{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:3964cac2-c8ad-5a16-aa9e-59a9b7e8ee88",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/io.netty/netty-common@4.1.130.Final-tuxcare.1",
      "type": "library",
      "group": "io.netty",
      "name": "netty-common",
      "version": "4.1.130.Final-tuxcare.1",
      "purl": "pkg:maven/io.netty/netty-common@4.1.130.Final-tuxcare.1"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:72e746bc-3ac3-5a47-ad53-44145c6a82ff",
      "id": "CVE-2025-55163",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2025-55163 does not affect version 4.1.130.Final-tuxcare.1 of io.netty:netty-common. already_fixed \u2014 The target Netty 4.1.130.Final repository already contains the complete MadeYouReset (CVE-2025-55163) mitigation. The Http2MaxRstFrameLimitEncoder defense class is present, integrated into the HTTP/2 connection handler builder, and enabled by default for servers with a threshold of 200 RST_STREAM frames per 30-second window. All protocol-error-triggered RST writes route through the protected en..."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-common@4.1.130.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c4aa9232-9a77-59a4-8b9e-4b20bc70d33c",
      "id": "CVE-2026-33870",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33870 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-common."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-common@4.1.130.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:87d934f3-7140-5128-940d-27692c9cb570",
      "id": "CVE-2026-33871",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-33871 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-common."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-common@4.1.130.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a6f1397d-ccb2-55c1-a513-d62dcfaf6447",
      "id": "CVE-2026-41417",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41417 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-common."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-common@4.1.130.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:01388afa-4f01-50fc-9579-0c56b8df49a8",
      "id": "CVE-2026-42578",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42578 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-common."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-common@4.1.130.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:11dd801f-c08b-5f9c-9d5a-8515079f6513",
      "id": "CVE-2026-42579",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42579 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-common."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-common@4.1.130.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e2b58154-9189-52b6-86b8-793d265a5a7e",
      "id": "CVE-2026-42580",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42580 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-common."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-common@4.1.130.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6d208576-2137-5661-b991-b9c1883fc198",
      "id": "CVE-2026-42581",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42581 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-common."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-common@4.1.130.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:167ed055-cad2-5597-929a-de8a7d2e6b53",
      "id": "CVE-2026-42583",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42583 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-common."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-common@4.1.130.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8fdc1848-0213-5ac9-9a84-f52ee14408f0",
      "id": "CVE-2026-42584",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42584 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-common."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-common@4.1.130.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:29c44271-d5ae-5696-b7ca-7b16cb837688",
      "id": "CVE-2026-42585",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42585 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-common."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-common@4.1.130.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0670e798-7e87-5f30-8c31-ab990e0f329b",
      "id": "CVE-2026-42586",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42586 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-common."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-common@4.1.130.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4ac888f1-b4fd-5aba-a291-00a26aa076a7",
      "id": "CVE-2026-42587",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42587 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-common."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-common@4.1.130.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:59580198-43f6-521f-af03-ded970ec3a8d",
      "id": "CVE-2026-44248",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44248 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-common."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-common@4.1.130.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d8bdc15d-207c-5bac-850b-e9211f692edd",
      "id": "CVE-2026-44249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44249 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-common."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-common@4.1.130.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:18bf472c-4006-548b-805e-70c70510f849",
      "id": "CVE-2026-44250",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44250 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-common."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-common@4.1.130.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9167af2c-54ad-59de-9de0-44a8b121bfb9",
      "id": "CVE-2026-44890",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-common."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-common@4.1.130.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a4074870-90b9-5a7c-9458-544e3588b2c5",
      "id": "CVE-2026-44891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44891 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-common."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-common@4.1.130.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:742b66d0-d920-5a6f-a8c5-554fa454f251",
      "id": "CVE-2026-44893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44893 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-common."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-common@4.1.130.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:71fa9ddc-7626-5ddb-88f9-131ac27887b7",
      "id": "CVE-2026-45416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45416 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-common."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-common@4.1.130.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5c598495-1ba0-5fa8-a91b-5b4b424dde58",
      "id": "CVE-2026-45536",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45536 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-common."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-common@4.1.130.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:27479e11-e92e-5b83-a37d-abce54a49df6",
      "id": "CVE-2026-45673",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45673 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-common."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-common@4.1.130.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:afb0c2dd-0736-5aa7-8fe2-b89d06ff3bbf",
      "id": "CVE-2026-45674",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45674 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-common."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-common@4.1.130.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c14f3066-0787-5866-bef1-4ff8184c74bb",
      "id": "CVE-2026-46340",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-46340 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-common."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-common@4.1.130.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:85fc418f-8bef-5284-a898-701bf3082727",
      "id": "CVE-2026-47244",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47244 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-common."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-common@4.1.130.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cf853d1f-d5f1-591d-9a17-c03a92290aa6",
      "id": "CVE-2026-47691",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47691 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-common."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-common@4.1.130.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:52858173-23e2-50a5-a868-1996ea1e6aae",
      "id": "CVE-2026-48006",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48006 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-common."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-common@4.1.130.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4493602f-8b63-59be-ab55-80e09694af50",
      "id": "CVE-2026-48043",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-48043 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-common."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-common@4.1.130.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:aabdc719-d102-504f-a3f0-fd012a661936",
      "id": "CVE-2026-48059",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-48059 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-common."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-common@4.1.130.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fa8e1abf-fe61-55c9-a2fe-1c4f29a11490",
      "id": "CVE-2026-50010",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50010 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-common."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-common@4.1.130.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7c27aa87-c4ce-5e8b-b190-dd6760c7d203",
      "id": "CVE-2026-50011",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-50011 does not affect version 4.1.130.Final-tuxcare.1 of io.netty:netty-common. Patches already applied: bff98ee51b5d0b7ee25fd5005f2169f2a0467efa (already in target via d5b4e38845f5 'Backport CVE-2026-44890 to 4.1.130.Final')"
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-common@4.1.130.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:aa2b7441-fa35-536b-b8f7-772c21d0df50",
      "id": "CVE-2026-50020",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50020 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-common."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-common@4.1.130.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:973d24b7-975a-55cf-a645-49f4de99e0c2",
      "id": "CVE-2026-50560",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-common."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-common@4.1.130.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8c5275a0-909c-5e66-a635-df999d2debde",
      "id": "CVE-2026-55831",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55831 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-common."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-common@4.1.130.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3e351397-479b-5d6d-b2b2-b97c64f85fcd",
      "id": "CVE-2026-55833",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55833 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-common."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-common@4.1.130.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bd578814-c5ff-533b-8db0-248eccf5f756",
      "id": "CVE-2026-55851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55851 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-common."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-common@4.1.130.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:12b8c34f-b4a8-5c27-a105-7cf9e2f8ed7b",
      "id": "CVE-2026-56745",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56745 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-common."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-common@4.1.130.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ed724601-23ca-5a93-8c58-ab6edbafd4f2",
      "id": "CVE-2026-56746",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56746 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-common."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-common@4.1.130.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9c305712-5e3e-5fe8-b12b-2893b7810fd4",
      "id": "CVE-2026-56817",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56817 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-common."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-common@4.1.130.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8c6d703e-8c6a-5117-94d7-a79c4e79c309",
      "id": "CVE-2026-56818",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56818 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-common."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-common@4.1.130.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b0c9ef96-7c0a-5e6e-8afe-de86aee3ecdd",
      "id": "CVE-2026-56819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56819 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-common."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-common@4.1.130.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7cd27b3f-f302-540d-8ec8-ecb11862f11e",
      "id": "CVE-2026-56820",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56820 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-common."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-common@4.1.130.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:853ed8f4-d172-53bf-9290-5411256c16fe",
      "id": "CVE-2026-56821",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56821 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-common."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-common@4.1.130.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:44e6a387-8bc5-57f2-ae81-ca881d3b3f94",
      "id": "CVE-2026-56822",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56822 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-common."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-common@4.1.130.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cc158c09-1562-5aad-afe8-7672280a8010",
      "id": "CVE-2026-59898",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59898 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-common."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-common@4.1.130.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:05b0ae4a-0f3f-53e2-9ed1-11ab1447c90f",
      "id": "CVE-2026-59899",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59899 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-common."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-common@4.1.130.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c68f0b7c-c22b-5b8b-b179-7b5881296375",
      "id": "CVE-2026-59900",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59900 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-common."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-common@4.1.130.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:76289fad-c979-5df4-b5f1-cc113ef2925c",
      "id": "CVE-2026-59901",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59901 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-common."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-common@4.1.130.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:348db418-6570-52c6-a4e5-d6e2a17446fd",
      "id": "CVE-2026-59902",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59902 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-common."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-common@4.1.130.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:233b0582-5ee6-57aa-b498-5a35a5cae795",
      "id": "CVE-2026-59903",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59903 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-common."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-common@4.1.130.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b61af864-7d8d-5a9c-a798-e97f17c14197",
      "id": "CVE-2026-59919",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59919 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-common."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-common@4.1.130.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:18b17439-4131-51b1-999d-81809f414b9a",
      "id": "CVE-2026-59920",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59920 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-common."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-common@4.1.130.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:968d08a8-d71a-5d72-8e92-075593ef0f32",
      "id": "CVE-2026-59921",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59921 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-common."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-common@4.1.130.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d7e4ca2e-f8f4-5480-bd23-df2606196725",
      "id": "CVE-2026-73507",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-73507 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-common."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-common@4.1.130.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:88c03699-3a00-5ef4-9abf-d36820226f93",
      "id": "CVE-2026-73508",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-73508 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-common."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-common@4.1.130.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:576f9ae9-4950-513b-aaf3-0937624d9607",
      "id": "GHSA-mfg7-5gfp-c4w3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-common."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-common@4.1.130.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2668b382-4105-51d0-9b01-4b0d79d1f20a",
      "id": "GHSA-v74w-7mr3-4qg3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-common."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-common@4.1.130.Final-tuxcare.1"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.netty/netty-common@4.1.130.Final-tuxcare.1"
    }
  ]
}