{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:36d98aae-17bc-56b5-afb8-faead3760396",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.3",
      "type": "library",
      "group": "io.netty",
      "name": "netty-codec",
      "version": "4.1.130.Final-tuxcare.3",
      "purl": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.3"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:84e587bd-b183-5151-8908-75dcff829eda",
      "id": "CVE-2025-55163",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2025-55163 does not affect version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec. already_fixed \u2014 The target Netty 4.1.130.Final repository already contains the complete MadeYouReset (CVE-2025-55163) mitigation. The Http2MaxRstFrameLimitEncoder defense class is present, integrated into the HTTP/2 connection handler builder, and enabled by default for servers with a threshold of 200 RST_STREAM frames per 30-second window. All protocol-error-triggered RST writes route through the protected en..."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4445a337-bd1d-5ad9-bbcb-ab48771ee75e",
      "id": "CVE-2026-33870",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33870 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2113dcbd-e205-5076-be57-eadde4902e6c",
      "id": "CVE-2026-33871",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-33871 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:84468ff5-06ec-5bed-8858-1a5066a4d58c",
      "id": "CVE-2026-41417",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41417 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dba4d9e9-407f-5649-bd88-126a1e823264",
      "id": "CVE-2026-42578",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42578 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c0c65bc4-fdf4-5029-9473-ec2bf595c354",
      "id": "CVE-2026-42579",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42579 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:49c37604-e2e0-5346-8e9d-56b2510706f1",
      "id": "CVE-2026-42580",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42580 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cc8660e1-6ba6-5c6b-9d95-99a9815410dc",
      "id": "CVE-2026-42581",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42581 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0151a782-a15a-5045-87b8-d97f957b793d",
      "id": "CVE-2026-42583",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42583 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c13b9dbf-47a1-5524-b9db-a3e6c9496db2",
      "id": "CVE-2026-42584",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42584 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d3531652-9361-5fef-8027-133180d01cc5",
      "id": "CVE-2026-42585",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42585 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1e295abf-a208-5ae2-b8f4-35c85bfaef44",
      "id": "CVE-2026-42586",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42586 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:27788c69-173c-5732-a3f1-f4e96d137c10",
      "id": "CVE-2026-42587",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42587 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1023cbea-7789-5058-ba0f-0491b60e08f7",
      "id": "CVE-2026-44248",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44248 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:873ebdc3-2a6e-52b7-9fcf-3675c2f24bab",
      "id": "CVE-2026-44249",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44249 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0d29eb52-9264-506a-86de-33a054404754",
      "id": "CVE-2026-44250",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44250 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fabcd14c-52c1-53a7-9972-45527c65b6ca",
      "id": "CVE-2026-44890",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ab328cb7-d505-5182-b40d-77d80ba42348",
      "id": "CVE-2026-44891",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44891 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2f515958-b76d-56ac-8350-45426bf59e33",
      "id": "CVE-2026-44893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44893 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:829f53ec-8cd5-50cd-a2b5-3ddbac6118c1",
      "id": "CVE-2026-45416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45416 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6f96c7a7-c331-5456-adaa-3762f25faeb3",
      "id": "CVE-2026-45536",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45536 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8fc48b11-b9f1-5bd9-9393-1d9388a3e649",
      "id": "CVE-2026-45673",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-45673 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c66c0268-a0ba-5773-8f86-d2bc40167e7c",
      "id": "CVE-2026-45674",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-45674 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:df481aed-215c-5576-99ef-5ba3e6c3d63e",
      "id": "CVE-2026-46340",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-46340 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8e397b37-7f8a-5912-97ad-e82d40832883",
      "id": "CVE-2026-47244",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47244 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b131c115-d6fb-5d97-b4de-d0081b07bc0d",
      "id": "CVE-2026-47691",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47691 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:be57e5ff-8d81-5e03-8800-aa22799d642c",
      "id": "CVE-2026-48006",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-48006 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:39de304b-b501-5275-a3e3-92a85c3a8f14",
      "id": "CVE-2026-48043",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-48043 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9db3ca1b-a030-56bc-8eea-4583d0ec7f6e",
      "id": "CVE-2026-48059",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-48059 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2ee3b75a-66e3-5b7d-a463-c17cd00b8255",
      "id": "CVE-2026-50010",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50010 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d4cf1504-8513-5e40-90a9-c91d02d21eb9",
      "id": "CVE-2026-50011",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-50011 does not affect version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec. Patches already applied: bff98ee51b5d0b7ee25fd5005f2169f2a0467efa (already in target via d5b4e38845f5 'Backport CVE-2026-44890 to 4.1.130.Final')"
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4fb83f78-4271-57fb-b7c6-09ea0dc537f6",
      "id": "CVE-2026-50020",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50020 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:32045b25-fed5-552e-9fca-fff140c46543",
      "id": "CVE-2026-50560",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f300501f-1f02-5d1b-959b-161d9227b313",
      "id": "CVE-2026-55831",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-55831 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:297ae2d0-1d2d-56e2-9edb-be09fcf11367",
      "id": "CVE-2026-55833",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-55833 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ce50d207-fa2f-5d84-af5d-b77f22ecf2ee",
      "id": "CVE-2026-55851",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-55851 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8041c663-df89-55ce-a1eb-ee48fdb7fae3",
      "id": "CVE-2026-56745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-56745 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cb1260f8-8d13-5a14-87b6-5a90b2b96c7f",
      "id": "CVE-2026-56746",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-56746 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:31aaf7dd-d0e8-5350-a8af-cf107b368d56",
      "id": "CVE-2026-56817",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-56817 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b0954dc5-7c3d-59b7-b8bc-aa8a692a9e9d",
      "id": "CVE-2026-56818",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-56818 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8cf18c4d-7205-522a-877b-b60d4510590d",
      "id": "CVE-2026-56819",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-56819 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fa81f003-3074-5e7e-8245-e5b03313392f",
      "id": "CVE-2026-56820",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-56820 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8f35a6b1-9312-5ac2-ac2e-cd586bace370",
      "id": "CVE-2026-56821",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-56821 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:19d70e14-e65f-509b-8300-1516923ea5fc",
      "id": "CVE-2026-56822",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-56822 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d3055969-af65-5157-b95a-76854dad5a90",
      "id": "CVE-2026-59898",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59898 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:54c19fc7-f333-5710-9cb0-33bb0a245ed2",
      "id": "CVE-2026-59899",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59899 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:caaf3cc8-1f6d-52ad-bbad-8b65eb8453cb",
      "id": "CVE-2026-59900",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59900 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c1aa4461-c565-5032-8123-249975df7286",
      "id": "CVE-2026-59901",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59901 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5af066d8-8b1b-5033-8140-876783a0c0e5",
      "id": "CVE-2026-59902",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59902 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bd5221d7-0053-5f38-b31b-d91f7e95a92d",
      "id": "CVE-2026-59903",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59903 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:49742fac-6c46-5559-8935-711b472b6064",
      "id": "CVE-2026-59919",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59919 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:eae84a86-2686-564b-a30c-d73f6d540140",
      "id": "CVE-2026-59920",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59920 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5bb5054f-db08-5d14-ba30-17da4e814f52",
      "id": "CVE-2026-59921",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59921 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b653a0b0-121a-571d-a6b7-4d29c7593bb1",
      "id": "CVE-2026-73507",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-73507 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:219a109e-b0a1-5bde-8381-e55734e18c95",
      "id": "CVE-2026-73508",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-73508 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6919d621-3546-5e37-ade7-f09e28c256ad",
      "id": "GHSA-mfg7-5gfp-c4w3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8a91f9cf-3f9f-5f71-948e-f271d688a3f7",
      "id": "GHSA-v74w-7mr3-4qg3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.3"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.3"
    }
  ]
}