{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:67c3b3f6-a207-565b-b4cf-5b843979a630", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.1", "type": "library", "group": "io.netty", "name": "netty-codec", "version": "4.1.130.Final-tuxcare.1", "purl": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.1" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:6c209fc3-2bc6-5946-920b-92c212a048e7", "id": "CVE-2025-55163", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-55163 does not affect version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec. already_fixed \u2014 The target Netty 4.1.130.Final repository already contains the complete MadeYouReset (CVE-2025-55163) mitigation. The Http2MaxRstFrameLimitEncoder defense class is present, integrated into the HTTP/2 connection handler builder, and enabled by default for servers with a threshold of 200 RST_STREAM frames per 30-second window. All protocol-error-triggered RST writes route through the protected en..." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:72e982d1-6ccc-564b-a641-796922d3a903", "id": "CVE-2026-33870", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33870 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:ce799785-0af7-5591-b62e-428d6b204e03", "id": "CVE-2026-33871", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33871 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:f5a091eb-8b72-57a7-bba5-4075e6f079eb", "id": "CVE-2026-41417", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41417 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:b96bba62-ba1b-57ea-b2fc-64f67f10db31", "id": "CVE-2026-42578", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42578 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:b1056c74-37cb-5f2b-a772-e20990c50cb0", "id": "CVE-2026-42579", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42579 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:8ad11326-6213-552b-b380-d83c6f2ef2b5", "id": "CVE-2026-42580", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42580 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:767c8855-5afa-5817-b2a6-9144ddcca438", "id": "CVE-2026-42581", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42581 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:b395a151-1d7f-55fc-af7d-d2af7242a3fa", "id": "CVE-2026-42583", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42583 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:a29fe5f9-36e3-5c49-a9aa-c69a0199d6b3", "id": "CVE-2026-42584", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42584 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:452c12f2-cf08-5f5d-a0d1-5e9df6a8d4aa", "id": "CVE-2026-42585", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42585 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:8a9c650d-ba90-5628-911a-6ac5cc8a62fa", "id": "CVE-2026-42586", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42586 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:86caeb41-a845-5e54-863a-454045178150", "id": "CVE-2026-42587", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42587 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:9bfa94a6-c8ea-5290-ae00-7ede39806bd4", "id": "CVE-2026-44248", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44248 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:e961a6c3-d9c1-5026-9ac2-8d24bb0920d3", "id": "CVE-2026-44249", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44249 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:d7ac6860-075a-5fdd-af2d-9cdc23ba0ab3", "id": "CVE-2026-44250", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44250 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:2f192d86-8a9f-5e21-8488-22135eeeab04", "id": "CVE-2026-44890", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:ec90d5a2-4d87-5ffe-8b22-c3f6afc5f05c", "id": "CVE-2026-44891", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44891 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:e73c295a-aa94-5112-b2c8-291766cdf923", "id": "CVE-2026-44893", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44893 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:8f713b7e-9101-52a5-be84-fcd7d79f70bd", "id": "CVE-2026-45416", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45416 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:56f13519-715d-5f7a-876d-7cc6dee3ad73", "id": "CVE-2026-45536", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45536 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:62155553-6718-5789-bb54-664f70bb2d41", "id": "CVE-2026-45673", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45673 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:c0898267-1803-58fe-af2f-aaa35297d8ee", "id": "CVE-2026-45674", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45674 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:e5b91b9e-55be-5a98-9fd9-d6cc350d1652", "id": "CVE-2026-46340", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-46340 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:e591a305-5535-5aa3-9c3d-9f6b9393d82b", "id": "CVE-2026-47244", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47244 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:a4b70862-cd80-54bc-b9a0-c6a89326d7fd", "id": "CVE-2026-47691", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47691 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:f8c2c626-2666-5771-b584-4520c3076fed", "id": "CVE-2026-48006", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-48006 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:8c1ad3ce-ca52-57b3-9e33-ef53f1e19b27", "id": "CVE-2026-48043", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48043 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:77218167-59e3-55bd-b69c-eac45c19353e", "id": "CVE-2026-48059", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48059 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:45bcb6f7-d3b4-5950-b87c-fb099a6661a8", "id": "CVE-2026-50010", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50010 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:6a85d32b-cd28-50f7-bfe8-4699312fb4ad", "id": "CVE-2026-50011", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-50011 does not affect version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec. Patches already applied: bff98ee51b5d0b7ee25fd5005f2169f2a0467efa (already in target via d5b4e38845f5 'Backport CVE-2026-44890 to 4.1.130.Final')" }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:1ebd695b-2d7f-5b2b-aee0-2d60790082db", "id": "CVE-2026-50020", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50020 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:b8ca3d4e-5b41-5b76-8761-dfd9a74ad4e0", "id": "CVE-2026-50560", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:db2b0f49-8612-54a7-8a77-de12c73e1e69", "id": "CVE-2026-55831", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55831 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:e8ce7a2d-b7bc-5669-b376-02e9a52b06ce", "id": "CVE-2026-55833", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55833 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:0450e37a-8def-5a79-9ac0-dbf5b488dce7", "id": "CVE-2026-55851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55851 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:0725fa03-4552-5190-a7aa-4d732c225e1b", "id": "CVE-2026-56745", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56745 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:74851eb1-547b-58e0-b732-d82dceba395e", "id": "CVE-2026-56746", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56746 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:dbf93375-f405-58ed-b704-a20c1976d807", "id": "CVE-2026-56817", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56817 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:c5c4aa99-3154-52b5-b002-0b6161e22e56", "id": "CVE-2026-56818", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56818 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:fdc47983-a17a-58ca-b11f-b3a690ed9e49", "id": "CVE-2026-56819", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56819 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:3f432ba7-dbe9-54d2-96ba-589ec50ade86", "id": "CVE-2026-56820", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56820 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:4b00bed8-6503-57ea-8dec-9e1ffa86efe9", "id": "CVE-2026-56821", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56821 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:f16efed2-e3c5-5c74-9aac-174ec85ee804", "id": "CVE-2026-56822", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56822 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:6d4609a9-20be-5948-83ad-6e11c4c237d9", "id": "CVE-2026-59898", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59898 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:1f266a4c-d30e-524c-a9c1-944c9174ec84", "id": "CVE-2026-59899", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59899 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:e2729257-cc6f-5da4-a7c1-9db6a515a6ea", "id": "CVE-2026-59900", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59900 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:3a91f1aa-878e-5737-9867-a8c8a6705dee", "id": "CVE-2026-59901", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59901 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:4837bf5d-eca6-51b7-b2ee-e66145e087a4", "id": "CVE-2026-59902", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59902 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:4cfabb49-c1ac-5787-a16d-62cfb3f6329d", "id": "CVE-2026-59903", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59903 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:35067f44-16a1-5878-8fcb-6a061ab24c26", "id": "CVE-2026-59919", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59919 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:4ef90bee-05a8-5002-b9d3-377286d737e4", "id": "CVE-2026-59920", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59920 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:067b4cc1-3879-5cc5-92ac-cbd1e2a816c7", "id": "CVE-2026-59921", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59921 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:f78919fa-9c31-5762-8a52-57b859393998", "id": "CVE-2026-73507", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-73507 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:c69632ad-64d8-5d53-952e-5fccc388cff4", "id": "CVE-2026-73508", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-73508 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:0a2573e5-a93b-526f-be74-2457890d285c", "id": "GHSA-mfg7-5gfp-c4w3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:6be88762-4005-5234-b299-bace575099cf", "id": "GHSA-v74w-7mr3-4qg3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.1" } ] } ], "dependencies": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.1" } ] }