{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:cdf3ff5d-d85e-50c7-a805-8774ace07da5", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/io.netty/netty-codec-xml@4.1.63.Final-tuxcare.5", "type": "library", "group": "io.netty", "name": "netty-codec-xml", "version": "4.1.63.Final-tuxcare.5", "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.63.Final-tuxcare.5" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:4b224983-21ee-54d0-b0b0-cf4d8faacee0", "id": "CVE-2021-37136", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-37136 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:7942a231-6759-5a69-9f75-cbd8f1e2ebde", "id": "CVE-2021-37137", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-37137 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:d483adee-ddf6-503e-b0a5-b83480ba69ff", "id": "CVE-2021-43797", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-43797 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:800b68ae-6a09-549b-ac87-b70f029ffd16", "id": "CVE-2022-24823", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-24823 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:005de152-7b71-59fb-9188-6e481d6cd6c6", "id": "CVE-2022-41881", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-41881 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:93b4b3d2-883d-5473-b582-2b245b95db3a", "id": "CVE-2022-41915", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-41915 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:a7daa7de-eba8-596b-9c23-470fdf7f07a9", "id": "CVE-2023-34462", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-34462 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:58a2dabe-80c6-5054-bbba-dd4ee8b8167d", "id": "CVE-2023-44487", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-44487 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:0e374b66-a071-51d5-8b61-fecc86429db5", "id": "CVE-2023-4586", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2023-4586 is a false positive for io.netty:netty-codec-xml 4.1.63.Final-tuxcare.5." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:8a0ea1d7-51a0-563f-ae52-1ceb7f538d6b", "id": "CVE-2024-29025", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-29025 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:56b7aea6-4e90-56d3-84b5-3bcc1f179ee8", "id": "CVE-2024-47535", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-47535 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:aa92155a-0981-57a5-a638-cb5fc95a8cd6", "id": "CVE-2025-24970", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-24970 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:751292e6-117e-5e2a-b115-661bd5d56201", "id": "CVE-2025-25193", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-25193 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:ad8515ba-31f8-5ddb-adca-b2ac52fdbbba", "id": "CVE-2025-55163", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55163 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:37d58296-330e-5ef2-a8c9-9a7961f375cf", "id": "CVE-2025-58056", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-58056 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:cc529308-4ae9-56e2-ac22-fb85f5264839", "id": "CVE-2025-58057", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-58057 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:e3d9ef14-3414-5570-aa2c-ff608355598a", "id": "CVE-2025-59419", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59419 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:33fb3546-c5e8-5198-868b-c95bf7617231", "id": "CVE-2025-67735", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-67735 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:44fd63ba-ede7-5f51-9f54-bd3588441f2f", "id": "CVE-2026-33870", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33870 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:f453fc49-2fc4-55a9-a96c-75046b05e992", "id": "CVE-2026-33871", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33871 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:4ab37607-4f04-5520-b6f6-62f1890bdc74", "id": "CVE-2026-41417", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41417 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:a4e0875d-b441-5757-a653-48a37f4d0379", "id": "CVE-2026-42577", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42577 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:ceea3e16-7dd9-51a6-9c52-b33b0126ba0a", "id": "CVE-2026-42578", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42578 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:faabb8e1-e77f-5bbb-bac7-382ff79773ae", "id": "CVE-2026-42579", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42579 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:e690cd9d-34fe-5039-9a83-03c05a603103", "id": "CVE-2026-42580", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42580 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:0f243563-eb9b-5c8f-bfda-c15f536bee87", "id": "CVE-2026-42581", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42581 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:596bf0f4-1986-5281-a8c6-055ec75e91f0", "id": "CVE-2026-42583", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42583 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:c2af8a30-1ffd-5a82-b971-c46c76f2b6fa", "id": "CVE-2026-42584", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42584 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:0ca5f558-3fd2-559d-9a26-0c1280eece9b", "id": "CVE-2026-42585", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42585 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:84e019a5-0e7e-503f-901c-8b6283d18f23", "id": "CVE-2026-42586", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42586 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:72f76ffb-756d-5b4d-8798-2d72d4521909", "id": "CVE-2026-42587", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42587 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:8c6ab84c-c2ff-5ffc-bdcf-b3c88788bb25", "id": "CVE-2026-44248", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44248 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:228f0c05-14fa-5fea-86c1-29821aeb74cf", "id": "CVE-2026-44249", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44249 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:77065bf1-ed77-563b-9b88-43f1c532564d", "id": "CVE-2026-44250", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44250 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:ff72a0e2-56dd-56dd-9fb7-8b2fcff60975", "id": "CVE-2026-44890", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:e7775e2a-e972-5a3b-821a-86179751eee5", "id": "CVE-2026-44891", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44891 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:4e54b62e-7862-5f4b-ad36-c12297b4e42d", "id": "CVE-2026-44893", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44893 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:5a1e183d-aec0-5046-9371-7cc5adda216e", "id": "CVE-2026-45416", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45416 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:366c5760-8290-53c1-b19a-4dda9fdb1de5", "id": "CVE-2026-45536", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45536 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:556f193e-ae6e-59f6-bd59-5069ea528340", "id": "CVE-2026-45673", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45673 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:68ca5cf9-ee29-55b7-b493-e9da5f9bb794", "id": "CVE-2026-45674", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-45674 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:932d1590-360f-57ad-8aab-969bdefd2d4d", "id": "CVE-2026-46340", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-46340 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:d726603f-8b5d-5548-b7c0-6e0d1e03db20", "id": "CVE-2026-47244", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47244 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:5947fcc0-d7b9-55a0-82a7-0c995c90238e", "id": "CVE-2026-47691", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47691 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:76128808-ff26-554f-9a0c-9d2a50db7a8a", "id": "CVE-2026-48006", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-48006 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:4e8cc944-1273-5d31-b7b6-f8233c158443", "id": "CVE-2026-48043", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48043 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:5c69b672-7bbd-537f-b717-1a3bdc7fc500", "id": "CVE-2026-48059", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-48059 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:9f431190-62b1-5509-a54c-b24f29ee3924", "id": "CVE-2026-50010", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50010 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:eb88d75d-e120-5592-821d-2116f3bbb465", "id": "CVE-2026-50011", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50011 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:efbb8535-70ba-56d6-b9f0-bd3b5ac710cf", "id": "CVE-2026-50020", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50020 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:ab361d71-d599-558b-99cf-d3f595a975e7", "id": "CVE-2026-50560", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:64dae578-e856-561e-abdc-d67cc01d57d7", "id": "CVE-2026-55831", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55831 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:2b510a74-0ed8-5e04-90c8-678c1280062a", "id": "CVE-2026-55833", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55833 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:dd52489d-815e-5e53-98d5-f28e421930da", "id": "CVE-2026-55851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55851 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:ceb96ba4-f8db-54ba-a188-6b51cabaf4ad", "id": "CVE-2026-56745", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56745 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:ab06aac2-1309-5ef4-8ee5-06e0ae23d484", "id": "CVE-2026-56746", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56746 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:9e35ad97-873e-5d5a-9855-c9942993d5ae", "id": "CVE-2026-56817", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-56817 does not affect version 4.1.63.Final-tuxcare.5 of io.netty:netty-codec-xml. not_affected \u2014 The Netty codec-xml module contains XmlDecoder, which instantiates an Aalto XML parser without security configuration (line 38: new InputFactoryImpl() with no XXE protection). However, this is a library component that Netty itself does not use in its own production code. The vulnerability only manifests when downstream applications explicitly add XmlDecoder to their Netty channel pipelines. Per..." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:58d2126b-8fdf-58de-8c58-4dbeaa1109de", "id": "CVE-2026-56818", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56818 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:b76f2c13-f7d5-5e29-aebb-465e153dac7a", "id": "CVE-2026-56819", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56819 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:84a5416d-4160-56f3-990e-d956514341ea", "id": "CVE-2026-59898", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59898 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:1c181119-8220-53c6-82e6-a419c32ad62b", "id": "CVE-2026-59899", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59899 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:4d302480-dc8b-542b-92d3-a599d338773b", "id": "CVE-2026-59900", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59900 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:33ddd8c9-11eb-501c-a757-c9183226cf50", "id": "CVE-2026-59901", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59901 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:39dbc078-371b-57a0-a403-e0ac28dc8fb5", "id": "CVE-2026-59902", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59902 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:e6937362-a570-5cf1-855b-6c3900552125", "id": "CVE-2026-59903", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59903 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:c7f46c80-f224-5818-bf99-46db4a3d949c", "id": "CVE-2026-59919", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59919 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:1fa12c62-9a19-5318-8029-979470427181", "id": "CVE-2026-59920", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59920 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:387b5b96-13d6-59f2-94ad-9c220c6cfab1", "id": "CVE-2026-59921", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59921 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:141275c1-89a5-5ff7-b364-b9ace54acc00", "id": "CVE-2026-73507", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-73507 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:0cd6b3cd-d0c9-5f3e-96c2-373c77e1fdeb", "id": "CVE-2026-73508", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-73508 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:8e53e12b-9784-5d07-a053-cd210026d768", "id": "GHSA-mfg7-5gfp-c4w3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:79d3d7fa-769e-5ed4-974f-76e99f2e45e1", "id": "GHSA-v74w-7mr3-4qg3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:29d7b401-fd9f-591f-bf06-5ec423b621c5", "id": "GHSA-xpw8-rcwv-8f8p", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-xpw8-rcwv-8f8p affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.63.Final-tuxcare.5" } ] } ], "dependencies": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.63.Final-tuxcare.5" } ] }