{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:a42330a6-e1f5-5740-8ee0-e060baf9b2a7",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.7",
      "type": "library",
      "group": "io.netty",
      "name": "netty-codec-xml",
      "version": "4.1.82.Final-tuxcare.7",
      "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.7"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:6bec05b7-e32c-5bff-a020-7f8f4cc85f6c",
      "id": "CVE-2022-41881",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-41881 is fixed in version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:aa34f62a-a8b5-5da0-a627-2c3b7de26763",
      "id": "CVE-2022-41915",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-41915 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dfa6d1cf-f88d-5b97-bb3d-72acb7f4ed52",
      "id": "CVE-2023-34462",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-34462 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1b6730b4-6040-53b0-9d56-753ef2c152d2",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-44487 is fixed in version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f001d352-9d06-54c0-b40a-f3bc8da24e7d",
      "id": "CVE-2023-4586",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2023-4586 is a false positive for io.netty:netty-codec-xml 4.1.82.Final-tuxcare.7."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:40a45ac7-2ab7-5128-bbe4-2f0d5bce2a07",
      "id": "CVE-2024-29025",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-29025 is fixed in version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9fdaaf8c-4555-54ea-8ea2-ff1ca6853db4",
      "id": "CVE-2024-47535",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-47535 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fb69afea-8319-5818-b08f-12df89dc5dcd",
      "id": "CVE-2025-24970",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-24970 is fixed in version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ef04050c-2a37-59ff-b5b8-827f8313438b",
      "id": "CVE-2025-25193",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-25193 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:92ed63b5-22bc-5b29-a9f1-55dc6cb11396",
      "id": "CVE-2025-55163",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55163 is fixed in version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6addf392-6667-5d4e-a774-b81069816674",
      "id": "CVE-2025-58056",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58056 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fa470b48-5f41-59c6-9d9d-a82565350975",
      "id": "CVE-2025-58057",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-58057 is fixed in version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3f05e811-8be7-5b69-adb2-5a1ebf773ae9",
      "id": "CVE-2025-59419",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-59419 is fixed in version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:270a0628-6a16-5a8a-9030-c4f8011e1b75",
      "id": "CVE-2025-67735",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-67735 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:83b699d6-eeb2-5282-863f-e2b75dd90f09",
      "id": "CVE-2026-33870",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33870 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:91c03c83-6159-5776-9a8b-bc04a9988771",
      "id": "CVE-2026-33871",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33871 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0e22b036-ff03-55bb-b4af-f939177bb619",
      "id": "CVE-2026-41417",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41417 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8efdbdea-2415-58cc-a3f2-43eac765ea42",
      "id": "CVE-2026-42577",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42577 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:12b7d903-3071-5a0e-a7e5-92b674cddc7a",
      "id": "CVE-2026-42578",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42578 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:219251f1-cea6-52aa-9d7d-0ee2b0c8c70c",
      "id": "CVE-2026-42579",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42579 is fixed in version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d053395a-f7b7-535b-b956-488bef57239e",
      "id": "CVE-2026-42580",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42580 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e14be32b-9825-5768-b5f4-d227dcbb7d02",
      "id": "CVE-2026-42581",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42581 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:70bee07b-0917-5780-a679-3a21df0808f6",
      "id": "CVE-2026-42583",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42583 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:590acfe3-e86b-5f19-b59a-eaf69fb5221b",
      "id": "CVE-2026-42584",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42584 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:70ba9770-1fc4-52a2-8d2a-b557e4fba5ca",
      "id": "CVE-2026-42585",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42585 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a0e721d5-16e2-5d15-b1dc-27a069d087f6",
      "id": "CVE-2026-42586",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42586 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b6a249fd-b4cc-5263-b3a9-02c8578ba839",
      "id": "CVE-2026-42587",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42587 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a5a99503-229a-54d0-924a-c5720d28b2e6",
      "id": "CVE-2026-44248",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44248 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cb578321-6dd7-5ec6-928e-4e1866de3090",
      "id": "CVE-2026-44249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44249 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c0ec208b-f3d5-52ec-9e77-2f4b1f82b830",
      "id": "CVE-2026-44250",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44250 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a98d4df8-2b17-5027-bd7a-53f21b7fbcfa",
      "id": "CVE-2026-44890",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fc9ef4fa-1fc6-524b-b7f2-61e70bcb9191",
      "id": "CVE-2026-44891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44891 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:597c7225-f429-54be-a394-bf799b2d5460",
      "id": "CVE-2026-44893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44893 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2d46e5cd-d664-5dc3-a204-e380f9505b76",
      "id": "CVE-2026-45416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45416 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:39911a1d-c337-5f9e-9ce9-bbb88d624a36",
      "id": "CVE-2026-45536",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45536 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1c74e54b-9d97-5be7-90ab-715ab5bac2a3",
      "id": "CVE-2026-45673",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45673 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9581d7eb-5f2e-5f53-893f-44a471b3a635",
      "id": "CVE-2026-45674",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-45674 is fixed in version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:66723bcc-a5b7-5f6c-8077-df40435c2eb2",
      "id": "CVE-2026-46340",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-46340 is fixed in version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b74d6055-3b58-50a7-811a-6c3660d2634c",
      "id": "CVE-2026-47244",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47244 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1db29756-3b60-552a-a32f-d1aaf02cbbb8",
      "id": "CVE-2026-47691",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47691 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:22794f84-44b4-5695-a37d-0afc3aeb6b28",
      "id": "CVE-2026-48006",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48006 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8d585c35-3568-5758-bd65-4215400d4405",
      "id": "CVE-2026-48043",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-48043 is fixed in version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:843356e3-2859-567b-a137-389cb080fdd1",
      "id": "CVE-2026-48059",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48059 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:97aa4ac3-3425-5a43-a3ba-0931d6587d46",
      "id": "CVE-2026-50010",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50010 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0ee5fa8d-356a-5d8d-a730-63d87ad0aee5",
      "id": "CVE-2026-50011",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50011 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6605ef21-8d38-5114-ae59-5c7cad12bc5b",
      "id": "CVE-2026-50020",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50020 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:db64e795-a3fe-5397-b251-005c238147e1",
      "id": "CVE-2026-50560",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7f1f088d-8332-569e-92fb-a17fc34d710b",
      "id": "CVE-2026-55831",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55831 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f0de8ee6-1c5e-5042-a10f-325054f7527c",
      "id": "CVE-2026-55833",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55833 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a3ff0fa6-6cec-591c-84f6-8d3b808e0a61",
      "id": "CVE-2026-55851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55851 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b889aaac-6df1-5c3c-b4fa-3f624761211a",
      "id": "CVE-2026-56745",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56745 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:859fe31e-ef65-53d2-8286-d8d791d30892",
      "id": "CVE-2026-56746",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56746 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e43be2ff-a4e1-5245-97c8-060dce85a19d",
      "id": "CVE-2026-56817",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56817 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:18092954-6d67-58d1-a6ba-300340cf28ce",
      "id": "CVE-2026-56818",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-56818 does not affect version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-xml. not_affected \u2014 Version 4.1.82.Final is not affected by CVE-2026-56818. The vulnerability exists in the maxElements limit check that was introduced in version 4.1.135.Final (commit e51c64c964). Version 4.1.82.Final predates this security feature entirely - it has no maxElements configuration, no maxElements validation check, and therefore cannot exhibit the vulnerable pattern described in the CVE (throwing wit..."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3abe6004-fee2-577a-992a-13136d077ac2",
      "id": "CVE-2026-56819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56819 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:917b9a84-1bd5-5f47-98be-2f496da1732b",
      "id": "CVE-2026-59898",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59898 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:79af8299-b9f2-5a4a-b992-931967b8bbb7",
      "id": "CVE-2026-59899",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59899 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d7181da4-c4ed-5311-9a43-cb2138b12779",
      "id": "CVE-2026-59900",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59900 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:84820c47-b46a-5768-9a0c-93d6e0074038",
      "id": "CVE-2026-59901",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59901 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6231baec-f1e5-5368-8a6b-93879b611c71",
      "id": "CVE-2026-59902",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59902 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6044d78d-ded9-5e1c-ad87-261427088b9a",
      "id": "CVE-2026-59903",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59903 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:58e7efd4-e532-5916-a337-ec0c43face80",
      "id": "CVE-2026-59919",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59919 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:02e4a96c-f9f2-5b93-ac70-1b1a291ee4ce",
      "id": "CVE-2026-59920",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59920 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0957e80f-acc4-5967-9f24-12886d6566b3",
      "id": "CVE-2026-59921",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59921 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b8b528dd-3aec-50d5-9aad-207bf7ca3673",
      "id": "CVE-2026-73507",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-73507 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8eb368e0-f377-5c42-b374-1df3d9c3e6ef",
      "id": "CVE-2026-73508",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-73508 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2fbbe37c-a9c6-57e0-bb71-a1129a266a6d",
      "id": "GHSA-mfg7-5gfp-c4w3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fbd338d6-e8dd-55cf-acb7-c4d1372ecc02",
      "id": "GHSA-v74w-7mr3-4qg3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f6e54d13-5125-5612-9b7d-baa4f373e07a",
      "id": "GHSA-xpw8-rcwv-8f8p",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-xpw8-rcwv-8f8p is fixed in version 4.1.82.Final-tuxcare.7 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.7"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.82.Final-tuxcare.7"
    }
  ]
}