{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:b983bc95-7a37-5d07-909d-5c0a0a1f1345",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.4",
      "type": "library",
      "group": "io.netty",
      "name": "netty-dev-tools",
      "version": "4.1.130.Final-tuxcare.4",
      "purl": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.4"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:d9c74131-d8ea-5321-8997-5593fde8182d",
      "id": "CVE-2025-55163",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2025-55163 does not affect version 4.1.130.Final-tuxcare.4 of io.netty:netty-dev-tools. already_fixed \u2014 The target Netty 4.1.130.Final repository already contains the complete MadeYouReset (CVE-2025-55163) mitigation. The Http2MaxRstFrameLimitEncoder defense class is present, integrated into the HTTP/2 connection handler builder, and enabled by default for servers with a threshold of 200 RST_STREAM frames per 30-second window. All protocol-error-triggered RST writes route through the protected en..."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:49d1c2b2-2f2c-5d9d-be95-c0203f3c9564",
      "id": "CVE-2026-33870",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-33870 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d7d8831c-7b83-5e7b-bdc9-a7cd233b9f39",
      "id": "CVE-2026-33871",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-33871 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:43cd8c7b-227d-5d8c-9609-cf81c974da88",
      "id": "CVE-2026-41417",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41417 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:81808ff7-9829-577d-a8b9-c9157ca553ea",
      "id": "CVE-2026-42578",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42578 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:71450744-d225-5801-8358-477d60217c31",
      "id": "CVE-2026-42579",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42579 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:389d0e11-d9df-5770-bc67-eb2ebfae9ef6",
      "id": "CVE-2026-42580",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42580 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e6069e25-b4ae-5cb9-b3cb-b6056546420f",
      "id": "CVE-2026-42581",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42581 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:144aee56-1864-5f6c-af23-a587a61abfa4",
      "id": "CVE-2026-42583",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42583 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:01979af5-1230-582d-9dc8-7e2da7b67fa2",
      "id": "CVE-2026-42584",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42584 affects version 4.1.130.Final-tuxcare.4 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:592fcde1-7698-59bc-80fb-806bdbad55d2",
      "id": "CVE-2026-42585",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42585 affects version 4.1.130.Final-tuxcare.4 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:798425c5-b244-5046-965c-685af9888c87",
      "id": "CVE-2026-42586",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42586 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5cb9ec08-cf37-5062-8370-8e59892bd378",
      "id": "CVE-2026-42587",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42587 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:50ca7adc-a748-57ca-b393-e3cb7cc9d78a",
      "id": "CVE-2026-44248",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44248 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:df5bf74d-5856-5af4-bbe2-4212567c8029",
      "id": "CVE-2026-44249",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44249 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9d697096-6de3-517b-af81-5ae7ea31aea6",
      "id": "CVE-2026-44250",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44250 affects version 4.1.130.Final-tuxcare.4 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:26f9c697-4dac-59cf-90fe-92d3bbf54d65",
      "id": "CVE-2026-44890",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a6313775-674b-5c86-a45a-a817b5986e98",
      "id": "CVE-2026-44891",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44891 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9bc2d02a-807b-522a-b6ab-fd8b45e6103c",
      "id": "CVE-2026-44893",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44893 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:45ecf4c3-1d05-5d4c-a63b-82ab19720be5",
      "id": "CVE-2026-45416",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-45416 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c96658af-365e-5193-be76-31fb7ca46094",
      "id": "CVE-2026-45536",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-45536 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:58d1cc79-d555-5a34-ab43-c5cc8b43c82f",
      "id": "CVE-2026-45673",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-45673 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:10a86373-65b0-5f3d-80bf-81c696e46005",
      "id": "CVE-2026-45674",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-45674 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:67a53dc0-7917-5393-9bb0-38565fcc0a0c",
      "id": "CVE-2026-46340",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-46340 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:29eff14d-2e2b-582f-a6ce-1c328ee29973",
      "id": "CVE-2026-47244",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47244 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:783f197f-46a2-54d2-bf82-53fbb25e7105",
      "id": "CVE-2026-47691",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47691 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:12215797-486e-5c59-a145-0df107253343",
      "id": "CVE-2026-48006",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-48006 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:73e68c93-2b6f-5cf3-8307-62dc1147473c",
      "id": "CVE-2026-48043",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-48043 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:743e6575-41a5-5f0c-928c-2e7b74b7d235",
      "id": "CVE-2026-48059",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-48059 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fd3e6d76-fce6-5cf1-80db-0c399bd9fa46",
      "id": "CVE-2026-50010",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50010 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:62fb0774-baf9-5934-a65d-6b10e2240ead",
      "id": "CVE-2026-50011",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-50011 does not affect version 4.1.130.Final-tuxcare.4 of io.netty:netty-dev-tools. Patches already applied: bff98ee51b5d0b7ee25fd5005f2169f2a0467efa (already in target via d5b4e38845f5 'Backport CVE-2026-44890 to 4.1.130.Final')"
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:36ac3710-7219-5dfc-86ef-293c4b54b097",
      "id": "CVE-2026-50020",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50020 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8c5c4c12-513e-56d8-92c3-9d23e6cb6d52",
      "id": "CVE-2026-50560",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:72dd4032-7c2e-56d4-8d36-4648a42ffa6b",
      "id": "CVE-2026-55831",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-55831 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5c1faf9b-fd0d-5ca2-bec4-dbe8cca7e613",
      "id": "CVE-2026-55833",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-55833 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4f79770b-888d-5184-ac1e-8a4f62596c3e",
      "id": "CVE-2026-55851",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-55851 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7e597ce4-cbb2-5bb7-a9d5-9bca52474e36",
      "id": "CVE-2026-56745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-56745 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:822e0500-faf6-5eb2-9c17-d40b9a26a369",
      "id": "CVE-2026-56746",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-56746 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:83cc4c34-66d1-5cd8-9ede-89887d51d54a",
      "id": "CVE-2026-56817",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-56817 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3b96cb9d-0d7a-55e8-998b-6270d802abec",
      "id": "CVE-2026-56818",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-56818 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bdbacc64-3e42-5da5-9cdf-dd5ae372559f",
      "id": "CVE-2026-56819",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-56819 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:81e4862d-7d40-5cf8-a51c-065d1a789d12",
      "id": "CVE-2026-56820",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-56820 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:301cd3f4-a579-556d-a9cd-c62590db0c94",
      "id": "CVE-2026-56821",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-56821 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4e4a7ee5-a477-53a7-ab92-ba25f3c1bbb4",
      "id": "CVE-2026-56822",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-56822 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3df6af31-d993-5094-a07e-b617b64a9c47",
      "id": "CVE-2026-59898",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59898 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:86a827e3-725d-5874-9555-6df20554ae75",
      "id": "CVE-2026-59899",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59899 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f3dcdfc0-510b-5c36-a1a7-98fd495ca342",
      "id": "CVE-2026-59900",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59900 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4a14abe6-38f6-58b3-b086-502a60714fb2",
      "id": "CVE-2026-59901",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59901 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0a46d4f6-493b-5370-9cb5-681e577632ea",
      "id": "CVE-2026-59902",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59902 affects version 4.1.130.Final-tuxcare.4 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f1bbbc08-584d-5d5b-ae72-256cd927468e",
      "id": "CVE-2026-59903",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59903 affects version 4.1.130.Final-tuxcare.4 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:00b725e2-0f42-5570-8b8b-d8e81713b4db",
      "id": "CVE-2026-59919",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59919 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:555e42ac-286f-5170-9e4a-55ae45ac28a7",
      "id": "CVE-2026-59920",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59920 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c6610670-1cc3-5ae9-b27e-ff155c0059d5",
      "id": "CVE-2026-59921",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59921 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b081479f-5855-5b99-8ec4-7c1004978bd4",
      "id": "CVE-2026-73507",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-73507 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b27e43a1-a559-576e-bd66-50df86225f70",
      "id": "CVE-2026-73508",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-73508 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8b105201-425c-537d-8222-dd0739c4db89",
      "id": "GHSA-mfg7-5gfp-c4w3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.130.Final-tuxcare.4 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:03a76363-7ec8-5bd3-ba68-4ad2984b6642",
      "id": "GHSA-v74w-7mr3-4qg3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.130.Final-tuxcare.4 of io.netty:netty-dev-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.4"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.netty/netty-dev-tools@4.1.130.Final-tuxcare.4"
    }
  ]
}