{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:9fdf9018-8579-5362-8527-9763ffa3a1dc", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.3", "type": "library", "group": "io.netty", "name": "netty-codec-xml", "version": "4.1.130.Final-tuxcare.3", "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.3" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:fdf64d44-3d24-5718-98ca-64a0b5f7fb70", "id": "CVE-2025-55163", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-55163 does not affect version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-xml. already_fixed \u2014 The target Netty 4.1.130.Final repository already contains the complete MadeYouReset (CVE-2025-55163) mitigation. The Http2MaxRstFrameLimitEncoder defense class is present, integrated into the HTTP/2 connection handler builder, and enabled by default for servers with a threshold of 200 RST_STREAM frames per 30-second window. All protocol-error-triggered RST writes route through the protected en..." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:9eafe5a7-d369-5c25-abbc-a8cfd147347a", "id": "CVE-2026-33870", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33870 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:b9f0e553-ad6f-5b68-94d2-b8fd60bc1f97", "id": "CVE-2026-33871", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33871 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:c66f1a0b-df23-54f2-bc69-431ee54f83a7", "id": "CVE-2026-41417", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41417 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:d02a171a-8f01-590e-bf70-9dc4375f3922", "id": "CVE-2026-42578", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42578 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:f7ea183a-5442-561a-ab7a-ab898cb97a07", "id": "CVE-2026-42579", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42579 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:79426758-4b07-5d3b-b610-a485d1658d5f", "id": "CVE-2026-42580", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42580 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:7e48baf0-6002-5e88-bdf6-5b4ee735eabf", "id": "CVE-2026-42581", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42581 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:6aaf579e-41d9-59f4-9862-a76c6844b741", "id": "CVE-2026-42583", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42583 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:9660a268-a0e1-522b-9612-2e65b0467cf3", "id": "CVE-2026-42584", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42584 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:45ca20e9-5779-53cf-a17c-47d95fc9da4c", "id": "CVE-2026-42585", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42585 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:b990bea5-68d8-5f36-b430-4ecad30f1b99", "id": "CVE-2026-42586", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42586 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:adc244f3-f461-57d8-b027-49e8cc547967", "id": "CVE-2026-42587", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42587 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:c7c37442-3029-5998-96fe-41edb19e1f68", "id": "CVE-2026-44248", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44248 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:f50e4065-4d19-5a13-981d-cfa1ac7554bc", "id": "CVE-2026-44249", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44249 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:1e82ea54-9ca5-53c3-a66e-8440dfb2d947", "id": "CVE-2026-44250", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44250 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:854b9503-287b-5745-a6d2-a3682093b93d", "id": "CVE-2026-44890", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:6818a782-05ef-5452-a500-d8b75fc07cc5", "id": "CVE-2026-44891", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44891 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:8b07174a-08aa-5684-ab4a-51903515d0b1", "id": "CVE-2026-44893", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44893 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:ee612667-a44d-5339-bf01-a9ae9bb73656", "id": "CVE-2026-45416", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45416 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:55a9fab3-376d-554e-8953-1949b9b6d9fd", "id": "CVE-2026-45536", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45536 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:04ebf18f-1814-53f9-a7b3-7a659038e5dc", "id": "CVE-2026-45673", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-45673 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:a906c61b-e8ec-5058-9187-822a753bf28b", "id": "CVE-2026-45674", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-45674 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:fee5c172-96ef-53c0-8cbc-a3483728d5a9", "id": "CVE-2026-46340", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46340 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:e2ea9463-82ac-5682-b3f6-dbdefd765339", "id": "CVE-2026-47244", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47244 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:c29f4b62-a018-5852-8cb6-fce2d0b91a3c", "id": "CVE-2026-47691", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47691 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:7271bcc1-7497-52c0-ada7-5186cbc7d4f3", "id": "CVE-2026-48006", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48006 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:2f71e8e0-c71b-561c-93ca-8dbda1ec5574", "id": "CVE-2026-48043", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48043 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:daaabe50-efe9-585c-b57e-3c46fec271dc", "id": "CVE-2026-48059", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48059 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:c70c83b5-69ca-5316-b88c-7dece1c9fc69", "id": "CVE-2026-50010", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50010 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:eb6c9cd8-4082-585b-8eba-6fb275b79c61", "id": "CVE-2026-50011", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-50011 does not affect version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-xml. Patches already applied: bff98ee51b5d0b7ee25fd5005f2169f2a0467efa (already in target via d5b4e38845f5 'Backport CVE-2026-44890 to 4.1.130.Final')" }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:9ebeb856-6592-5204-9f90-8491ab614fad", "id": "CVE-2026-50020", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50020 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:c819b42e-c3e7-5bf9-86e4-b23ecc3b0e09", "id": "CVE-2026-50560", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:f6ba9270-ca15-5772-a85f-ae6601aea492", "id": "CVE-2026-55831", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-55831 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:d737fa85-3c2e-56e1-aafc-7ccfbd7e1cc4", "id": "CVE-2026-55833", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-55833 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:5cff826c-295c-54f1-8ece-5167d68f32ef", "id": "CVE-2026-55851", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-55851 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:876e2c22-522f-5687-a18a-2c184fc70dd3", "id": "CVE-2026-56745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56745 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:f7577402-4f9e-5e3f-8b7d-f16034405ce2", "id": "CVE-2026-56746", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56746 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:f1a2a791-e05d-5abb-ad01-89c1a523184c", "id": "CVE-2026-56817", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56817 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:2968cd62-b215-50f8-af31-d4e345cdb752", "id": "CVE-2026-56818", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56818 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:611041f0-fe31-5e49-a473-47ef9700c0ed", "id": "CVE-2026-56819", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56819 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:1cd6b3f8-4dc6-5f74-b271-59ad1ab3c29f", "id": "CVE-2026-56820", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56820 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:2474cf09-cf8c-5a77-ba41-73382bc165b8", "id": "CVE-2026-56821", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56821 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:82e4c21b-eeff-538f-8eaf-7d185dee2742", "id": "CVE-2026-56822", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56822 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:ae0b01e0-7996-5792-b9b0-0c5b01eabbfa", "id": "CVE-2026-59898", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59898 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:d068200a-2a0c-5aa9-8371-7e2246ffcb05", "id": "CVE-2026-59899", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59899 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:8966177b-ee05-5755-beee-951f7bb3f645", "id": "CVE-2026-59900", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59900 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:3e02fb32-8ea8-5b65-941f-a2450c1fad0b", "id": "CVE-2026-59901", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59901 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:7bc1524c-82db-5ccc-84e9-376c4b7da23d", "id": "CVE-2026-59902", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59902 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:04466d86-c032-521d-ba25-c120eaca5ff4", "id": "CVE-2026-59903", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59903 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:5fcfa2e2-b2f9-51ac-9fe0-d3dabd97d0dc", "id": "CVE-2026-59919", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59919 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:b1d0541b-75d9-5bd5-bc2d-8077e0deec9d", "id": "CVE-2026-59920", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59920 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:631dda14-cbe6-5e7c-9181-5e272b2eafb3", "id": "CVE-2026-59921", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59921 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:981e7875-ce3b-5155-b0f3-5919e7887eae", "id": "CVE-2026-73507", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-73507 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:f5e7b00e-0c9a-5579-b9d2-7d9b831a9101", "id": "CVE-2026-73508", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-73508 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:04ab817d-c207-566e-ada3-11e406320f32", "id": "GHSA-mfg7-5gfp-c4w3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:151c553f-b448-5efa-8c0b-bc645ca3b67c", "id": "GHSA-v74w-7mr3-4qg3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.3" } ] } ], "dependencies": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.3" } ] }