 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:0043aa74-15bc-56d9-b8ac-74d33b0698be", "id": "CVE-2026-42583", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42583 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:3aa3c214-d226-5a37-b1e0-ac93a02a6ff8", "id": "CVE-2026-42584", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42584 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:12b39ffe-7291-50d3-a250-8eb5976ef0a9", "id": "CVE-2026-42585", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42585 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:b41ea6f9-0d07-5aeb-9874-fe1561a95676", "id": "CVE-2026-42586", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42586 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:ecc32244-56b9-587b-831e-4108d1020705", "id": "CVE-2026-42587", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42587 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:79e9614e-23c5-5a41-a5c3-4368608596c9", "id": "CVE-2026-44248", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44248 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:0e8e5631-bf2c-5001-878b-f405d93c62a1", "id": "CVE-2026-44249", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44249 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:1cf0f660-3ef5-57d8-a3f6-123362436cfa", "id": "CVE-2026-44250", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44250 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:23cfc4d5-e2ba-54e4-b81c-a5baa1f4a5ec", "id": "CVE-2026-44890", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:b65b640b-2423-5f56-89eb-61242ff41f63", "id": "CVE-2026-44891", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44891 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:fc9272e9-7293-53b0-91b3-ed1fa8ccea8e", "id": "CVE-2026-44893", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44893 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:3762b079-34e9-5126-ae0c-bbe53763d855", "id": "CVE-2026-45416", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45416 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:1ad3cd1b-b681-58b6-af1f-dc252d91ccbe", "id": "CVE-2026-45536", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45536 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:14cb7b83-2879-5d50-b11d-5b6e9983a7e2", "id": "CVE-2026-45673", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-45673 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:ae1a8ad1-f25d-5fe8-ae55-12bc5daefae4", "id": "CVE-2026-45674", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-45674 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:be1768da-f61a-577d-bb8f-70ce460e5730", "id": "CVE-2026-46340", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46340 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:5637d11d-c1dc-5a8c-a741-5f169f32982d", "id": "CVE-2026-47244", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47244 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:ce88b27d-c92a-5af2-a52d-3d0312d8bae7", "id": "CVE-2026-47691", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47691 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:62a1bbbb-d008-54bb-9f27-57c602c0f9c8", "id": "CVE-2026-48006", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48006 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:4736bd41-821f-57b8-889c-d7e014f55705", "id": "CVE-2026-48043", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48043 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:1a61c997-344a-5681-b121-b9bf2f0e8205", "id": "CVE-2026-48059", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48059 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:825efeaf-ff60-5f11-8e29-c0c5ee7f170b", "id": "CVE-2026-50010", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50010 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:9d33baf2-6b48-5d8c-a0e7-c53219945f6a", "id": "CVE-2026-50011", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-50011 does not affect version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-xml. Patches already applied: bff98ee51b5d0b7ee25fd5005f2169f2a0467efa (already in target via d5b4e38845f5 'Backport CVE-2026-44890 to 4.1.130.Final')" }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:c1a95b2e-f2ab-512f-b3e8-33c8017272d7", "id": "CVE-2026-50020", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50020 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:0a0dfaec-5678-56ea-bd8f-5a7b756b4dbc", "id": "CVE-2026-50560", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:9572fb5d-2452-596a-9ce5-cf02df22398f", "id": "CVE-2026-55831", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55831 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:a6db733d-4197-58a6-b935-3c43c73b1ae7", "id": "CVE-2026-55833", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55833 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:a365b3a3-8437-5e40-925d-be115ac0994c", "id": "CVE-2026-55851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55851 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:df3b45e7-8d22-51d5-bb30-0ddb42a0eced", "id": "CVE-2026-56745", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56745 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:0787f50b-0a59-5c7b-b8fe-07800f7b60aa", "id": "CVE-2026-56746", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56746 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:ebce035c-e5a3-5e0e-b4a9-050d437e9841", "id": "CVE-2026-56817", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56817 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:78eb3221-98c7-59df-bfb9-2b917708236e", "id": "CVE-2026-56818", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56818 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:776ba635-6164-51a8-ba18-9e1ee6c3066c", "id": "CVE-2026-56819", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56819 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:e7b9db8a-f1d8-5c23-b08f-1b5d04c93157", "id": "CVE-2026-56820", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56820 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:3cd6bfd0-4c38-5a14-ba7f-ab696518640a", "id": "CVE-2026-56821", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56821 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:fb1a6e9d-8f29-528c-b845-2fe6959dd4a0", "id": "CVE-2026-56822", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56822 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:3c259393-3183-52f4-a824-c10473139274", "id": "CVE-2026-59898", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59898 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:02ae6e2a-6c02-5b33-bd74-7b3d2165c1fc", "id": "CVE-2026-59899", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59899 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:4da1e30e-3568-5830-b9eb-9f8f3710ee76", "id": "CVE-2026-59900", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59900 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:8724dc28-41b9-50e9-92d3-abf0dc9fa38f", "id": "CVE-2026-59901", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59901 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:e462b208-2c1c-505f-a6f5-c4ecec46433c", "id": "CVE-2026-59902", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59902 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:645ef16e-a779-5e4f-b6b2-748f9e07a11b", "id": "CVE-2026-59903", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59903 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:e28617e2-74c7-5bcd-b90b-217a5c5e4cf2", "id": "CVE-2026-59919", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59919 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:365d9b44-4b11-5e14-b556-30d263f6797c", "id": "CVE-2026-59920", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59920 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:57852c21-7c38-5598-b9df-6e05488e4c2f", "id": "CVE-2026-59921", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59921 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:85c55495-7dd7-5271-bf93-2380d7356030", "id": "CVE-2026-73507", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-73507 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:d85f65ba-14d6-5f98-8cbb-400235162b39", "id": "CVE-2026-73508", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-73508 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:4e1b869d-2504-51e5-b3ec-99a476f47d0b", "id": "GHSA-mfg7-5gfp-c4w3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:739173cd-b89d-5888-b499-7bfa353ac859", "id": "GHSA-v74w-7mr3-4qg3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.2" } ] } ], "dependencies": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.2" } ] }