{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:f7e0ed94-91fa-5e23-9fcd-4a982f748e58", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/io.netty/netty-common@4.1.122.Final-tuxcare.1", "type": "library", "group": "io.netty", "name": "netty-common", "version": "4.1.122.Final-tuxcare.1", "purl": "pkg:maven/io.netty/netty-common@4.1.122.Final-tuxcare.1" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:36e1c4c4-8c75-571f-9de6-a814673acd54", "id": "CVE-2025-55163", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-55163 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-common." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-common@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:9bc28989-dd60-59ee-9d45-00def98990c2", "id": "CVE-2025-58056", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-58056 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-common." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-common@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:3aa287d4-eead-51f9-85e1-08199fc328c2", "id": "CVE-2025-58057", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-58057 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-common." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-common@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:2def0c6b-a75f-51cf-baa8-cfeb57e8479c", "id": "CVE-2025-59419", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-59419 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-common." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-common@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:70495dcf-73fd-57de-8893-58e5f8d4c80c", "id": "CVE-2025-67735", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-67735 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-common." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-common@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:fa747fa6-f3ec-5530-9166-7cde43e8ae89", "id": "CVE-2026-33870", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33870 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-common." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-common@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:8a7a99ee-bca0-5a2c-b895-757ae945e916", "id": "CVE-2026-33871", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33871 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-common." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-common@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:79007f91-d2d5-5097-8335-e5afeb987158", "id": "CVE-2026-41417", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41417 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-common." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-common@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:3182b0cc-7b73-5472-b0ae-4debdc10b9a6", "id": "CVE-2026-42577", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-42577 does not affect version 4.1.122.Final-tuxcare.1 of io.netty:netty-common. CVE-2026-42577 affects Netty 4.2.x only (advisory range >= 4.2.0.Final, < 4.2.13.Final). An fd left registered with an epoll event mask of 0 is woken forever by the unmaskable EPOLLERR/EPOLLHUP after a RST on a half-closed connection. Target 4.1.122.Final is NOT affected due to architectural differences. The patch modifies EpollIoHandler.java and EpollIoOps.java, part of 4.2's IoHandler/IoOps abstraction. Neither file exists in 4.1.x, which registers via EpollEventLoop.modify() off AbstractEpollChannel.flags. That field is seeded Native.EPOLLET, and no read/close/half-close path clears it (only the explicit pre-registration setEpollMode(LEVEL_TRIGGERED) opt-in), so the registration stays edge-triggered and the RST is reported once per edge instead of on every epoll_wait. The chain from INPUT (connection state change) to GOAL (CPU busy-loop via empty event mask) is broken at step (ii): the target cannot produce an empty event mask. Verdict: not_affected. Justification: code_not_reachable (Rule 5 Type A2)." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-common@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:41246e14-7d94-56de-a6eb-352152fa2777", "id": "CVE-2026-42578", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42578 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-common." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-common@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:3f030dda-aa0e-5ce6-b8d6-996154d259db", "id": "CVE-2026-42579", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42579 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-common." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-common@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:3a1c531b-3987-5024-870b-05257773d04f", "id": "CVE-2026-42580", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42580 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-common." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-common@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:9a575a07-b231-5fcc-885f-884129a6106a", "id": "CVE-2026-42581", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42581 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-common." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-common@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:9af05b11-09eb-5ea0-ab26-7cb867b8aa36", "id": "CVE-2026-42583", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42583 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-common." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-common@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:5db07fe4-89e7-575e-8803-b77ba7153734", "id": "CVE-2026-42584", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42584 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-common." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-common@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:855796e3-63d2-597c-8b2b-3b033828ca77", "id": "CVE-2026-42585", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42585 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-common." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-common@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:ac49d79d-4b92-5f21-9c42-8bab6cacd7bc", "id": "CVE-2026-42586", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42586 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-common." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-common@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:1865d559-60e9-56bb-9046-a83d14546d12", "id": "CVE-2026-42587", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42587 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-common." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-common@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:972aa398-3c9f-5a2c-a358-bdb9c885262a", "id": "CVE-2026-44248", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44248 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-common." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-common@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:697fa40a-cdb6-518d-ac91-ad389b0fe33d", "id": "CVE-2026-44249", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44249 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-common." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-common@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:4d14e034-5f18-5595-820a-0319c0720426", "id": "CVE-2026-44250", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44250 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-common." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-common@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:9d9b56cd-4936-53c3-ba01-959a1c86f90a", "id": "CVE-2026-44890", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44890 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-common." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-common@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:d64e4665-5f42-5905-816a-0446795bc932", "id": "CVE-2026-44891", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44891 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-common." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-common@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:b33f3f6a-cb34-552e-934c-70c686b9f229", "id": "CVE-2026-44893", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44893 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-common." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-common@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:430edef7-aca5-5adb-a519-402c5c867dd0", "id": "CVE-2026-45416", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45416 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-common." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-common@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:9fc26252-2e78-5487-a2c5-bfa128437b03", "id": "CVE-2026-45536", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45536 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-common." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-common@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:e527055f-6656-5a8b-a0f3-f2fe20bf3596", "id": "CVE-2026-45673", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45673 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-common." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-common@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:23df266e-89d1-57cb-96fa-cd24c4f07ce2", "id": "CVE-2026-45674", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45674 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-common." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-common@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:99ae2b47-c9aa-5788-94cf-81c73c9e3dee", "id": "CVE-2026-46340", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-46340 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-common." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-common@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:9bf5751b-1a0b-5fa6-bdcf-fa25717acba9", "id": "CVE-2026-47244", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47244 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-common." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-common@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:f400fc0e-ce13-572c-b115-f03a767a8e85", "id": "CVE-2026-47691", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47691 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-common." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-common@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:8c4ce72d-24f2-57fb-b3eb-89ff64cf390a", "id": "CVE-2026-48006", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-48006 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-common." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-common@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:28d4f27b-e718-5a4c-87ba-ad00dd85af05", "id": "CVE-2026-48043", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-48043 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-common." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-common@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:05ae18e1-a3fa-5188-a4e4-7de722b65235", "id": "CVE-2026-48059", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-48059 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-common." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-common@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:60f3ffd1-3f3b-57ea-8609-7e602c6fe1c6", "id": "CVE-2026-50010", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50010 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-common." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-common@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:b4677d67-8559-58eb-981d-5bac730497bc", "id": "CVE-2026-50011", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50011 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-common." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-common@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:44125ea2-772a-5ad0-8d98-ec1658fec760", "id": "CVE-2026-50020", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50020 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-common." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-common@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:31d07d9e-b305-533a-83e1-091dda993225", "id": "CVE-2026-50560", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50560 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-common." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-common@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:a6331c6b-5c6d-5dbf-b3f3-641529bfb44b", "id": "CVE-2026-55831", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55831 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-common." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-common@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:4c6faa07-35d2-54a5-afb8-eb71fe28f7bd", "id": "CVE-2026-55833", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55833 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-common." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-common@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:3d8f1e01-0ce2-5e03-b570-a66abbba449a", "id": "CVE-2026-55851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55851 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-common." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-common@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:22e3f543-cf3f-56a7-bc82-689327c9f6ea", "id": "CVE-2026-56745", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56745 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-common." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-common@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:514f9c07-92d6-55ed-baa8-4d187633d284", "id": "CVE-2026-56746", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56746 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-common." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-common@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:ec5f1677-f58c-57c8-997a-d2681a74b85c", "id": "CVE-2026-56817", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56817 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-common." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-common@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:36cc8d08-0abc-5b2b-9cbf-5a4c8461cb2e", "id": "CVE-2026-56818", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56818 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-common." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-common@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:10d3d97a-0707-57eb-9287-6e74924fbf68", "id": "CVE-2026-56819", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56819 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-common." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-common@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:7e5bc864-4e2e-5a6d-8389-604833968d39", "id": "CVE-2026-56820", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56820 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-common." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-common@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:e93adf09-4877-5d8e-9252-d1a7edbceb5a", "id": "CVE-2026-56821", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56821 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-common." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-common@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:348db8f4-906f-587f-ae7e-0bdedef2c2dd", "id": "CVE-2026-56822", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56822 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-common." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-common@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:39c2b6a3-a5d8-530b-8b88-eca35c52b5b0", "id": "CVE-2026-59898", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59898 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-common." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-common@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:29e1efc0-e87e-5749-806a-7f8de6b3b87e", "id": "CVE-2026-59899", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59899 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-common." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-common@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:2ffd4d3b-bb12-5479-bca3-dc4e1e0e697a", "id": "CVE-2026-59900", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59900 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-common." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-common@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:1f3bd23e-5394-57e3-a7c9-40d74c76791e", "id": "CVE-2026-59901", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59901 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-common." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-common@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:910c6e4b-05d7-5a4f-921d-3d7d6e25dbc3", "id": "CVE-2026-59902", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59902 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-common." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-common@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:8dd6ef8c-017c-596e-aca6-1e737506f229", "id": "CVE-2026-59903", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59903 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-common." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-common@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:21095bf1-bbaa-58a0-96b2-ba0d6d4779ee", "id": "CVE-2026-59919", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59919 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-common." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-common@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:271f6332-57f1-5f9f-8db1-dc6c5424d6b2", "id": "CVE-2026-59920", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59920 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-common." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-common@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:3129d38c-1697-5b21-8216-cb58057c4abf", "id": "CVE-2026-59921", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59921 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-common." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-common@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:30e47f28-32f7-5775-a2c0-dff42ca6e195", "id": "CVE-2026-73507", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-73507 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-common." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-common@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:5f602a9a-1a09-540a-b0ca-04f31e834933", "id": "CVE-2026-73508", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-73508 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-common." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-common@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:8a5c0cd7-80fa-5e0f-a301-9d7c9b782672", "id": "GHSA-mfg7-5gfp-c4w3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-common." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-common@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:fda4358a-2b8c-59c4-ab88-85a2c113429c", "id": "GHSA-v74w-7mr3-4qg3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-common." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-common@4.1.122.Final-tuxcare.1" } ] } ], "dependencies": [ { "ref": "pkg:maven/io.netty/netty-common@4.1.122.Final-tuxcare.1" } ] }