{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:a56f7006-46be-53f2-a84e-2d86d37418e4", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/io.netty/netty-codec@4.1.122.Final-tuxcare.1", "type": "library", "group": "io.netty", "name": "netty-codec", "version": "4.1.122.Final-tuxcare.1", "purl": "pkg:maven/io.netty/netty-codec@4.1.122.Final-tuxcare.1" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:69cc2591-562d-5ab7-9c56-e7c5c316adf3", "id": "CVE-2025-55163", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-55163 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:4fc67224-ea2b-5bc8-a6c2-fcd45ee599ca", "id": "CVE-2025-58056", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-58056 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:68c20d8f-4f9b-5e78-b33b-b2e4a7677baf", "id": "CVE-2025-58057", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-58057 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:a34b08ac-31aa-5a53-90ba-3bdb004de334", "id": "CVE-2025-59419", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-59419 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:0999e0dc-3de6-5e2b-a6a0-d88c98de7030", "id": "CVE-2025-67735", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-67735 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:9a0b1977-6eb7-5ec7-853d-a8ead1e7e4ea", "id": "CVE-2026-33870", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33870 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:d58eae7a-88d4-5504-881e-c5cef632df28", "id": "CVE-2026-33871", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33871 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:e95053c9-f7ce-5db6-990e-1f26b22468ba", "id": "CVE-2026-41417", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41417 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:f2349f49-cef7-5eff-8001-9a7709fbf022", "id": "CVE-2026-42577", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-42577 does not affect version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec. CVE-2026-42577 affects Netty 4.2.x only (advisory range >= 4.2.0.Final, < 4.2.13.Final). An fd left registered with an epoll event mask of 0 is woken forever by the unmaskable EPOLLERR/EPOLLHUP after a RST on a half-closed connection. Target 4.1.122.Final is NOT affected due to architectural differences. The patch modifies EpollIoHandler.java and EpollIoOps.java, part of 4.2's IoHandler/IoOps abstraction. Neither file exists in 4.1.x, which registers via EpollEventLoop.modify() off AbstractEpollChannel.flags. That field is seeded Native.EPOLLET, and no read/close/half-close path clears it (only the explicit pre-registration setEpollMode(LEVEL_TRIGGERED) opt-in), so the registration stays edge-triggered and the RST is reported once per edge instead of on every epoll_wait. The chain from INPUT (connection state change) to GOAL (CPU busy-loop via empty event mask) is broken at step (ii): the target cannot produce an empty event mask. Verdict: not_affected. Justification: code_not_reachable (Rule 5 Type A2)." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:db17ab2b-e13f-59b9-8009-4d0a80df7c46", "id": "CVE-2026-42578", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42578 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:e52b1368-8b8c-5312-b8aa-1367ba932bdd", "id": "CVE-2026-42579", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42579 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:dc9415b6-6876-5170-9ee3-2134e458b387", "id": "CVE-2026-42580", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42580 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:07697b74-7b0d-5aaa-9981-6decbe0b6f3c", "id": "CVE-2026-42581", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42581 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:152e9c37-f744-57eb-b30b-870b75b02f38", "id": "CVE-2026-42583", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42583 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:d82416b1-42da-56e6-84c4-8597190202dc", "id": "CVE-2026-42584", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42584 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:ffb36515-2a59-579e-8bdc-af836f6b7b1b", "id": "CVE-2026-42585", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42585 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:763cece6-3748-5f75-bce5-61757aaded2e", "id": "CVE-2026-42586", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42586 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:31637a77-290d-5e78-9ef3-1f808aa0ffe5", "id": "CVE-2026-42587", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42587 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:8096289b-3fb0-5eda-bbe2-284c0043b144", "id": "CVE-2026-44248", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44248 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:5b98b146-b56b-5548-a80b-663f87078c99", "id": "CVE-2026-44249", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44249 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:bcf38205-6af5-5c59-bb8c-dc6f21d37c9e", "id": "CVE-2026-44250", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44250 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:f7422277-112b-52d6-8d00-ff83a7a3582c", "id": "CVE-2026-44890", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44890 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:a2d21707-3d3c-53e3-b829-3fe8331187dc", "id": "CVE-2026-44891", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44891 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:5073dc39-ac45-5c28-9088-016afaaf62ae", "id": "CVE-2026-44893", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44893 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:564cacca-d6a1-5c9f-8d3d-42ba5ec63280", "id": "CVE-2026-45416", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45416 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:fcff62a5-9f57-52cb-b6d7-be57dfb2e266", "id": "CVE-2026-45536", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45536 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:d49e07f4-cb94-5a14-91e0-4c34572c6100", "id": "CVE-2026-45673", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45673 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:915d2150-79d4-5bab-909d-1456d3b7593c", "id": "CVE-2026-45674", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45674 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:f29557a5-c7ab-5e00-971a-b7dd83ea52ec", "id": "CVE-2026-46340", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-46340 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:d932a357-1ba6-5d5c-b17e-211c4a6c0e89", "id": "CVE-2026-47244", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47244 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:8e76e41f-54c4-5b7b-8fe6-63736ad22189", "id": "CVE-2026-47691", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47691 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:5ee813fc-6c9e-54f2-86c3-1b397efe6b0c", "id": "CVE-2026-48006", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-48006 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:9a928aa8-c6d5-57bd-b459-3740079b671e", "id": "CVE-2026-48043", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-48043 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:f6cfc491-a5cb-5f6e-941e-2ade3e8be5c3", "id": "CVE-2026-48059", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-48059 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:99b7ccc1-19b2-578d-b9c3-8dba0b91a2ac", "id": "CVE-2026-50010", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50010 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:28af3a91-3086-5125-aee7-16ed687876a4", "id": "CVE-2026-50011", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50011 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:893f7d7e-5d74-5e5c-922c-36c3aace7f17", "id": "CVE-2026-50020", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50020 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:1f476e9d-2cbe-5c56-b37d-8427b39a6825", "id": "CVE-2026-50560", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50560 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:5071eb65-6b5e-5417-997f-5ecba0742987", "id": "CVE-2026-55831", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55831 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:8cb004c0-eed6-5412-8fab-f975988999ef", "id": "CVE-2026-55833", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55833 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:0b0d3efa-3c1f-5c0e-a9e4-0bfb08bb9721", "id": "CVE-2026-55851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55851 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:b7dfb815-74c4-5963-a5f4-806de5e80772", "id": "CVE-2026-56745", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56745 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:5a60271e-5700-5661-8dfb-3b304a162643", "id": "CVE-2026-56746", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56746 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:72b51252-8cf5-5a6b-84f8-65988df4701b", "id": "CVE-2026-56817", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56817 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:890f2d93-7bbe-5fd2-821b-a5725b2a4c1a", "id": "CVE-2026-56818", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56818 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:edcc5cd4-555c-5093-bc66-798329dd1ca4", "id": "CVE-2026-56819", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56819 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:cd15e637-56de-5beb-be16-6cc67177066e", "id": "CVE-2026-56820", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56820 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:8182570e-3762-5fd8-8ce9-44e84a23bbc5", "id": "CVE-2026-56821", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56821 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:9a98c375-5999-5034-b17c-10325017558f", "id": "CVE-2026-56822", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56822 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:db978021-888d-5ee5-8141-3aad86e77c6f", "id": "CVE-2026-59898", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59898 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:a5a02308-6c0a-59ff-bf3b-7a53e281f391", "id": "CVE-2026-59899", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59899 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:f6045018-0c38-53b9-a2b1-dd49b3e298d9", "id": "CVE-2026-59900", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59900 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:a5195c08-66af-5999-9cc6-a2c2cf26b6e9", "id": "CVE-2026-59901", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59901 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:eaa6307a-4d47-5370-8ed0-4693fcb124f6", "id": "CVE-2026-59902", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59902 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:79a716f7-56e1-5df6-a281-194881a56ba6", "id": "CVE-2026-59903", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59903 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:7d3a5406-3b60-5d31-b89c-64804661def3", "id": "CVE-2026-59919", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59919 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:187bc00b-3ef2-56bc-a43d-30a9a3377b6a", "id": "CVE-2026-59920", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59920 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:142d4b2b-ad89-59bc-892c-a429fa244f22", "id": "CVE-2026-59921", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59921 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:afc96448-553d-5e10-ad7f-a6124ca47db9", "id": "CVE-2026-73507", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-73507 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:3aec815f-0c3f-524c-bdc5-67e718ae5f7c", "id": "CVE-2026-73508", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-73508 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:2ce54994-4bbf-5499-a965-df2ca7239e70", "id": "GHSA-mfg7-5gfp-c4w3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:60f6c71e-3651-5504-957c-0ebe43b0c371", "id": "GHSA-v74w-7mr3-4qg3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.122.Final-tuxcare.1" } ] } ], "dependencies": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.122.Final-tuxcare.1" } ] }