{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:6ce52413-a7d4-5f50-9286-92b5f6fb4aac", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.4", "type": "library", "group": "io.netty", "name": "netty-codec-xml", "version": "4.1.130.Final-tuxcare.4", "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.4" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:6dd4ed03-34b3-5ab1-9761-7171755932ee", "id": "CVE-2025-55163", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-55163 does not affect version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-xml. already_fixed \u2014 The target Netty 4.1.130.Final repository already contains the complete MadeYouReset (CVE-2025-55163) mitigation. The Http2MaxRstFrameLimitEncoder defense class is present, integrated into the HTTP/2 connection handler builder, and enabled by default for servers with a threshold of 200 RST_STREAM frames per 30-second window. All protocol-error-triggered RST writes route through the protected en..." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:3c15ad52-5f37-535e-85b6-69028ad284f0", "id": "CVE-2026-33870", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33870 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:7bc0983c-d10c-5c63-9429-bb85172988b2", "id": "CVE-2026-33871", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33871 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:91604baa-2ec9-55f2-8f3b-e3634e897bcf", "id": "CVE-2026-41417", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41417 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:f1078dd0-c1a2-536d-9699-e72f227893cf", "id": "CVE-2026-42578", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42578 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:33bb5dc4-65d8-5b9e-941e-12eeffe39fe5", "id": "CVE-2026-42579", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42579 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:ff1379aa-de64-57ab-ae9e-3aa6c44a719a", "id": "CVE-2026-42580", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42580 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:ec628609-dffa-5543-82e7-813da148101e", "id": "CVE-2026-42581", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42581 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:3d167123-edc4-5a99-94de-6c9f17173e4b", "id": "CVE-2026-42583", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42583 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:31143cff-e8fc-5423-b0cf-9ccd69cead42", "id": "CVE-2026-42584", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42584 affects version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:96bd6659-4066-5983-97db-b49f9c5a7fe8", "id": "CVE-2026-42585", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42585 affects version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:f27707e8-61a2-505d-90e6-d4d127fcacb8", "id": "CVE-2026-42586", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42586 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:4b35453e-7749-5be5-b9ab-cb7a645db39a", "id": "CVE-2026-42587", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42587 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:3c7999a4-adcb-509f-87f4-08a5f033bb4a", "id": "CVE-2026-44248", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44248 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:d98ecc68-8297-5bbf-8d7b-54c85f0d29cb", "id": "CVE-2026-44249", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44249 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:0f2d2f80-9a71-5414-bfe4-d7ced0c842b6", "id": "CVE-2026-44250", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44250 affects version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:31ade25b-9f75-5155-8b07-11fe0cc9f784", "id": "CVE-2026-44890", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:1a180f92-d07d-5ce6-875b-2d3753b00bdc", "id": "CVE-2026-44891", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44891 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:e25d5b43-3c49-5ffe-aa04-482834cba544", "id": "CVE-2026-44893", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44893 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:1aa2f30f-2140-57b6-9623-22b4131efcc7", "id": "CVE-2026-45416", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-45416 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:4e41293c-52df-50b5-9626-6ff0b79c1caa", "id": "CVE-2026-45536", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-45536 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:ab72ccfd-d34b-5f5f-8562-480e66fc22af", "id": "CVE-2026-45673", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-45673 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:2fe4638b-5871-59d2-bfcd-89101ee0444b", "id": "CVE-2026-45674", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-45674 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:9fd156c7-ee55-5dc0-a74e-5a13d432bbc4", "id": "CVE-2026-46340", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46340 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:16b11c3c-64a1-5828-bdc9-fe8fcb9e914c", "id": "CVE-2026-47244", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47244 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:93292dae-2c7f-5d40-95ff-9e4d12adec7d", "id": "CVE-2026-47691", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47691 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:d66a42cc-5e41-5bf7-b44b-22f1b79185bd", "id": "CVE-2026-48006", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48006 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:163feed6-3bde-53e9-b0e8-499936e8534c", "id": "CVE-2026-48043", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48043 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:fda21080-88df-5b62-95f8-f0f9cde44cb6", "id": "CVE-2026-48059", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48059 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:0d973a31-7547-5d2e-aa16-80ae35945d51", "id": "CVE-2026-50010", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50010 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:c8995466-11a1-5060-b681-7f80422c86c1", "id": "CVE-2026-50011", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-50011 does not affect version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-xml. Patches already applied: bff98ee51b5d0b7ee25fd5005f2169f2a0467efa (already in target via d5b4e38845f5 'Backport CVE-2026-44890 to 4.1.130.Final')" }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:558a80af-69be-54e4-b9c8-1959bd731d5c", "id": "CVE-2026-50020", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50020 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:5fec4dbd-ba9d-5159-9cdd-3dc8ecfa079a", "id": "CVE-2026-50560", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:9a9e3796-fed4-5a86-bb27-7f8d4590e1b8", "id": "CVE-2026-55831", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-55831 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:b9c2f783-6811-57a0-8dad-46239e4e3c67", "id": "CVE-2026-55833", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-55833 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:68003ea2-d30e-5d40-b73e-71b72a72ee93", "id": "CVE-2026-55851", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-55851 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:5ab87973-64da-5407-b4cc-0d544bdf292f", "id": "CVE-2026-56745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56745 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:123621a1-fde3-52f3-9eb5-039ffb80dcbc", "id": "CVE-2026-56746", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56746 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:bb409772-ed0c-5e53-b9ac-eca0b6c9e597", "id": "CVE-2026-56817", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56817 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:9a690d78-f27b-5f8f-81f6-1b8ecc17ea02", "id": "CVE-2026-56818", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56818 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:b77287a4-e027-5be0-af40-f5b9d576b3cd", "id": "CVE-2026-56819", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56819 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:382e552a-eb93-50ee-bfbf-fe88fe5c885c", "id": "CVE-2026-56820", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56820 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:3b2741af-8ed3-584f-8b02-031dad02d9c0", "id": "CVE-2026-56821", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56821 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:8fecc961-ac75-5a9f-b1a7-44e8a8f0b3ab", "id": "CVE-2026-56822", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56822 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:dc38fbc5-e8c8-5e7c-834a-3a6bd427ff7c", "id": "CVE-2026-59898", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59898 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:758d83f7-7f45-5ac5-ad19-804aa3fc8d18", "id": "CVE-2026-59899", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59899 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:435ba57c-d05f-53cf-9be4-e9c6b94df335", "id": "CVE-2026-59900", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59900 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:d73d3267-ab77-5044-9d78-e45fcaa660eb", "id": "CVE-2026-59901", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59901 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:c13f7bb8-0059-5128-8cc9-cbb647cd362a", "id": "CVE-2026-59902", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59902 affects version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:6e167ada-7a18-5176-9566-77c0abd2a3d2", "id": "CVE-2026-59903", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59903 affects version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:7eb0b9a9-718b-5318-9701-84824ebc2100", "id": "CVE-2026-59919", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59919 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:7ed95d18-9844-5f63-94d1-8c3bf2a4afaa", "id": "CVE-2026-59920", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59920 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:c1e39b84-151f-5389-820e-a28b357126b5", "id": "CVE-2026-59921", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59921 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:033343f4-118e-5d0f-9245-85f8819a7971", "id": "CVE-2026-73507", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-73507 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:a7b363bc-880c-5401-b947-a7bc5c2486ce", "id": "CVE-2026-73508", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-73508 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:467d9776-34d3-5e40-8675-117758d64a55", "id": "GHSA-mfg7-5gfp-c4w3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:13291505-2fac-58e9-ae64-dd5d2af6779d", "id": "GHSA-v74w-7mr3-4qg3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.4" } ] } ], "dependencies": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.130.Final-tuxcare.4" } ] }