{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:245217d9-cba9-5952-8142-e0ac29d7b5b0",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/io.netty/netty-codec-xml@4.1.93.Final-tuxcare.3",
      "type": "library",
      "group": "io.netty",
      "name": "netty-codec-xml",
      "version": "4.1.93.Final-tuxcare.3",
      "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.93.Final-tuxcare.3"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:887f5434-045b-5d67-a4cf-4d2e9bdc4a5a",
      "id": "CVE-2023-34462",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-34462 is fixed in version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5bbf73ca-12fa-57b8-8a36-e29a2339b395",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-44487 is fixed in version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c8ec4cb0-70e1-5a23-bcdb-d22f0d3e9a38",
      "id": "CVE-2023-4586",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2023-4586 is a false positive for io.netty:netty-codec-xml 4.1.93.Final-tuxcare.3."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:01707f97-44ac-56f3-9840-2e201c3ab240",
      "id": "CVE-2024-29025",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-29025 is fixed in version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:38e3556d-f003-5d62-bf83-75d4637f4929",
      "id": "CVE-2024-47535",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-47535 is fixed in version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4ccd32f3-239d-53c6-b655-886e6b622ff1",
      "id": "CVE-2025-25193",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-25193 is fixed in version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cd3664db-f3de-5440-a372-e0829fc1e3a0",
      "id": "CVE-2025-55163",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55163 is fixed in version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2d999846-89ac-5860-b89f-5e22ec84aaed",
      "id": "CVE-2025-58056",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-58056 is fixed in version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4f665371-f1cb-5c94-81b1-b2d56be98c7d",
      "id": "CVE-2025-58057",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-58057 is fixed in version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ce5f5edb-e9d1-5d1d-82b5-0fa7a3b8546d",
      "id": "CVE-2025-59419",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-59419 is fixed in version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:16cf1e16-4ae8-5a3b-ac94-65b0eaed4518",
      "id": "CVE-2025-67735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-67735 is fixed in version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d225d0d4-c6c5-5892-901f-3c405403c3a6",
      "id": "CVE-2026-33870",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-33870 is fixed in version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:889785df-77c5-59c8-a36a-653021435d14",
      "id": "CVE-2026-33871",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-33871 is fixed in version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:272d498f-69d3-59c9-a9ed-a4b3d1a0587e",
      "id": "CVE-2026-41417",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41417 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:84ab8908-2f52-5e05-81b8-1919d31881c7",
      "id": "CVE-2026-42577",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42577 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b9fef73c-73a7-5093-a9b4-0bc3077c011e",
      "id": "CVE-2026-42578",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42578 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e61dea1f-fd9d-5446-8787-f1c5bbcc748e",
      "id": "CVE-2026-42579",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42579 is fixed in version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:792f0eea-de8f-530b-85b2-f942af3855cc",
      "id": "CVE-2026-42580",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42580 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:21140db6-7d8a-5432-b5e8-54d379c1291f",
      "id": "CVE-2026-42581",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42581 is fixed in version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c051c954-95b2-5b9e-a871-556c0302e94d",
      "id": "CVE-2026-42583",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42583 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1c79f603-ce02-5f87-a251-f8d3bca036b3",
      "id": "CVE-2026-42584",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42584 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:72250f3e-9212-57a0-a871-70b7fa6a6992",
      "id": "CVE-2026-42585",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42585 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6367c70e-3997-55b1-ade6-b49b618b3786",
      "id": "CVE-2026-42586",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42586 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6142f09e-c87f-572f-91be-9e46c9575a83",
      "id": "CVE-2026-42587",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42587 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7e8dbe8b-b34b-527e-9ae4-7af5a33ef64b",
      "id": "CVE-2026-44248",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44248 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8b2ef56d-2eff-5f53-bd68-379272e6e616",
      "id": "CVE-2026-44249",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44249 is fixed in version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0ea1cf2d-4fde-5c53-87d4-91c5b08825f0",
      "id": "CVE-2026-44250",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44250 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:67c41313-f4cc-5c08-b34e-88248ef4ca70",
      "id": "CVE-2026-44890",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e931f827-923e-5892-b91a-1ff79035775c",
      "id": "CVE-2026-44891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44891 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:32a04c96-1387-5525-8f65-2c15b49d82b3",
      "id": "CVE-2026-44893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44893 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:555ca752-eea6-5ad6-b124-4977fbaa0ec7",
      "id": "CVE-2026-45416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45416 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7a7ab3a7-39d9-5c8a-ad5b-99acab619e31",
      "id": "CVE-2026-45536",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45536 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:03fe5dcb-850d-50de-90a9-db323e4125b5",
      "id": "CVE-2026-45673",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45673 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0ffb26b0-9cd7-59b6-b938-3288d52dc4b0",
      "id": "CVE-2026-45674",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-45674 is fixed in version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:04b53f10-31f1-52bd-94dc-b9ec5107f77b",
      "id": "CVE-2026-46340",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-46340 is fixed in version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:536ae4a1-59d6-5259-bcb3-2053227ede48",
      "id": "CVE-2026-47244",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47244 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1808ad07-b7ce-5a83-bf02-3e9335d30cf3",
      "id": "CVE-2026-47691",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47691 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cbd34e9f-bdb9-55ee-a7d0-3f80f823779e",
      "id": "CVE-2026-48006",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48006 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:972ad6a3-f422-5881-80a2-939b4f11d9f2",
      "id": "CVE-2026-48043",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-48043 is fixed in version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cf2d811e-489d-5ff4-8b7b-1b4b1e674698",
      "id": "CVE-2026-48059",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-48059 is fixed in version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:93d5d78b-a164-5eb1-9a25-78a361c6b0ea",
      "id": "CVE-2026-50010",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50010 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9ce81541-859b-5038-aaa2-49f17f430d1c",
      "id": "CVE-2026-50011",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50011 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4e768706-76d0-597a-b3f7-b07f93511cd7",
      "id": "CVE-2026-50020",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50020 is fixed in version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dd8fb20b-c4e5-5026-b3c9-6ee9724eb444",
      "id": "CVE-2026-50560",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b3532e4d-607c-5670-ad73-dcce833d5932",
      "id": "CVE-2026-55831",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55831 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:294dc0a3-465e-59ca-accd-6022dc647f43",
      "id": "CVE-2026-55833",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55833 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4c39eff7-7900-515f-b568-8d28aa1cdcfd",
      "id": "CVE-2026-55851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55851 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4ccfb44c-4853-52ff-a61e-cb6525b3ecb8",
      "id": "CVE-2026-56745",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56745 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4d9f54fe-77b2-5ffb-85dc-8febeb1273c6",
      "id": "CVE-2026-56746",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56746 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0904d06d-86b0-59ed-8be5-96b4c4440ff5",
      "id": "CVE-2026-56817",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56817 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a40940fb-149b-5402-a724-9bb5a83ad3e2",
      "id": "CVE-2026-56818",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-56818 does not affect version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-xml. not_affected \u2014 Target version 4.1.93.Final does not contain the maxElements feature or associated code that CVE-2026-56818 describes. This CVE concerns missing cleanup when the maxElements limit check throws an exception (vs. proper cleanup in the maxNestedArrayDepth check). The maxElements feature was introduced by CVE-2026-48006's fix, which was only backported to 4.1.130.Final and later versions, not to 4...."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5d6a726f-8596-54e6-89eb-02a3afc16bfa",
      "id": "CVE-2026-56819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56819 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3f7826d2-e31e-5243-acae-018f7f0448fb",
      "id": "CVE-2026-56820",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56820 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:592466e2-60f6-5584-9462-58b4a68e0d03",
      "id": "CVE-2026-56821",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56821 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0698d1ed-85ad-586f-848e-f1bbb34d93bd",
      "id": "CVE-2026-56822",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56822 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:10d3bd94-d313-52a1-8ea3-3d575a55ac47",
      "id": "CVE-2026-59898",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59898 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1def8c96-bbc5-58de-990b-8e4e3038fb1f",
      "id": "CVE-2026-59899",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59899 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2b2fd024-1b6f-575a-bbb7-3d909826b10d",
      "id": "CVE-2026-59900",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59900 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fa3719ce-2404-5a67-b569-8a72e9a674fe",
      "id": "CVE-2026-59901",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59901 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ac552e0d-86fa-5caa-a440-78e54eca937f",
      "id": "CVE-2026-59902",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59902 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:12c18106-509d-5226-a899-383d7eb4a96b",
      "id": "CVE-2026-59903",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59903 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0d833fec-4637-5201-8c2f-e94fb2ec7555",
      "id": "CVE-2026-59919",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59919 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:87e1addd-7176-5a33-bba2-2c102a7af8b7",
      "id": "CVE-2026-59920",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59920 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9953a7dd-44d1-5f26-a9ac-5c84ac408dc3",
      "id": "CVE-2026-59921",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59921 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0f214672-e16d-52a7-9b79-eb571d504197",
      "id": "CVE-2026-73507",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-73507 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3482dfca-d015-502e-8c9b-5e4167941c2d",
      "id": "CVE-2026-73508",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-73508 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:12a644f7-fcb1-51be-a18d-7ade517ce951",
      "id": "GHSA-mfg7-5gfp-c4w3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6b3f11f0-e153-53c4-852b-53083d938607",
      "id": "GHSA-v74w-7mr3-4qg3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.93.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:75c43d1d-184e-5c8d-884c-a03dc161b900",
      "id": "GHSA-xpw8-rcwv-8f8p",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-xpw8-rcwv-8f8p affects version 4.1.93.Final-tuxcare.3 of io.netty:netty-codec-xml."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.93.Final-tuxcare.3"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.93.Final-tuxcare.3"
    }
  ]
}