{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:78552488-d77a-5336-a529-9bf8dd43e9ca", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.4", "type": "library", "group": "io.netty", "name": "netty-codec", "version": "4.1.130.Final-tuxcare.4", "purl": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.4" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:45d0db79-00de-5f0b-ac30-0a91bc1c611c", "id": "CVE-2025-55163", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-55163 does not affect version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec. already_fixed \u2014 The target Netty 4.1.130.Final repository already contains the complete MadeYouReset (CVE-2025-55163) mitigation. The Http2MaxRstFrameLimitEncoder defense class is present, integrated into the HTTP/2 connection handler builder, and enabled by default for servers with a threshold of 200 RST_STREAM frames per 30-second window. All protocol-error-triggered RST writes route through the protected en..." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:f02bdce6-e90e-5afa-84f2-f08405ab8f90", "id": "CVE-2026-33870", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33870 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:710ceefa-a309-526f-a7f6-029e9796608c", "id": "CVE-2026-33871", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33871 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:d48aa69b-7de8-5161-83b6-ab733ca5139e", "id": "CVE-2026-41417", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41417 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:b0a79687-6dd1-5a6a-a2a9-6cb1b4cb24fd", "id": "CVE-2026-42578", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42578 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:ed95e1ee-84da-5eb8-82c6-50d355e7db96", "id": "CVE-2026-42579", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42579 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:289194f4-3a20-5d80-b2a3-a371fa716766", "id": "CVE-2026-42580", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42580 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:a5f6022e-5cd8-5310-a9f7-621ab775bced", "id": "CVE-2026-42581", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42581 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:62878c35-7fd9-59d0-8c40-201a7ad66dc2", "id": "CVE-2026-42583", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42583 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:fb6e7f1f-5000-515a-8add-648f65cbe0b9", "id": "CVE-2026-42584", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42584 affects version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:94a95a79-906e-5dbd-8c76-dd57aaa90993", "id": "CVE-2026-42585", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42585 affects version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:7b65a595-f747-5527-a54e-3c763b773a2c", "id": "CVE-2026-42586", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42586 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:296eeb46-d7ba-5160-b5b5-aec56edc8ba4", "id": "CVE-2026-42587", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42587 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:579d1342-38d8-55bb-857f-743bde203d3b", "id": "CVE-2026-44248", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44248 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:135ed129-16fd-5bef-81cd-a51babc4857b", "id": "CVE-2026-44249", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44249 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:d36788ef-13de-5339-a78c-7ab4ac178ac5", "id": "CVE-2026-44250", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44250 affects version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:2c521d73-c87d-575e-8d63-083a6891b33e", "id": "CVE-2026-44890", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:afbd3abd-b859-5873-bf06-961deaf6e2ea", "id": "CVE-2026-44891", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44891 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:39344a73-e391-5289-b656-06da2c6cad60", "id": "CVE-2026-44893", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44893 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:ccbc67b4-422f-54ab-bad5-f414d8b0240f", "id": "CVE-2026-45416", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-45416 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:70eb4200-90db-5239-b448-a60bf637e283", "id": "CVE-2026-45536", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-45536 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:abc4d639-3a3f-5212-a4ac-b0bc0924ed69", "id": "CVE-2026-45673", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-45673 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:2fc27dff-0ddb-5b31-b244-7097b1419239", "id": "CVE-2026-45674", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-45674 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:abf95f43-1efb-5805-8fbf-7c87ee7b6989", "id": "CVE-2026-46340", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46340 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:60ff2a83-c641-526a-9a79-d132252801fb", "id": "CVE-2026-47244", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47244 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:e2cb7947-e900-5b49-bc9b-460910b313f9", "id": "CVE-2026-47691", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47691 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:e1b313d8-b25b-5220-87c6-1e82c72294c4", "id": "CVE-2026-48006", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48006 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:a6f4485f-13b4-568c-a76c-b19252771d97", "id": "CVE-2026-48043", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48043 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:6189ecaf-4e77-5cda-96e1-8841a719e3bf", "id": "CVE-2026-48059", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48059 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:7c924101-cef0-52bc-8f1e-777dec7c60dc", "id": "CVE-2026-50010", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50010 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:0b328440-6d7c-5c81-968e-f83bd9297441", "id": "CVE-2026-50011", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-50011 does not affect version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec. Patches already applied: bff98ee51b5d0b7ee25fd5005f2169f2a0467efa (already in target via d5b4e38845f5 'Backport CVE-2026-44890 to 4.1.130.Final')" }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:4bb91191-b1cd-5c35-9725-750c21078004", "id": "CVE-2026-50020", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50020 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:b71c74bf-22e3-5175-9473-31cdd87d6aec", "id": "CVE-2026-50560", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:62608650-c0b2-5e4b-927d-e346bb94288e", "id": "CVE-2026-55831", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-55831 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:05c8b273-829d-5541-90a8-63a8f558368b", "id": "CVE-2026-55833", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-55833 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:58417daf-9ea6-5ebe-b24e-ee23ed7059e5", "id": "CVE-2026-55851", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-55851 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:92a7d705-200e-561a-b157-fdfe22c9bac7", "id": "CVE-2026-56745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56745 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:ff0d8c29-8779-5c5b-a74e-462fc693991e", "id": "CVE-2026-56746", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56746 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:a251e5ad-25f3-514c-bc1e-75383dc0d7db", "id": "CVE-2026-56817", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56817 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:a4d3f2e3-3a8e-55e9-9702-bf40d0b26e0a", "id": "CVE-2026-56818", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56818 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:a8ede255-15eb-562f-bf75-1a2046fc82a8", "id": "CVE-2026-56819", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56819 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:eb3b32aa-924b-5df1-aafa-8c9e15a1fbe2", "id": "CVE-2026-56820", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56820 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:1c7b50d6-2faa-50c9-9738-7147988a771f", "id": "CVE-2026-56821", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56821 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:7009c2f2-8c5d-54b2-91e2-f157b512d318", "id": "CVE-2026-56822", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56822 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:00cfbdb2-fe35-5ad1-be0e-68ee22bcbbf3", "id": "CVE-2026-59898", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59898 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:b79a46ef-e00a-58a7-b289-26b5c9c73943", "id": "CVE-2026-59899", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59899 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:36eb0d5c-7282-5b04-9682-15752b85ff89", "id": "CVE-2026-59900", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59900 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:7b30854a-2e7c-5988-9060-7bd76d2a0340", "id": "CVE-2026-59901", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59901 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:0fa77793-00e0-538f-9790-248847d73b29", "id": "CVE-2026-59902", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59902 affects version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:647aaad4-9505-5126-bb67-80c26953e1b0", "id": "CVE-2026-59903", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59903 affects version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:2f5c60b3-7f43-57b4-9cfb-3e6076e65b98", "id": "CVE-2026-59919", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59919 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:11f3ac04-2b8a-530f-a440-c01936093ac3", "id": "CVE-2026-59920", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59920 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:6e518d34-72e0-5b93-bf59-5bb6ebe8452e", "id": "CVE-2026-59921", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59921 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:c844f0d8-a359-5408-8da1-2340415bcd97", "id": "CVE-2026-73507", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-73507 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:3e65a574-0020-53cb-8f07-26da777e766d", "id": "CVE-2026-73508", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-73508 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:3ea36086-f111-5438-bbb7-b4d840bf1a97", "id": "GHSA-mfg7-5gfp-c4w3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:e2abd464-b6ac-50a5-ad29-364da3fb14bb", "id": "GHSA-v74w-7mr3-4qg3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.130.Final-tuxcare.4 of io.netty:netty-codec." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.4" } ] } ], "dependencies": [ { "ref": "pkg:maven/io.netty/netty-codec@4.1.130.Final-tuxcare.4" } ] }