{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:dd24a70c-3258-51e2-bb8c-22eb20c6bd1f", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/io.netty/netty-dev-tools@4.1.122.Final-tuxcare.2", "type": "library", "group": "io.netty", "name": "netty-dev-tools", "version": "4.1.122.Final-tuxcare.2", "purl": "pkg:maven/io.netty/netty-dev-tools@4.1.122.Final-tuxcare.2" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:b4246df6-ecd0-559a-8082-de2fcfcf72d9", "id": "CVE-2025-55163", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55163 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:d8bea562-92d7-5e3a-b815-396b72ea472a", "id": "CVE-2025-58056", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-58056 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:6e69ff0a-a0be-539d-b054-ae6bbedc153a", "id": "CVE-2025-58057", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-58057 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:e5057622-61ea-5b90-a762-81381039a2f7", "id": "CVE-2025-59419", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59419 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:558330be-2b01-5d6f-a9cb-4b852a932fc8", "id": "CVE-2025-67735", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-67735 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:9cb5ed0d-8958-5edb-b533-ca9fd5212483", "id": "CVE-2026-33870", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33870 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:7aeed910-8971-5998-80ea-54fdd651db5e", "id": "CVE-2026-33871", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33871 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:e3420af9-5247-55bb-acb5-d86b4448aaa7", "id": "CVE-2026-41417", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41417 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:f042fa4b-f63e-5231-967f-7ae2d109b937", "id": "CVE-2026-42577", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-42577 does not affect version 4.1.122.Final-tuxcare.2 of io.netty:netty-dev-tools. CVE-2026-42577 affects Netty 4.2.x only (advisory range >= 4.2.0.Final, < 4.2.13.Final). An fd left registered with an epoll event mask of 0 is woken forever by the unmaskable EPOLLERR/EPOLLHUP after a RST on a half-closed connection. Target 4.1.122.Final is NOT affected due to architectural differences. The patch modifies EpollIoHandler.java and EpollIoOps.java, part of 4.2's IoHandler/IoOps abstraction. Neither file exists in 4.1.x, which registers via EpollEventLoop.modify() off AbstractEpollChannel.flags. That field is seeded Native.EPOLLET, and no read/close/half-close path clears it (only the explicit pre-registration setEpollMode(LEVEL_TRIGGERED) opt-in), so the registration stays edge-triggered and the RST is reported once per edge instead of on every epoll_wait. The chain from INPUT (connection state change) to GOAL (CPU busy-loop via empty event mask) is broken at step (ii): the target cannot produce an empty event mask. Verdict: not_affected. Justification: code_not_reachable (Rule 5 Type A2)." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:83e6c5b0-bb4e-58ef-90a9-76052698e604", "id": "CVE-2026-42578", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42578 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:873126d5-65e7-55da-9cc8-b0346540b5c4", "id": "CVE-2026-42579", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42579 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:6207bd0a-7a79-5e42-89a8-6f388a9c1b64", "id": "CVE-2026-42580", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42580 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:5e3e951b-bc40-52d1-8445-1158b6345e6e", "id": "CVE-2026-42581", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42581 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:ff6570cc-7e48-5acf-a0bd-78368a700f19", "id": "CVE-2026-42583", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42583 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:7504cac6-dd04-568a-928a-7465147e8db4", "id": "CVE-2026-42584", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42584 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:97892d66-5250-59df-9178-489e05bc6c63", "id": "CVE-2026-42585", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42585 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:ba6ddd9b-563d-5223-9e32-c7eb277d9568", "id": "CVE-2026-42586", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42586 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:85c43830-6609-579c-aa5c-aa333910ca8c", "id": "CVE-2026-42587", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42587 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:dd345372-a7cc-5123-9b4a-df4907455640", "id": "CVE-2026-44248", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44248 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:80826723-c686-55e2-b069-a669bff03c80", "id": "CVE-2026-44249", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44249 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:9991b086-ecda-5a9e-938a-a7cc4419b549", "id": "CVE-2026-44250", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44250 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:f91abc2a-983b-57b4-b496-0f6fdef93a11", "id": "CVE-2026-44890", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:d8eca470-2a05-5f7a-95f7-e052c1483fe2", "id": "CVE-2026-44891", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44891 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:cd7808f8-1c63-5331-afc4-5b80b6d17a72", "id": "CVE-2026-44893", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44893 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:5293b4da-7189-5c32-8da7-f8a6ed3fd3c2", "id": "CVE-2026-45416", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-45416 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:c8a119e8-7992-5227-80c6-7985257f9bf2", "id": "CVE-2026-45536", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-45536 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:9005910c-c2ad-55c8-99bb-f3fdce98f067", "id": "CVE-2026-45673", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-45673 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:5fe9398d-2794-5b28-8a74-c2661e11e750", "id": "CVE-2026-45674", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-45674 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:2e48924d-d3f8-5d9b-b037-988a023b9115", "id": "CVE-2026-46340", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46340 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:86233987-da32-5cb1-b5dc-582060c1152b", "id": "CVE-2026-47244", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47244 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:b9fa3c1c-30ed-56fa-8194-199a74518ff7", "id": "CVE-2026-47691", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47691 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:b1d376b7-1195-5220-ab01-510f60271148", "id": "CVE-2026-48006", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48006 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:df5a1520-50d0-52ad-be66-c89c0866a8d1", "id": "CVE-2026-48043", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48043 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:b0064adb-e1a8-5fb8-975e-a11d5822e695", "id": "CVE-2026-48059", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48059 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:f869e424-2f2b-5a08-8532-4e1be045f136", "id": "CVE-2026-50010", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50010 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:fe1d3c9b-e67d-5970-8fa0-353261b609b6", "id": "CVE-2026-50011", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50011 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:fc752a71-21af-5cdd-8897-b1715d9c263e", "id": "CVE-2026-50020", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50020 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:c2eb4946-bb6f-5b30-bdb2-e0729fd4862b", "id": "CVE-2026-50560", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:1869c0c1-f978-5d23-9b55-e6ca2345c116", "id": "CVE-2026-55831", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-55831 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:4bb815c5-5e8f-51a3-b795-3ad2b45c3487", "id": "CVE-2026-55833", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-55833 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:147215e5-2b26-510b-bf8b-df65540183e3", "id": "CVE-2026-55851", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-55851 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:a820748c-3731-5a59-ae9e-9c4b06c2953b", "id": "CVE-2026-56745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56745 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:fd5f5add-8200-5bca-ba77-a4042e22ef1c", "id": "CVE-2026-56746", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56746 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:7da54311-3f92-5735-840c-dcce89d9f055", "id": "CVE-2026-56817", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56817 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:593087bf-eebc-55d8-9fe3-1c74366abfd6", "id": "CVE-2026-56818", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56818 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:d40da532-967c-5618-b0ea-6f7b302bb990", "id": "CVE-2026-56819", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56819 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:cf32be9b-275e-5a85-92db-abc258254898", "id": "CVE-2026-56820", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56820 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:a8ece1fb-19a4-56e9-9284-9d3acd25d815", "id": "CVE-2026-56821", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56821 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:54efe6b9-b1c7-5dd4-afa5-64737930c28e", "id": "CVE-2026-56822", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56822 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:5f0746e0-6a32-5faa-b7e5-2aed501c769b", "id": "CVE-2026-59898", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59898 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:4693289d-4fa0-5a98-a0e4-63f0cf299c19", "id": "CVE-2026-59899", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59899 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:388a13bd-b2da-5bd6-91f3-d4383700f23c", "id": "CVE-2026-59900", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59900 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:062cfe90-7d14-5f56-8bab-dd42a4582add", "id": "CVE-2026-59901", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59901 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:d4a98566-8ada-5d20-bc19-93f6ad91eab4", "id": "CVE-2026-59902", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59902 affects version 4.1.122.Final-tuxcare.2 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:37034212-b6a6-5492-9829-1e6864a5ad84", "id": "CVE-2026-59903", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59903 affects version 4.1.122.Final-tuxcare.2 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:42d2334a-191b-5c4c-be02-e7237cf6b9e0", "id": "CVE-2026-59919", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59919 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:539a1da8-e491-5144-bb46-cb68ae101e53", "id": "CVE-2026-59920", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59920 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:ecaa0315-77d8-5013-bbf6-b8325584c4eb", "id": "CVE-2026-59921", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59921 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:ea103124-2b8a-517b-bde9-d36daa1c8bf6", "id": "CVE-2026-73507", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-73507 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:458b0efb-1590-5c6e-b582-1be30a2b75df", "id": "CVE-2026-73508", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-73508 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:c7737476-37ed-5635-b195-43f5c1b34049", "id": "GHSA-mfg7-5gfp-c4w3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.122.Final-tuxcare.2 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:a6a01d20-13de-56a1-bfad-b29c37ed3c47", "id": "GHSA-v74w-7mr3-4qg3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.122.Final-tuxcare.2 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.122.Final-tuxcare.2" } ] } ], "dependencies": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.122.Final-tuxcare.2" } ] }