{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:e7411830-3a94-598a-a00e-5c56839ce745",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/io.netty/netty-codec@4.1.92.Final-tuxcare.5",
      "type": "library",
      "group": "io.netty",
      "name": "netty-codec",
      "version": "4.1.92.Final-tuxcare.5",
      "purl": "pkg:maven/io.netty/netty-codec@4.1.92.Final-tuxcare.5"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:c55056b1-8706-5526-8135-43884de4dadb",
      "id": "CVE-2023-34462",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-34462 is fixed in version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2b50177f-9d24-5516-9b6f-2fae26d15c82",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-44487 is fixed in version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4e479121-0bcf-5334-a717-df82e035fd1e",
      "id": "CVE-2023-4586",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2023-4586 is a false positive for io.netty:netty-codec 4.1.92.Final-tuxcare.5."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d89a60fe-c27b-5756-a224-45ba9479cb0c",
      "id": "CVE-2024-29025",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-29025 is fixed in version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8ec249e3-b898-5658-9091-180900c116a7",
      "id": "CVE-2024-47535",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-47535 is fixed in version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0b149985-f324-59b8-b0c3-caafec34312f",
      "id": "CVE-2025-24970",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-24970 is fixed in version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e86d59ee-9bbc-59a0-8335-6d73211e3c85",
      "id": "CVE-2025-25193",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-25193 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ae46c7ce-203b-5386-b5fa-caf3ef39f666",
      "id": "CVE-2025-55163",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55163 is fixed in version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:74c95ba3-b153-5756-9318-edf6f37b942a",
      "id": "CVE-2025-58056",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-58056 is fixed in version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:35efe4c8-8c67-5732-837b-7f6ff659b356",
      "id": "CVE-2025-58057",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58057 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f0ceaaba-dd3e-5603-a483-268fc183dd76",
      "id": "CVE-2025-59419",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-59419 is fixed in version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f1f51e4f-3765-5dca-b3e9-4ca33b82caf4",
      "id": "CVE-2025-67735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-67735 is fixed in version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ee1c3388-af16-58a4-9164-bd392c58ceb3",
      "id": "CVE-2026-33870",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-33870 is fixed in version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:77f6ec5b-c31c-5e08-85ea-0990fd80e6e1",
      "id": "CVE-2026-33871",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33871 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7f1e2059-a132-56ed-bb3b-207b66b59113",
      "id": "CVE-2026-41417",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41417 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:297234cc-f438-5b36-8389-647ad1658c28",
      "id": "CVE-2026-42577",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42577 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:042adf64-b2aa-5062-908d-74a7bc856f2a",
      "id": "CVE-2026-42578",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42578 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:92241e4d-5a4b-597c-9ac9-8acc99148588",
      "id": "CVE-2026-42579",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42579 is fixed in version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8eb81a01-2bf6-524c-90aa-618211d86703",
      "id": "CVE-2026-42580",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42580 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:51842054-8669-514f-b3f8-96abf2da32a5",
      "id": "CVE-2026-42581",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42581 is fixed in version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:de5caec9-7641-58f8-991b-63e5621f7a06",
      "id": "CVE-2026-42583",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42583 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ec6b0780-4d61-5a3c-b0d7-ecb9c0e1526b",
      "id": "CVE-2026-42584",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42584 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:42cabfe9-8c35-52f7-8ef0-ebb7f30eb0c2",
      "id": "CVE-2026-42585",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42585 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6da3bc33-761c-52b7-95df-2275439275ee",
      "id": "CVE-2026-42586",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42586 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cfe760c0-6967-55e8-8c44-2f53d19595f4",
      "id": "CVE-2026-42587",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42587 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:95be78af-e937-5c23-b2b8-0f4053b70efa",
      "id": "CVE-2026-44248",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44248 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a1ff7c16-7601-5928-a795-54cfc11a7a47",
      "id": "CVE-2026-44249",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44249 is fixed in version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5bf7ff08-6f77-5bae-9c3e-7ab30ed0380d",
      "id": "CVE-2026-44250",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44250 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:37edb9fb-0e6e-50b8-be85-02586eaa6d8f",
      "id": "CVE-2026-44890",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d44755a9-2d41-5023-b298-481b50baf6a4",
      "id": "CVE-2026-44891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44891 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ae1d10b1-be03-558a-a525-ec5f483717e3",
      "id": "CVE-2026-44893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44893 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8aeb12e0-6adf-592e-acf0-e9b1a1ca2564",
      "id": "CVE-2026-45416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45416 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:afae17ff-e300-5b8c-9f6a-21e2ad174324",
      "id": "CVE-2026-45536",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45536 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7cb1b9f8-5491-5ac0-b3db-cfad82c20485",
      "id": "CVE-2026-45673",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45673 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ae3b5702-155d-5fec-b4d4-ed4086ca22fb",
      "id": "CVE-2026-45674",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-45674 is fixed in version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1615cf21-995d-5c9a-8e5b-bd1245b1a040",
      "id": "CVE-2026-46340",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-46340 is fixed in version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:adcc850d-03dc-5ff2-964d-8217e4c06b23",
      "id": "CVE-2026-47244",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47244 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5c347248-5aec-5e2d-9963-015bf5358708",
      "id": "CVE-2026-47691",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47691 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cb314b35-baf6-5b9d-bd20-798383d6d2a4",
      "id": "CVE-2026-48006",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48006 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:13e8ecf0-51f5-5d0e-9f81-15725e44675d",
      "id": "CVE-2026-48043",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-48043 does not affect version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec. not_affected \u2014 The target repository (Netty 4.1.92.Final-tuxcare.3) is not affected by CVE-2026-48043. The vulnerability exists in a newer architectural pattern (ChannelInboundHandlerAdapter-based decompression handling) that was introduced after version 4.1.92. The target uses an older architecture that processes HTTP/2 decompression directly in the onDataRead() method with existing try-finally protection."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f3db0f1a-2084-5082-b7b7-f1ff9af05a8b",
      "id": "CVE-2026-48059",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48059 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:46fcdde8-294a-5ee0-a353-c5c8530e0cac",
      "id": "CVE-2026-50010",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50010 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2ac1ae09-fc3b-513b-9204-20461cb8ab35",
      "id": "CVE-2026-50011",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50011 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1eb3ea5b-3000-5734-bb24-a7ea7175ca79",
      "id": "CVE-2026-50020",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50020 is fixed in version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3e84ea17-5da8-590f-9e6c-5b002e638214",
      "id": "CVE-2026-50560",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:46c8b9bb-231d-53dd-b626-1c79b3597ad4",
      "id": "CVE-2026-55831",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55831 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ebfc06d6-5eb1-5244-b260-6531076f2bfd",
      "id": "CVE-2026-55833",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55833 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:199993b4-5f59-56ca-8fb3-2a207dd743c0",
      "id": "CVE-2026-55851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55851 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f95e84d1-d99f-5756-be69-99ee06646904",
      "id": "CVE-2026-56745",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56745 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:44da62d6-c3b2-5e33-9805-8f9a490791ed",
      "id": "CVE-2026-56746",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56746 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1ab07e9a-76b2-5b3e-a206-1a160cae1ed7",
      "id": "CVE-2026-56817",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56817 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9645792d-70c8-5f79-8cea-ec2df523ca09",
      "id": "CVE-2026-56818",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56818 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d5457e7a-ae15-5ede-b3f5-5262cfe13272",
      "id": "CVE-2026-56819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56819 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:31b2af0f-98ff-51c9-af92-eb97984a40a9",
      "id": "CVE-2026-56820",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56820 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:70a37893-ae02-5bbc-a2b9-4563cfd41b7a",
      "id": "CVE-2026-56821",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56821 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:016b26c8-8274-5a1e-800b-9dcfdca06b3e",
      "id": "CVE-2026-56822",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56822 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6227e5d4-ce11-5a5a-ab37-27778a7dccad",
      "id": "CVE-2026-59898",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59898 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f7767ec6-c387-57da-8c86-49fea3a254d8",
      "id": "CVE-2026-59899",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59899 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3a84b75e-95f7-5efd-9bdf-566cbfb3ef69",
      "id": "CVE-2026-59900",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59900 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fa13e1d2-0997-5fd0-95ab-c1a2020c04ce",
      "id": "CVE-2026-59901",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59901 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2bd2ef4c-d071-506e-bc8a-2cfd42a619a0",
      "id": "CVE-2026-59902",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59902 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:33ed53e5-5ddc-5d48-95c3-75ece000ef9f",
      "id": "CVE-2026-59903",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59903 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:998189c5-ab02-5c32-be65-fa6a0c3079c2",
      "id": "CVE-2026-59919",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59919 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6a86521f-c071-5902-9f58-f2694fcee9ff",
      "id": "CVE-2026-59920",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59920 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4db1b1f8-f563-52a9-a672-98837436ece9",
      "id": "CVE-2026-59921",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59921 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c51d9c55-e7c9-5b7f-a404-55bc2004980c",
      "id": "CVE-2026-73507",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-73507 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2ec4be08-e84d-59b9-8fef-4a6e0857eb2d",
      "id": "CVE-2026-73508",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-73508 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:717dd71f-406c-503d-9108-031bd584518c",
      "id": "GHSA-mfg7-5gfp-c4w3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:28fcdfc5-43e6-5a74-88ae-cd79733bb060",
      "id": "GHSA-v74w-7mr3-4qg3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.92.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:629f4729-76b6-55a0-8005-9b1dbcd66299",
      "id": "GHSA-xpw8-rcwv-8f8p",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability GHSA-xpw8-rcwv-8f8p does not affect version 4.1.92.Final-tuxcare.5 of io.netty:netty-codec. The version is not vulnerable. [terminalized not_affected from patch_application_manual/not_vulnerable]"
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-codec@4.1.92.Final-tuxcare.5"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.netty/netty-codec@4.1.92.Final-tuxcare.5"
    }
  ]
}