{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:4e3619f9-550a-5ae7-8c26-e8e35bc40ac0", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.2", "type": "library", "group": "io.netty", "name": "netty-dev-tools", "version": "4.1.130.Final-tuxcare.2", "purl": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.2" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:d77482ae-007a-50d7-95e9-2132c04cffb7", "id": "CVE-2025-55163", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-55163 does not affect version 4.1.130.Final-tuxcare.2 of io.netty:netty-dev-tools. already_fixed \u2014 The target Netty 4.1.130.Final repository already contains the complete MadeYouReset (CVE-2025-55163) mitigation. The Http2MaxRstFrameLimitEncoder defense class is present, integrated into the HTTP/2 connection handler builder, and enabled by default for servers with a threshold of 200 RST_STREAM frames per 30-second window. All protocol-error-triggered RST writes route through the protected en..." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:bb687838-5b12-57e0-bfb0-bb5821dd2431", "id": "CVE-2026-33870", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33870 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:43de0fd3-bcc7-5722-b3bf-c04f5c9b6d6f", "id": "CVE-2026-33871", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33871 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:467d6b62-cf4b-5e3d-a0c3-1a58da498cbd", "id": "CVE-2026-41417", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41417 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:1a5bf55f-5174-5f09-ab6a-285dd4ebe986", "id": "CVE-2026-42578", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42578 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:94139f1c-bee0-57af-a21c-2fe22400a09a", "id": "CVE-2026-42579", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42579 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:5ae815aa-fbbf-5290-8761-1319152e6426", "id": "CVE-2026-42580", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42580 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:fe678124-1c2c-5ec2-9769-1409dea877da", "id": "CVE-2026-42581", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42581 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:8b703940-2c4f-50f4-8b7a-19dbd13cfd45", "id": "CVE-2026-42583", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42583 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:ac4b38bd-9f01-5595-9f14-c2339c1bb4b5", "id": "CVE-2026-42584", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42584 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:7aa76457-459a-5314-a492-98eb9ed8768a", "id": "CVE-2026-42585", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42585 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:78cc11d1-3637-58a6-b12e-b8ee13b31931", "id": "CVE-2026-42586", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42586 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:0092c091-dac0-538a-83ce-0096f226fcd1", "id": "CVE-2026-42587", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42587 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:c5163da8-dc13-5072-a676-884dd70cf860", "id": "CVE-2026-44248", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44248 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:dc94bbed-56c5-54bf-9d35-56c95560fb56", "id": "CVE-2026-44249", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44249 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:8a53f479-dd86-555d-82a4-249de3d8a569", "id": "CVE-2026-44250", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44250 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:055fdd7f-6a10-539a-9a71-e07a98907198", "id": "CVE-2026-44890", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:64f7317f-c4a6-58ac-ac92-56551a9c7320", "id": "CVE-2026-44891", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44891 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:f7fc4b26-72e4-5364-b3cd-2f1a4de51270", "id": "CVE-2026-44893", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44893 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:f92f1923-e731-5f89-88e5-c2cc8a17e319", "id": "CVE-2026-45416", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45416 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:ee432c6c-3cf8-5778-8746-d32497fe2d7f", "id": "CVE-2026-45536", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45536 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:5c4b7dae-f7e6-5798-ab4e-e752022b2e32", "id": "CVE-2026-45673", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-45673 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:56843ea8-7adf-5f58-b3f0-e3e1b2832fc4", "id": "CVE-2026-45674", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-45674 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:326fc58c-44e9-569b-a980-baaf503d1305", "id": "CVE-2026-46340", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46340 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:6c385a75-9f8f-5c52-8e13-93ab526ce997", "id": "CVE-2026-47244", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47244 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:c8fb5d7b-a2a7-5b71-baa2-b3184fc167ee", "id": "CVE-2026-47691", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47691 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:eee162c5-ce47-57b8-8aa1-99d197c4e38a", "id": "CVE-2026-48006", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48006 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:2585249c-bd4d-51c5-9c98-7b4b010bac1e", "id": "CVE-2026-48043", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48043 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:2f65814f-4e2e-5146-8328-458e9c5b8214", "id": "CVE-2026-48059", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48059 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:1f3574b4-a8be-571a-a430-33d63128155b", "id": "CVE-2026-50010", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50010 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:6877c3ef-1b09-511c-819f-0b8383a91b21", "id": "CVE-2026-50011", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-50011 does not affect version 4.1.130.Final-tuxcare.2 of io.netty:netty-dev-tools. Patches already applied: bff98ee51b5d0b7ee25fd5005f2169f2a0467efa (already in target via d5b4e38845f5 'Backport CVE-2026-44890 to 4.1.130.Final')" }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:bf380acd-ca25-5dbd-9909-29f1f889f68e", "id": "CVE-2026-50020", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50020 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:7afab73c-9a6a-5ac1-9f28-ef20c732e999", "id": "CVE-2026-50560", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:e4bc829a-edf8-5dc1-9d8e-067c42765b4f", "id": "CVE-2026-55831", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55831 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:91be6d26-149f-5f16-b945-84688c05c08d", "id": "CVE-2026-55833", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55833 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:34e5b0dc-4f44-57dd-b04a-d8e81f326e5e", "id": "CVE-2026-55851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55851 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:27da5681-081c-5b09-b759-8441a1189a55", "id": "CVE-2026-56745", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56745 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:bb1367a1-965a-5e2e-8865-984baa94441d", "id": "CVE-2026-56746", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56746 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:8d26eed3-4972-53e0-a0b1-3d85a2b9aeff", "id": "CVE-2026-56817", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56817 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:8bc5a674-a255-56a5-8af9-cb8d025dba00", "id": "CVE-2026-56818", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56818 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:79d727ff-86f2-5089-bb6b-0b507b49a300", "id": "CVE-2026-56819", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56819 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:d20e6883-c28f-5cd7-a7b2-e6c4f6b1b2ec", "id": "CVE-2026-56820", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56820 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:2249c8f7-1ce3-519c-84b6-3f75347a56e1", "id": "CVE-2026-56821", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56821 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:21d69e84-7078-5123-9444-49eb8426e6e3", "id": "CVE-2026-56822", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56822 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:83563bcf-56d3-5269-983f-53d4ea3bec3f", "id": "CVE-2026-59898", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59898 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:0dc04632-8810-5177-9551-df4626dde82e", "id": "CVE-2026-59899", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59899 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:040c016f-7c6b-565e-8716-6b3f1d93d5e0", "id": "CVE-2026-59900", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59900 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:22b6b7ff-4be4-5af1-9a2a-415bd055bd2e", "id": "CVE-2026-59901", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59901 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:9dc8e776-49ac-5ae5-991f-aba6e00002a4", "id": "CVE-2026-59902", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59902 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:e951c5ff-38b4-572c-b4e8-e2496b925ea9", "id": "CVE-2026-59903", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59903 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:037e559f-0375-55df-8e99-68f738349f12", "id": "CVE-2026-59919", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59919 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:19704d8b-899a-50f5-a20d-54b97305bdf6", "id": "CVE-2026-59920", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59920 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:59f47de3-9fe5-5a69-8272-feb145216d3e", "id": "CVE-2026-59921", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59921 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:57ff171c-648c-5338-8853-7e2b58e1943e", "id": "CVE-2026-73507", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-73507 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:55d44656-9318-5f4d-aeeb-5cf906159474", "id": "CVE-2026-73508", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-73508 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:a2b18402-96ff-557c-b404-3ac2a8c570fd", "id": "GHSA-mfg7-5gfp-c4w3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:510b095f-d886-52f0-89d6-6cf6801c155e", "id": "GHSA-v74w-7mr3-4qg3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-dev-tools." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.2" } ] } ], "dependencies": [ { "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.2" } ] }