{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:baedb962-b161-50f8-bb7d-56cc93cbca02", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/io.netty/netty-dev-tools@4.1.122.Final-tuxcare.1", "type": "library", "group": "io.netty", "name": "netty-dev-tools", "version": "4.1.122.Final-tuxcare.1", "purl": "pkg:maven/io.netty/netty-dev-tools@4.1.122.Final-tuxcare.1" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:d0e67cb9-a29d-56c2-a7a0-d2631211953c", "id": "CVE-2025-55163", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-55163 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:842338de-25dc-57a7-a7ba-261c819dd729", "id": "CVE-2025-58056", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-58056 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:a26dfe78-43d3-5090-957b-4d3fdd30b06b", "id": "CVE-2025-58057", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-58057 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:f66b4768-0c75-5804-9c17-0fb7765c2706", "id": "CVE-2025-59419", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-59419 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:94c276b6-b25b-5f94-84ec-96757902b675", "id": "CVE-2025-67735", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-67735 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:2b1b328e-9c27-5c80-846a-85f8bef7451a", "id": "CVE-2026-33870", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33870 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:e4cd6a3f-6cde-5049-a514-900eafa53566", "id": "CVE-2026-33871", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33871 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:3b079e8e-0e88-5626-9734-b2dbda295af1", "id": "CVE-2026-41417", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41417 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:0ebdc562-5ec2-57c1-a446-94aa8905b69b", "id": "CVE-2026-42577", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-42577 does not affect version 4.1.122.Final-tuxcare.1 of io.netty:netty-dev-tools. CVE-2026-42577 affects Netty 4.2.x only (advisory range >= 4.2.0.Final, < 4.2.13.Final). An fd left registered with an epoll event mask of 0 is woken forever by the unmaskable EPOLLERR/EPOLLHUP after a RST on a half-closed connection. Target 4.1.122.Final is NOT affected due to architectural differences. The patch modifies EpollIoHandler.java and EpollIoOps.java, part of 4.2's IoHandler/IoOps abstraction. Neither file exists in 4.1.x, which registers via EpollEventLoop.modify() off AbstractEpollChannel.flags. That field is seeded Native.EPOLLET, and no read/close/half-close path clears it (only the explicit pre-registration setEpollMode(LEVEL_TRIGGERED) opt-in), so the registration stays edge-triggered and the RST is reported once per edge instead of on every epoll_wait. The chain from INPUT (connection state change) to GOAL (CPU busy-loop via empty event mask) is broken at step (ii): the target cannot produce an empty event mask. Verdict: not_affected. Justification: code_not_reachable (Rule 5 Type A2)." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:f1a9cf3f-e621-5e63-a49e-488cca84075c", "id": "CVE-2026-42578", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42578 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:39c02fa7-6037-5e34-b4ae-3ba7e39cbdf8", "id": "CVE-2026-42579", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42579 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:7728259e-4f8e-5789-bd4b-97e12434a73c", "id": "CVE-2026-42580", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42580 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:47d07e9c-4df9-5c0f-8a6e-8ec8510c0c28", "id": "CVE-2026-42581", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42581 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:cbcb81e1-a249-59bc-b376-63e9758415b9", "id": "CVE-2026-42583", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42583 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:fa86fbcf-8075-50fc-bb94-4b0696aa67f8", "id": "CVE-2026-42584", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42584 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:94257a80-a3e6-5f64-a8db-935dd464277a", "id": "CVE-2026-42585", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42585 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:b47ab58c-89f1-563f-b679-cf59c2f8372e", "id": "CVE-2026-42586", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42586 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:384678dd-b813-54fc-be78-fde524722e2f", "id": "CVE-2026-42587", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42587 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:7c534126-3ca7-5ad2-9146-a61c29fc8897", "id": "CVE-2026-44248", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44248 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:e88bd16b-8b28-5933-ac35-dc267c9c0f8f", "id": "CVE-2026-44249", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44249 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:a80f3cdb-19ea-51e3-8e83-b98fed49a31a", "id": "CVE-2026-44250", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44250 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:c82014cf-8596-5414-aa9e-baab6c3fb5da", "id": "CVE-2026-44890", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44890 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:048eb845-91ab-5142-9a5c-2d7c68660d98", "id": "CVE-2026-44891", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44891 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:53b76476-4510-5708-b95f-d05a7442366f", "id": "CVE-2026-44893", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44893 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:fe4c4e3a-a814-523f-a098-98f377fa6dad", "id": "CVE-2026-45416", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45416 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:bdde724d-a68f-5f09-8451-363b6b97d2e2", "id": "CVE-2026-45536", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45536 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:b41cfa8c-fc8f-51eb-96ee-8019ff0c0318", "id": "CVE-2026-45673", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45673 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:f48367f4-b6bf-5996-bd7b-316aef4f9cc5", "id": "CVE-2026-45674", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45674 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:fbbe4f25-eadb-50fe-9ba8-776db6b4d6b9", "id": "CVE-2026-46340", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-46340 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:24ea4430-0115-5f50-bb92-0cccded0d318", "id": "CVE-2026-47244", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47244 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:c706a15c-cc5b-5d00-99bd-1a2f8fd5aea6", "id": "CVE-2026-47691", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47691 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:d2b5810b-536e-51f7-8123-83286680e43c", "id": "CVE-2026-48006", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-48006 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:9f8ff143-e91c-51e1-9276-ee2ca1608f6c", "id": "CVE-2026-48043", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-48043 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:ede15d73-8438-581c-b738-63ded26cf5a9", "id": "CVE-2026-48059", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-48059 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:bc2cc98a-0e64-59bf-a8a4-3bb95e7e9ced", "id": "CVE-2026-50010", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50010 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:4a359f06-eb38-5447-9def-c2761c299f4e", "id": "CVE-2026-50011", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50011 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:35b93b63-2b89-5a42-98c9-1f18e73e7769", "id": "CVE-2026-50020", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50020 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:0a1caf43-3ecb-5c7e-8a51-4bc04e59ad35", "id": "CVE-2026-50560", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50560 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:b998c020-21c7-5d49-baf4-06ee14b0b1ca", "id": "CVE-2026-55831", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55831 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:2511f794-dc20-5e2e-a0a2-576ead561823", "id": "CVE-2026-55833", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55833 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:8d6e87e5-86e0-59ac-bc01-334020d1c25d", "id": "CVE-2026-55851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55851 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:eda8241c-e867-5805-99d3-25757034ba26", "id": "CVE-2026-56745", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56745 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:1f4343b7-0d83-5552-8e98-5fb64be0b2da", "id": "CVE-2026-56746", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56746 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:fe4f6615-a16f-52a0-9a0b-ccb1854e9dd4", "id": "CVE-2026-56817", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56817 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:03c3d368-28e0-57ed-9619-c86dfeb27fdb", "id": "CVE-2026-56818", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56818 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:6099d93b-1fdc-5ec9-9339-93c7c706b3a1", "id": "CVE-2026-56819", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56819 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:b3cea7a5-84e2-5749-a2bf-18c6aee2098f", "id": "CVE-2026-56820", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56820 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:c6bdf587-5e6d-511e-9b59-fdbac11501f4", "id": "CVE-2026-56821", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56821 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:d5b3d944-d194-56d4-8636-f736f2f197df", "id": "CVE-2026-56822", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56822 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:94bfd357-1eaa-5aed-84b2-61e3ef6ef2e8", "id": "CVE-2026-59898", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59898 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:c923e928-62f3-5b93-bc05-90ddbe5409c4", "id": "CVE-2026-59899", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59899 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:f82647bc-354a-5fd9-afdf-a551b4614eb4", "id": "CVE-2026-59900", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59900 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:13708b08-adea-50e3-9768-ff07d4c941cc", "id": "CVE-2026-59901", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59901 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:36baf60b-569e-578a-bd5f-c16c057a9c03", "id": "CVE-2026-59902", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59902 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:62340c3f-5a76-52cf-853c-f897cb858804", "id": "CVE-2026-59903", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59903 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:e3ae4c8c-b970-5ba1-a3a5-a0c6e496e80d", "id": "CVE-2026-59919", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59919 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:c24e24ac-cf12-58b8-a03a-1ec793b67404", "id": "CVE-2026-59920", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59920 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:ebd660be-5025-5408-9ff4-9b7d545b4234", "id": "CVE-2026-59921", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59921 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:429b00f4-6067-5d4b-aa4b-55bd898aacec", "id": "CVE-2026-73507", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-73507 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:63accae2-40d4-5cb0-88a6-50fb2f5d6688", "id": "CVE-2026-73508", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-73508 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:d46ce9e2-543a-5437-bd8c-529c6a9600f2", "id": "GHSA-mfg7-5gfp-c4w3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:c0398141-2175-5e2f-9e90-25fa5e2af8e7", "id": "GHSA-v74w-7mr3-4qg3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.122.Final-tuxcare.1" } ] } ], "dependencies": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.122.Final-tuxcare.1" } ] }