{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:4c6e79f1-3b37-541e-8b41-a62fe957a595", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.2", "type": "library", "group": "io.netty", "name": "netty-codec", "version": "4.1.130.Final-tuxcare.2", "purl": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.2" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:e77d9068-8044-536d-bcc9-60b5f70fbf1e", "id": "CVE-2025-55163", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-55163 does not affect version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec. already_fixed \u2014 The target Netty 4.1.130.Final repository already contains the complete MadeYouReset (CVE-2025-55163) mitigation. The Http2MaxRstFrameLimitEncoder defense class is present, integrated into the HTTP/2 connection handler builder, and enabled by default for servers with a threshold of 200 RST_STREAM frames per 30-second window. All protocol-error-triggered RST writes route through the protected en..." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:8ab0e057-f4ab-5c9d-8d29-ba3feb1da583", "id": "CVE-2026-33870", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33870 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:e36813b4-3790-5507-96b7-5bc52a04c3d9", "id": "CVE-2026-33871", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33871 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:8b8f2e45-daaa-57ed-ac80-be5fa1d53cc0", "id": "CVE-2026-41417", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41417 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:1768a5b2-23be-53e3-b19d-d35fb0f49b7b", "id": "CVE-2026-42578", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42578 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:91605458-df37-58a7-a76e-77f93ef246b2", "id": "CVE-2026-42579", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42579 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:fb556d9c-b955-5b9d-bf47-6bf00e2761fa", "id": "CVE-2026-42580", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42580 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:6f53c29c-2a9f-5280-bcb0-2f55adf33cc2", "id": "CVE-2026-42581", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42581 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:d122b036-3f05-5583-b18c-e519c1b54606", "id": "CVE-2026-42583", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42583 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:948b38b4-6115-5c5e-8ab6-10c4dcc5ff15", "id": "CVE-2026-42584", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42584 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:8853c031-1edf-5cfe-a7e1-b0b061699b6f", "id": "CVE-2026-42585", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42585 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:63ef60ed-7059-5d4f-afd9-9e7da12b9b82", "id": "CVE-2026-42586", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42586 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:37ad8ec8-653b-591f-a182-cd6492e28982", "id": "CVE-2026-42587", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42587 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:de927390-10c3-58eb-8336-5b0508261d29", "id": "CVE-2026-44248", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44248 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:753d18ee-1e95-552a-882c-d00cce72344c", "id": "CVE-2026-44249", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44249 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:9fbf913e-ce0f-5b6d-bbd5-e251ce8ac42d", "id": "CVE-2026-44250", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44250 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:16588bfc-947e-518d-8b86-05dbae88d496", "id": "CVE-2026-44890", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:8365af29-928b-5d79-9d3d-667c58a67c79", "id": "CVE-2026-44891", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44891 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:973844d7-3466-5359-a921-525663367115", "id": "CVE-2026-44893", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44893 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:80d04f3a-9a9b-56f9-aa4f-cae925dde559", "id": "CVE-2026-45416", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45416 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:52300a45-e433-5b92-a95d-c252aea65859", "id": "CVE-2026-45536", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45536 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:a5530d47-7e81-5bd8-b984-1e32177fae93", "id": "CVE-2026-45673", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-45673 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:5985ab35-8a5b-5186-be7d-f7a9c062fa8e", "id": "CVE-2026-45674", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-45674 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:73d027f2-2e5f-5555-a54c-925adf2f631b", "id": "CVE-2026-46340", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46340 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:0db55f99-2113-5e8c-a256-47984c35d9ba", "id": "CVE-2026-47244", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47244 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:e3dd3b32-4d45-58d1-9e92-f5392d50e175", "id": "CVE-2026-47691", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47691 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:c1bdd64c-c542-5003-9745-e29a92c7ba41", "id": "CVE-2026-48006", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48006 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:193fcd7d-10bc-5d2e-a5ce-ebb46fe24b45", "id": "CVE-2026-48043", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48043 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:42a4a981-991f-525f-b51a-e647e76126db", "id": "CVE-2026-48059", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48059 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:e4961d6b-02ab-5c6e-a5e9-3bc80116f566", "id": "CVE-2026-50010", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50010 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:37e3ca0a-b578-55be-86a7-3c9d4ae4ecc7", "id": "CVE-2026-50011", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-50011 does not affect version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec. Patches already applied: bff98ee51b5d0b7ee25fd5005f2169f2a0467efa (already in target via d5b4e38845f5 'Backport CVE-2026-44890 to 4.1.130.Final')" }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:0ecf49cc-678c-5be8-8d7a-b28ffe2f9cee", "id": "CVE-2026-50020", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50020 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:f145a8fb-49ed-5b06-9f6a-2c53544be529", "id": "CVE-2026-50560", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:2907ef11-bfe2-5609-98c1-71fbf8f032b0", "id": "CVE-2026-55831", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55831 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:38bbab4c-b155-5828-add0-e09f98da2c12", "id": "CVE-2026-55833", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55833 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:ac4da0d7-5230-5865-badd-f1a9d6f1228d", "id": "CVE-2026-55851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55851 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:4c24e622-3aae-5183-aaf9-d77e543fed45", "id": "CVE-2026-56745", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56745 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:73086775-b2a8-560c-9b3f-3a840e195387", "id": "CVE-2026-56746", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56746 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:442a61b8-9731-535c-9dbd-14f15a631bbf", "id": "CVE-2026-56817", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56817 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:77d0d3b1-c6a1-5afe-a827-f6944702879d", "id": "CVE-2026-56818", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56818 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:1be54475-4d48-5dca-a5c6-1c5c39433985", "id": "CVE-2026-56819", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56819 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:4c20f2b4-2be0-56fd-9d0b-717aec1effc0", "id": "CVE-2026-56820", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56820 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:5ad6bf43-a612-5c91-b7de-776800e12a5b", "id": "CVE-2026-56821", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56821 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:941377dd-7498-5e38-965f-7cb82e6c439c", "id": "CVE-2026-56822", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56822 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:16b20a26-f269-5eb1-8c77-6b7584629f6e", "id": "CVE-2026-59898", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59898 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:e1f4da4f-c69a-55b0-abbe-4a7a561d31cc", "id": "CVE-2026-59899", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59899 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:8ee7ae72-edbd-5303-b055-e30a3e29c61b", "id": "CVE-2026-59900", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59900 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:39f21def-86fb-588e-8653-97b7aec0a574", "id": "CVE-2026-59901", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59901 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:a2bd386b-089e-5da1-a405-f8a474e74e82", "id": "CVE-2026-59902", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59902 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:7a4c1cf3-e73d-521d-98e5-73de4939e30a", "id": "CVE-2026-59903", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59903 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:1e8457b0-1141-5d39-a30f-a4841a808335", "id": "CVE-2026-59919", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59919 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:d3679967-6d47-56f2-8449-3f2107c3829a", "id": "CVE-2026-59920", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59920 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:289d5d24-8d24-5a93-92e4-ddfbe1aa0559", "id": "CVE-2026-59921", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59921 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:828bc53d-bcf8-5bc0-b358-4875fd554930", "id": "CVE-2026-73507", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-73507 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:207179d9-5eb4-5b63-9a39-05cafcc59475", "id": "CVE-2026-73508", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-73508 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:26b8e38d-d6d4-5e38-9c8f-39fe1cbbeb41", "id": "GHSA-mfg7-5gfp-c4w3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:b88e6a91-2252-5683-bd9f-459b808899ff", "id": "GHSA-v74w-7mr3-4qg3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.2" } ] } ], "dependencies": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.2" } ] }