{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:a36208b1-6f88-5655-967f-3d755a94ebf8", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.1", "type": "library", "group": "io.netty", "name": "netty-dev-tools", "version": "4.1.130.Final-tuxcare.1", "purl": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.1" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:72aad88d-2ed5-5b38-99d7-427abfdc69bb", "id": "CVE-2025-55163", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-55163 does not affect version 4.1.130.Final-tuxcare.1 of io.netty:netty-dev-tools. already_fixed \u2014 The target Netty 4.1.130.Final repository already contains the complete MadeYouReset (CVE-2025-55163) mitigation. The Http2MaxRstFrameLimitEncoder defense class is present, integrated into the HTTP/2 connection handler builder, and enabled by default for servers with a threshold of 200 RST_STREAM frames per 30-second window. All protocol-error-triggered RST writes route through the protected en..." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:daaff0de-05f2-5485-ae88-fd5a1467e059", "id": "CVE-2026-33870", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33870 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:48646b7b-ebc4-5e17-86c1-db7c4607d4e5", "id": "CVE-2026-33871", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33871 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:ac5e5498-5169-5c3a-8fca-f84270b5620f", "id": "CVE-2026-41417", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41417 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:3e78fb8e-a60a-5a89-920b-c48d646d893c", "id": "CVE-2026-42578", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42578 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:3fe59bdc-1446-5fbc-a79a-854f45a30b8a", "id": "CVE-2026-42579", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42579 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:970aa4a6-78fb-5c13-bab3-2632ca9de115", "id": "CVE-2026-42580", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42580 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:68926c80-a61f-5813-9e5c-10d3190042c3", "id": "CVE-2026-42581", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42581 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:d4fa0c76-fa2d-5e10-b5dc-617540879456", "id": "CVE-2026-42583", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42583 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:be82e88c-7057-57f2-b528-145c3b43840d", "id": "CVE-2026-42584", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42584 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:982a5df7-a6a5-56ad-8fc4-a27cf93b53e1", "id": "CVE-2026-42585", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42585 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:c76a176a-7ca9-52a9-9239-97df933e2e27", "id": "CVE-2026-42586", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42586 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:47b3119d-6606-5902-9a9d-73af93631b1b", "id": "CVE-2026-42587", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42587 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:e2dc3846-e2e9-5d22-a5ae-603290b91e1a", "id": "CVE-2026-44248", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44248 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:6cf5efcf-c78e-5e2a-b665-59dfdb303e31", "id": "CVE-2026-44249", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44249 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:ea088d33-ee94-5f72-a92f-3e2996b037ff", "id": "CVE-2026-44250", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44250 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:7c40e336-2935-5214-bf8a-8997d641c70d", "id": "CVE-2026-44890", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:4a3b77ee-6353-5d08-a8da-99444611f4c0", "id": "CVE-2026-44891", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44891 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:4372cad6-c422-5d0e-9993-050f9f5f0453", "id": "CVE-2026-44893", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44893 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:79086f9c-8612-5e17-8a6c-7e729cb60626", "id": "CVE-2026-45416", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45416 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:ae67a82c-d328-5b98-bcf5-1a7285f30c18", "id": "CVE-2026-45536", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45536 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:429ba0b1-a621-5641-8be0-6320f31fde8e", "id": "CVE-2026-45673", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45673 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:282894a6-8f70-586a-a285-6fc7d6f197cb", "id": "CVE-2026-45674", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45674 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:9e9b6020-66c5-5651-8218-6a40d30a598e", "id": "CVE-2026-46340", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-46340 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:fd49f89d-5c60-52a9-b71c-9424c4799ec0", "id": "CVE-2026-47244", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47244 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:c389159a-cccc-512b-878c-cfbfb31d93a2", "id": "CVE-2026-47691", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47691 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:736637c0-4c2f-57ed-a929-1e891e92680a", "id": "CVE-2026-48006", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-48006 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:8dfafa8f-1914-5c9c-983d-47564fff4ad4", "id": "CVE-2026-48043", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48043 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:bc31b84c-f3db-5902-be58-48d40cb71961", "id": "CVE-2026-48059", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48059 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:9650fe39-28e5-5f3f-b765-0578cd0ba79d", "id": "CVE-2026-50010", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50010 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:8a43e209-4604-5bfe-84c0-67b73d9d39cc", "id": "CVE-2026-50011", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-50011 does not affect version 4.1.130.Final-tuxcare.1 of io.netty:netty-dev-tools. Patches already applied: bff98ee51b5d0b7ee25fd5005f2169f2a0467efa (already in target via d5b4e38845f5 'Backport CVE-2026-44890 to 4.1.130.Final')" }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:3e4422fa-2b1d-55cd-93a9-03a7095e6447", "id": "CVE-2026-50020", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50020 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:085348c4-73ff-58a2-b222-d959bd7866d9", "id": "CVE-2026-50560", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:265982f5-77a2-572d-aca9-2d81983b0c9d", "id": "CVE-2026-55831", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55831 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:ca8b2d41-2bbe-5fae-ac42-6a146949b1fd", "id": "CVE-2026-55833", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55833 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:b6abcccc-687e-5202-bdb5-5a710545bf99", "id": "CVE-2026-55851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55851 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:6cfa2d79-99d6-51ea-bca4-7c3e9b2c6304", "id": "CVE-2026-56745", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56745 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:846bd493-bb4f-56f4-8af4-73068996327e", "id": "CVE-2026-56746", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56746 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:e5c35754-827d-5449-8b7a-d0a3dbfc3992", "id": "CVE-2026-56817", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56817 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:a4370e7a-b33e-5df4-be5d-ed34d4209e1c", "id": "CVE-2026-56818", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56818 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:27a89245-7c3c-5ef4-b48e-b5e4fe8d68be", "id": "CVE-2026-56819", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56819 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:28a86e3e-791c-52ae-8556-3ce992000218", "id": "CVE-2026-56820", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56820 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:1a3ffc5f-cbd3-5053-8bc1-8839529db12d", "id": "CVE-2026-56821", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56821 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:929c9819-58d2-527f-a57c-df1a9d9fbefa", "id": "CVE-2026-56822", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56822 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:17ff35fa-029b-598a-b5cd-7187950e7018", "id": "CVE-2026-59898", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59898 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:e9d3859e-54ea-57b1-b5fd-4c241f05772f", "id": "CVE-2026-59899", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59899 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:e1e4e45c-7a3a-52e9-b267-fca05f002a21", "id": "CVE-2026-59900", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59900 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:46b633fc-a2a1-5588-b428-cb11563382b8", "id": "CVE-2026-59901", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59901 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:2e927f07-9235-5753-8ba0-8c52357aaafb", "id": "CVE-2026-59902", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59902 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:4a00e3c6-5e96-556b-a9c5-3df1e71e8828", "id": "CVE-2026-59903", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59903 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:0c2939d1-4292-50c9-90e5-9a01504128f9", "id": "CVE-2026-59919", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59919 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:6e5b2d31-7f2a-5962-a1d6-23d9e0ea2321", "id": "CVE-2026-59920", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59920 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:713a5efd-b3df-5ec2-8218-451f1489b231", "id": "CVE-2026-59921", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59921 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:655c4871-7be6-533d-9197-31ad7fc2aea7", "id": "CVE-2026-73507", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-73507 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:9dd9e7b0-a7b3-5080-b108-28e3001e05f9", "id": "CVE-2026-73508", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-73508 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:aa8a2c9e-c889-5f1b-ba8e-ef04f2f7819a", "id": "GHSA-mfg7-5gfp-c4w3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:d878ca0e-258e-5573-a984-23d9815bc686", "id": "GHSA-v74w-7mr3-4qg3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.1" } ] } ], "dependencies": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.1" } ] }