{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:6db4ad38-0031-5382-af17-0a39c5947fbc", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/io.netty/netty-codec@4.1.122.Final-tuxcare.2", "type": "library", "group": "io.netty", "name": "netty-codec", "version": "4.1.122.Final-tuxcare.2", "purl": "pkg:maven/io.netty/netty-codec@4.1.122.Final-tuxcare.2" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:29e373dd-f954-5d12-8213-0d81c8c0b3c2", "id": "CVE-2025-55163", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55163 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:f0274cbe-7fd1-558d-8a45-0cd5b2fc9ed1", "id": "CVE-2025-58056", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-58056 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:673f0ca8-cb23-51ca-9da2-a9fb2b614376", "id": "CVE-2025-58057", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-58057 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:1d3cd63d-1b22-5fa0-8078-117359b42596", "id": "CVE-2025-59419", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59419 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:903ebf8e-43b5-550e-8396-3c69f4ea4e7e", "id": "CVE-2025-67735", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-67735 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:2d2f17d6-6898-5bca-8e62-1c5bb8548bb0", "id": "CVE-2026-33870", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33870 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:37165420-7eda-5605-8fac-7749b649df66", "id": "CVE-2026-33871", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33871 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:1ee7e1c2-3001-582a-b790-355e386c9223", "id": "CVE-2026-41417", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41417 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:b61692a2-8619-58e0-8c40-1bc1b6c1eeb8", "id": "CVE-2026-42577", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-42577 does not affect version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec. CVE-2026-42577 affects Netty 4.2.x only (advisory range >= 4.2.0.Final, < 4.2.13.Final). An fd left registered with an epoll event mask of 0 is woken forever by the unmaskable EPOLLERR/EPOLLHUP after a RST on a half-closed connection. Target 4.1.122.Final is NOT affected due to architectural differences. The patch modifies EpollIoHandler.java and EpollIoOps.java, part of 4.2's IoHandler/IoOps abstraction. Neither file exists in 4.1.x, which registers via EpollEventLoop.modify() off AbstractEpollChannel.flags. That field is seeded Native.EPOLLET, and no read/close/half-close path clears it (only the explicit pre-registration setEpollMode(LEVEL_TRIGGERED) opt-in), so the registration stays edge-triggered and the RST is reported once per edge instead of on every epoll_wait. The chain from INPUT (connection state change) to GOAL (CPU busy-loop via empty event mask) is broken at step (ii): the target cannot produce an empty event mask. Verdict: not_affected. Justification: code_not_reachable (Rule 5 Type A2)." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:824f4811-9268-5c6f-9c6f-9ae421eefc69", "id": "CVE-2026-42578", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42578 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:396026a2-0b65-54e5-bb3e-e1e69ea04ffd", "id": "CVE-2026-42579", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42579 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:5f69c19c-4678-5b91-ad5d-7a5d03558221", "id": "CVE-2026-42580", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42580 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:67187631-20de-57d2-b6f7-16575563b22e", "id": "CVE-2026-42581", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42581 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:2f5b7915-69e8-5357-9832-01b4f53e55d9", "id": "CVE-2026-42583", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42583 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:4f5ff692-e1d8-51d4-a387-c9a7e5eae665", "id": "CVE-2026-42584", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42584 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:e8271f63-94ce-5afc-b820-9f9e9d8b6b7d", "id": "CVE-2026-42585", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42585 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:a1d6a21a-4c5d-50f2-a489-d5f3b29697e7", "id": "CVE-2026-42586", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42586 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:a8da2a77-189d-51ae-a1e7-1edb78527eac", "id": "CVE-2026-42587", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42587 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:0d3d0ee8-345f-57b3-b680-277532d25de3", "id": "CVE-2026-44248", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44248 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:c72951e3-ccc3-50a9-83e3-63ef1898cfbc", "id": "CVE-2026-44249", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44249 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:34d9b82a-d207-5507-a61b-de9b3f865629", "id": "CVE-2026-44250", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44250 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:ff553478-011d-5794-b6f0-86102eead92b", "id": "CVE-2026-44890", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:7191c8cf-478a-5226-89f7-9f5c3703f9f5", "id": "CVE-2026-44891", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44891 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:1afd6657-9668-504f-9b31-94cdcc7e8ffc", "id": "CVE-2026-44893", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44893 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:fdd77583-cf6d-5400-9474-3f521d75fd19", "id": "CVE-2026-45416", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-45416 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:5e9b5751-3c05-5a09-8aa8-c10ddb0322b9", "id": "CVE-2026-45536", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-45536 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:2118bb12-64b8-5956-936a-3cc2c8c7bb7a", "id": "CVE-2026-45673", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-45673 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:376ca5a4-f278-5c6c-8253-a0a449c6f795", "id": "CVE-2026-45674", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-45674 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:39d377e1-241d-55a0-824f-a54b3f0ea256", "id": "CVE-2026-46340", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46340 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:1089098d-c473-51a5-b492-ca837d7d8a54", "id": "CVE-2026-47244", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47244 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:aff2ca40-60a2-5416-addd-e9d6ea0d0a3b", "id": "CVE-2026-47691", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47691 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:c6fdae67-05f3-5009-adb7-37a1750bbf61", "id": "CVE-2026-48006", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48006 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:73687190-e1f7-5b43-bbcd-17fde92d5ab3", "id": "CVE-2026-48043", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48043 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:ef2c2e02-abc6-502f-be29-9c5b07a33d4b", "id": "CVE-2026-48059", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48059 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:245663cf-4059-57e3-8419-96d6693a9792", "id": "CVE-2026-50010", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50010 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:f67572df-1109-50f1-a5d3-b8ff3ec592db", "id": "CVE-2026-50011", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50011 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:1c65450d-da41-5f5b-a3e6-ab43b0e06ed7", "id": "CVE-2026-50020", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50020 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:bd408eab-accf-5c60-a28a-dc33ddcc6c60", "id": "CVE-2026-50560", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:b32089a3-4e26-52e8-b3ae-f08e6d91ad5d", "id": "CVE-2026-55831", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-55831 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:681484ef-b84b-5916-a5d4-c2a2abe60473", "id": "CVE-2026-55833", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-55833 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:52b11112-a36e-58c8-9f9d-135e95f5dd06", "id": "CVE-2026-55851", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-55851 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:054ec7bd-cddd-50b4-b3f0-8b019abfe14d", "id": "CVE-2026-56745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56745 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:0f5cacc2-4cfa-57c5-972c-afb46a00f8b4", "id": "CVE-2026-56746", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56746 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:6e2c8c58-5cf0-545e-aa83-2174adce0b06", "id": "CVE-2026-56817", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56817 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:698f209c-ee50-5e7c-b0fc-0353074d38c9", "id": "CVE-2026-56818", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56818 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:89c8ea16-2735-5e6c-aee5-34511f8a1df1", "id": "CVE-2026-56819", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56819 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:9201551d-cf7b-58d5-8eec-3f99a7cebbe1", "id": "CVE-2026-56820", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56820 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:9af6772f-3b05-5dfe-846a-75eb825e7abb", "id": "CVE-2026-56821", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56821 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:73b0bd5d-6cb0-5ab8-99c1-45a85245b912", "id": "CVE-2026-56822", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56822 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:1b69f528-45f8-5899-b308-c16b69195aad", "id": "CVE-2026-59898", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59898 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:501d5666-2935-5d65-844f-65aee122b642", "id": "CVE-2026-59899", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59899 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:f9616aaa-5ef4-5030-893a-a2a351d24122", "id": "CVE-2026-59900", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59900 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:02752c04-b458-56fd-90f1-609c70e2dadf", "id": "CVE-2026-59901", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59901 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:9f9155b3-a322-5c5c-8f8b-a115722eaa5c", "id": "CVE-2026-59902", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59902 affects version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:60ce6197-582c-56ae-97f7-693865b5f36c", "id": "CVE-2026-59903", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59903 affects version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:6c56bc92-9ad2-5565-9af9-042aec155c44", "id": "CVE-2026-59919", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59919 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:8aa16e69-a78c-5f23-9271-f18ce968ef8b", "id": "CVE-2026-59920", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59920 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:0b06bd0e-ebd6-555e-a66f-965d5dd9f13a", "id": "CVE-2026-59921", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59921 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:e6f65c52-ae8f-51d1-b154-333d48ec437b", "id": "CVE-2026-73507", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-73507 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:117abc02-ff41-5a6f-808a-3e19e58a5d3a", "id": "CVE-2026-73508", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-73508 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:b03c7755-2755-5d77-9489-bfdbebf5d82d", "id": "GHSA-mfg7-5gfp-c4w3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:614f9378-aafb-5ed8-9b27-6c907df037d6", "id": "GHSA-v74w-7mr3-4qg3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.122.Final-tuxcare.2" } ] } ], "dependencies": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.122.Final-tuxcare.2" } ] }