{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:2e6a331f-f648-5084-88dc-5f540f42d943", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/io.netty/netty-common@4.1.122.Final-tuxcare.2", "type": "library", "group": "io.netty", "name": "netty-common", "version": "4.1.122.Final-tuxcare.2", "purl": "pkg:maven/io.netty/netty-common@4.1.122.Final-tuxcare.2" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:5150141d-f391-5773-96c1-8799768e146a", "id": "CVE-2025-55163", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55163 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-common." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-common@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:b08ef48e-6209-55d6-a27d-0249be93902b", "id": "CVE-2025-58056", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-58056 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-common." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-common@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:8a98cdc0-844c-57a4-b70b-a3b8da0be826", "id": "CVE-2025-58057", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-58057 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-common." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-common@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:b961d22b-77fe-5236-bceb-78a53e6e6b92", "id": "CVE-2025-59419", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59419 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-common." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-common@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:3af85d1a-b7a8-5000-a762-9e39e2db1cfb", "id": "CVE-2025-67735", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-67735 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-common." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-common@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:3b7e6d58-0a11-56b0-b7bc-f149f6c3472c", "id": "CVE-2026-33870", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33870 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-common." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-common@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:891780e4-ed44-5cab-b711-03dfd6f444fb", "id": "CVE-2026-33871", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33871 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-common." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-common@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:7f19a047-f1fe-5d8e-be52-91b1685835c5", "id": "CVE-2026-41417", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41417 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-common." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-common@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:8b08629d-a359-5382-af1a-7abfce5fcdaf", "id": "CVE-2026-42577", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-42577 does not affect version 4.1.122.Final-tuxcare.2 of io.netty:netty-common. CVE-2026-42577 affects Netty 4.2.x only (advisory range >= 4.2.0.Final, < 4.2.13.Final). An fd left registered with an epoll event mask of 0 is woken forever by the unmaskable EPOLLERR/EPOLLHUP after a RST on a half-closed connection. Target 4.1.122.Final is NOT affected due to architectural differences. The patch modifies EpollIoHandler.java and EpollIoOps.java, part of 4.2's IoHandler/IoOps abstraction. Neither file exists in 4.1.x, which registers via EpollEventLoop.modify() off AbstractEpollChannel.flags. That field is seeded Native.EPOLLET, and no read/close/half-close path clears it (only the explicit pre-registration setEpollMode(LEVEL_TRIGGERED) opt-in), so the registration stays edge-triggered and the RST is reported once per edge instead of on every epoll_wait. The chain from INPUT (connection state change) to GOAL (CPU busy-loop via empty event mask) is broken at step (ii): the target cannot produce an empty event mask. Verdict: not_affected. Justification: code_not_reachable (Rule 5 Type A2)." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-common@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:45109487-e2ee-5e1f-8d79-59e7ffd2465c", "id": "CVE-2026-42578", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42578 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-common." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-common@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:77a35d74-cfca-51a7-b628-769d6741ccff", "id": "CVE-2026-42579", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42579 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-common." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-common@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:082b1a3c-549a-582a-ae81-d7de4d49d9c9", "id": "CVE-2026-42580", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42580 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-common." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-common@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:c22b8e73-b66e-507f-abfb-e6fab9a1b831", "id": "CVE-2026-42581", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42581 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-common." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-common@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:e1f4f974-99b9-551f-94a7-25fa6aeea1db", "id": "CVE-2026-42583", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42583 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-common." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-common@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:f4ca4203-d2fd-5d8c-9376-48115fd0fe90", "id": "CVE-2026-42584", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42584 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-common." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-common@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:1dea6743-298c-5dea-8a10-b1c0c455f0a6", "id": "CVE-2026-42585", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42585 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-common." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-common@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:cc0499ed-b8e7-5e80-b26a-631d912ccf67", "id": "CVE-2026-42586", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42586 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-common." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-common@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:b96225c4-3952-546e-896b-48df91a6b711", "id": "CVE-2026-42587", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42587 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-common." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-common@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:a1659000-a91b-5766-abc8-b46c999d9ae8", "id": "CVE-2026-44248", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44248 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-common." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-common@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:fb12882c-2674-5d42-804d-8ef37120e810", "id": "CVE-2026-44249", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44249 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-common." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-common@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:3da0382d-1d0e-545d-b40e-6fa86822689e", "id": "CVE-2026-44250", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44250 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-common." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-common@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:88bb3217-9b60-52ab-a177-d961e6372e19", "id": "CVE-2026-44890", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-common." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-common@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:f270fc22-c49b-5040-bb31-9673d42127fb", "id": "CVE-2026-44891", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44891 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-common." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-common@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:10e996b6-8db4-5ec7-b079-b8580fbae30c", "id": "CVE-2026-44893", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44893 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-common." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-common@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:781a3960-fae7-5536-abc5-a81d8b186e77", "id": "CVE-2026-45416", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-45416 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-common." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-common@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:e323ab34-91b3-5dab-990b-e527c51f32d2", "id": "CVE-2026-45536", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-45536 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-common." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-common@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:36047ed4-56f0-5c50-8945-ebfd69a66198", "id": "CVE-2026-45673", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-45673 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-common." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-common@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:87b44394-e0bb-5d94-a8ef-18cbeec41143", "id": "CVE-2026-45674", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-45674 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-common." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-common@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:3e3c9468-de4e-5643-b17e-2c35c1dc8cdc", "id": "CVE-2026-46340", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46340 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-common." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-common@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:132546d4-5d07-5796-aa3a-0ec97c6f1a5b", "id": "CVE-2026-47244", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47244 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-common." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-common@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:7b418343-02a6-5fa5-8301-2b5361e04da4", "id": "CVE-2026-47691", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47691 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-common." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-common@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:5cc340df-666d-5636-9af9-33b83c3f5c89", "id": "CVE-2026-48006", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48006 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-common." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-common@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:f6dd9957-e793-546e-9a20-10f484c991a7", "id": "CVE-2026-48043", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48043 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-common." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-common@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:3c772911-b313-5178-b505-c4b7a84275aa", "id": "CVE-2026-48059", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48059 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-common." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-common@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:0c8b6504-ab5e-511c-a1a8-4927ddac93ee", "id": "CVE-2026-50010", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50010 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-common." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-common@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:b74e6cf9-26b5-586b-8f17-689a1a598ca3", "id": "CVE-2026-50011", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50011 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-common." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-common@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:aceb4be0-7144-5bce-a55e-07cb3cd0a387", "id": "CVE-2026-50020", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50020 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-common." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-common@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:915e30f4-ef5d-548a-820a-cb6df1fdb1f4", "id": "CVE-2026-50560", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-common." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-common@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:1cbfa8f8-1527-5aef-a08d-693dcc73589f", "id": "CVE-2026-55831", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-55831 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-common." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-common@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:26825d79-7aa7-5d34-9e4e-72444904a823", "id": "CVE-2026-55833", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-55833 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-common." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-common@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:3a8e2e62-71ed-5d6c-8f78-7fa03e926e41", "id": "CVE-2026-55851", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-55851 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-common." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-common@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:4a8d59cb-6baf-5e3c-b99b-d52516a84da3", "id": "CVE-2026-56745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56745 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-common." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-common@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:db246af9-c37f-53e4-b7e4-d1f252202640", "id": "CVE-2026-56746", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56746 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-common." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-common@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:b07cd173-0228-5bf2-a41e-b4a2f81c9aa2", "id": "CVE-2026-56817", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56817 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-common." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-common@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:102ba812-51f5-5130-9762-855a12d18d8b", "id": "CVE-2026-56818", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56818 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-common." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-common@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:011b4038-5ebb-5e9c-b234-a9dc216623c3", "id": "CVE-2026-56819", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56819 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-common." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-common@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:31a8a406-dcdd-5c39-8be7-70e2a68a3628", "id": "CVE-2026-56820", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56820 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-common." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-common@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:c8dbc2df-fe7e-5743-a829-f61d05270c82", "id": "CVE-2026-56821", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56821 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-common." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-common@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:8d90a1d9-4172-5521-a886-944f70afc2b1", "id": "CVE-2026-56822", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56822 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-common." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-common@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:22f66d51-14fb-5fcf-8e71-7d716ecf9bdc", "id": "CVE-2026-59898", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59898 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-common." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-common@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:998737aa-004f-5c18-beab-ad7b85746142", "id": "CVE-2026-59899", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59899 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-common." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-common@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:3cb1eb9e-c8a3-53db-8c9a-b2a40960997d", "id": "CVE-2026-59900", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59900 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-common." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-common@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:f02f7c26-f105-5b7f-8a56-b68fca588f1c", "id": "CVE-2026-59901", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59901 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-common." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-common@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:d5f09438-2e8e-5402-8f62-fffc667cf9d5", "id": "CVE-2026-59902", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59902 affects version 4.1.122.Final-tuxcare.2 of io.netty:netty-common." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-common@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:e6116f8b-44b5-5f24-a78f-9fbecb7f8fbf", "id": "CVE-2026-59903", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59903 affects version 4.1.122.Final-tuxcare.2 of io.netty:netty-common." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-common@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:14ec03ec-cc64-58af-b5e0-26ac27e7e944", "id": "CVE-2026-59919", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59919 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-common." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-common@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:23f43066-ac45-5e8c-b0d7-082d6b4e42ef", "id": "CVE-2026-59920", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59920 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-common." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-common@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:0c0b5bf1-02e1-5560-a357-a41e6f4072bd", "id": "CVE-2026-59921", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59921 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-common." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-common@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:ea1ad78d-1f29-552f-8230-0c941be1ec32", "id": "CVE-2026-73507", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-73507 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-common." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-common@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:78839527-ffdb-5cde-9816-d6342d2ebec3", "id": "CVE-2026-73508", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-73508 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-common." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-common@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:8f8fdc5e-fae9-5335-83dd-3a15d3c879e6", "id": "GHSA-mfg7-5gfp-c4w3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.122.Final-tuxcare.2 of io.netty:netty-common." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-common@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:bac5b7e8-8ee8-5766-a085-f2acb2519fa8", "id": "GHSA-v74w-7mr3-4qg3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.122.Final-tuxcare.2 of io.netty:netty-common." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-common@4.1.122.Final-tuxcare.2" } ] } ], "dependencies": [ { "ref": "pkg:maven/io.netty/netty-common@4.1.122.Final-tuxcare.2" } ] }