{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:5569fd8f-767d-5e22-8af7-f47de0b4696e", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/io.netty/netty-example@4.1.122.Final-tuxcare.1", "type": "library", "group": "io.netty", "name": "netty-example", "version": "4.1.122.Final-tuxcare.1", "purl": "pkg:maven/io.netty/netty-example@4.1.122.Final-tuxcare.1" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:ce35bf44-dd82-5360-8cb2-002deeed01aa", "id": "CVE-2025-55163", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-55163 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-example." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-example@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:5838bd56-f01a-5ca6-a4e1-3770052894d8", "id": "CVE-2025-58056", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-58056 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-example." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-example@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:18968df6-5cdb-5684-ac8c-eb93e64e2c57", "id": "CVE-2025-58057", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-58057 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-example." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-example@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:967f65f5-c3ae-561f-837c-2fc27da79d61", "id": "CVE-2025-59419", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-59419 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-example." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-example@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:a30e3f75-f9d9-5223-8e76-19cde9844968", "id": "CVE-2025-67735", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-67735 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-example." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-example@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:cca695cc-a357-50f3-9a25-1f7cc32e7771", "id": "CVE-2026-33870", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33870 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-example." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-example@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:64569ba4-8b56-538b-89b1-5668294f7026", "id": "CVE-2026-33871", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33871 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-example." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-example@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:17bc789b-b078-5593-b92e-ca5b1242f3d1", "id": "CVE-2026-41417", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41417 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-example." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-example@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:7d8dcf07-a2bc-5e62-a06a-f6e0fa5fb9ce", "id": "CVE-2026-42577", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-42577 does not affect version 4.1.122.Final-tuxcare.1 of io.netty:netty-example. CVE-2026-42577 affects Netty 4.2.x only (advisory range >= 4.2.0.Final, < 4.2.13.Final). An fd left registered with an epoll event mask of 0 is woken forever by the unmaskable EPOLLERR/EPOLLHUP after a RST on a half-closed connection. Target 4.1.122.Final is NOT affected due to architectural differences. The patch modifies EpollIoHandler.java and EpollIoOps.java, part of 4.2's IoHandler/IoOps abstraction. Neither file exists in 4.1.x, which registers via EpollEventLoop.modify() off AbstractEpollChannel.flags. That field is seeded Native.EPOLLET, and no read/close/half-close path clears it (only the explicit pre-registration setEpollMode(LEVEL_TRIGGERED) opt-in), so the registration stays edge-triggered and the RST is reported once per edge instead of on every epoll_wait. The chain from INPUT (connection state change) to GOAL (CPU busy-loop via empty event mask) is broken at step (ii): the target cannot produce an empty event mask. Verdict: not_affected. Justification: code_not_reachable (Rule 5 Type A2)." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-example@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:1e1470a8-7ce2-554b-9710-f2253c020f1e", "id": "CVE-2026-42578", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42578 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-example." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-example@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:bfe0a2c3-dcec-5952-8456-2bde2600db80", "id": "CVE-2026-42579", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42579 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-example." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-example@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:eb970006-fe81-5677-bc69-32502398caba", "id": "CVE-2026-42580", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42580 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-example." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-example@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:fa68283b-6736-5f92-80bf-ffb09851c3c3", "id": "CVE-2026-42581", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42581 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-example." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-example@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:98529af3-dd80-52bc-9680-2c080ba095d1", "id": "CVE-2026-42583", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42583 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-example." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-example@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:31fc4757-1f53-5d86-b774-a88fb8f6b094", "id": "CVE-2026-42584", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42584 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-example." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-example@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:84db9946-d761-5fcc-9b34-f77bf23147bd", "id": "CVE-2026-42585", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42585 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-example." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-example@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:e89fda2d-4a7f-5db7-a5b0-ee76706cb459", "id": "CVE-2026-42586", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42586 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-example." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-example@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:1572a876-76ec-5a1e-ba65-fb59508650ca", "id": "CVE-2026-42587", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42587 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-example." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-example@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:092e23f8-8df8-595a-80ce-1063d9248f57", "id": "CVE-2026-44248", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44248 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-example." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-example@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:c95bc1b0-612e-5c4d-a315-c2156ef39cc0", "id": "CVE-2026-44249", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44249 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-example." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-example@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:29a23c40-8ae0-5707-97fc-cfca92b967f2", "id": "CVE-2026-44250", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44250 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-example." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-example@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:a734c19e-0dc3-5c61-bc31-9d14c8693b3d", "id": "CVE-2026-44890", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44890 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-example." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-example@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:2e037cf7-b34b-5ef9-ad6a-c94febc75669", "id": "CVE-2026-44891", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44891 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-example." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-example@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:64e9872b-1e10-5877-9ad7-81e750a12950", "id": "CVE-2026-44893", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44893 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-example." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-example@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:cc10079b-f7c1-5789-aeba-b83c9ba5b6e7", "id": "CVE-2026-45416", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45416 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-example." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-example@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:0a7c56ea-bd92-5c79-9a85-ce02bd5f95a7", "id": "CVE-2026-45536", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45536 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-example." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-example@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:d364ed4b-9a25-5c18-9a52-7bc8294d869d", "id": "CVE-2026-45673", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45673 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-example." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-example@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:981f974a-2ccd-5ef0-b5aa-336da05cbe4b", "id": "CVE-2026-45674", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45674 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-example." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-example@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:85407902-b519-5cc2-ab72-dcabe3864f65", "id": "CVE-2026-46340", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-46340 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-example." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-example@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:6495f26d-af31-5ba1-90eb-c8216c7c0894", "id": "CVE-2026-47244", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47244 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-example." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-example@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:d1b8b703-a7e1-5027-adf6-44cde1e6191c", "id": "CVE-2026-47691", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47691 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-example." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-example@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:13339f7d-31a3-5fc3-b8c9-7b720e8bb1ca", "id": "CVE-2026-48006", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-48006 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-example." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-example@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:6f46bc75-78fe-5680-bcb0-5cee9758cb1f", "id": "CVE-2026-48043", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-48043 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-example." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-example@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:4d108675-96c2-5e3a-b265-c88b89bb8efa", "id": "CVE-2026-48059", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-48059 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-example." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-example@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:2493d4c5-9c7f-5c81-9877-04f00cfabf35", "id": "CVE-2026-50010", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50010 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-example." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-example@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:b71e7f9e-cf65-5bc3-b28e-2e668823b7cf", "id": "CVE-2026-50011", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50011 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-example." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-example@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:e07a6933-a9ff-5d55-8ee2-2f755e77c60f", "id": "CVE-2026-50020", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50020 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-example." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-example@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:9766e333-5b9e-5f80-b033-b5aaedec374a", "id": "CVE-2026-50560", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50560 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-example." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-example@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:40d31a35-c436-5d40-84b4-6ebafe5125cc", "id": "CVE-2026-55831", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55831 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-example." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-example@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:6c995422-fab8-5157-9ab9-02f0b5ee049b", "id": "CVE-2026-55833", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55833 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-example." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-example@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:263cc17b-b022-59c6-b933-a4008e3f31be", "id": "CVE-2026-55851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55851 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-example." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-example@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:2d1d14d4-120e-5bbf-ab1c-60b7127db21e", "id": "CVE-2026-56745", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56745 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-example." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-example@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:e1656a4b-4b59-5538-b43d-cdc99866ac3d", "id": "CVE-2026-56746", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56746 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-example." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-example@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:144848f9-431b-5eb5-b125-8ad5bf109857", "id": "CVE-2026-56817", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56817 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-example." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-example@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:5a426feb-0347-5c9b-b666-f7ff17aab821", "id": "CVE-2026-56818", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56818 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-example." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-example@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:f6420b3c-36c0-573b-aaae-f2abffc4dbe3", "id": "CVE-2026-56819", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56819 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-example." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-example@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:288cb354-8eef-58c4-8919-907720eb0741", "id": "CVE-2026-56820", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56820 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-example." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-example@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:4938cf11-f03a-5e9e-b228-d3c29b37c7ca", "id": "CVE-2026-56821", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56821 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-example." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-example@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:8c153a3e-ad23-5dda-9e05-04db737da0bc", "id": "CVE-2026-56822", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56822 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-example." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-example@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:87d1067f-756b-5728-b232-06759b5fba48", "id": "CVE-2026-59898", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59898 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-example." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-example@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:82ad4262-dc33-5332-98c3-7d300a6cc3b3", "id": "CVE-2026-59899", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59899 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-example." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-example@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:a3e7c0ec-1b32-5742-b463-e1e71a2bbd05", "id": "CVE-2026-59900", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59900 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-example." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-example@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:9503cea1-58b3-5f81-b0fe-e5e1283a8b38", "id": "CVE-2026-59901", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59901 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-example." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-example@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:0be51ddf-d700-5ea9-8333-1d1ccf816bc2", "id": "CVE-2026-59902", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59902 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-example." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-example@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:b2423a73-ba27-590c-8cbc-2643fc6894fa", "id": "CVE-2026-59903", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59903 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-example." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-example@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:f85197b2-f29f-5682-b88c-e8beba7a6def", "id": "CVE-2026-59919", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59919 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-example." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-example@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:f1ee4fa8-982a-5077-87df-b637a726f270", "id": "CVE-2026-59920", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59920 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-example." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-example@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:0e32730d-1976-5ab6-93e5-b5e61b82e256", "id": "CVE-2026-59921", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59921 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-example." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-example@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:df3acffd-d166-5e2c-bc06-4b990207bbb5", "id": "CVE-2026-73507", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-73507 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-example." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-example@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:899e27d1-25d1-5e4c-b7e4-9856dce9fe2e", "id": "CVE-2026-73508", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-73508 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-example." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-example@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:e159d8cf-3f73-5bc1-a0e7-d5abac567ebc", "id": "GHSA-mfg7-5gfp-c4w3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-example." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-example@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:27f86feb-c4b8-52bd-953b-07e3024b8399", "id": "GHSA-v74w-7mr3-4qg3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-example." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-example@4.1.122.Final-tuxcare.1" } ] } ], "dependencies": [ { "ref": "pkg:maven/io.netty/netty-example@4.1.122.Final-tuxcare.1" } ] }