{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:eb502099-09f9-5344-99cf-54d1589634c0",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.2",
      "type": "library",
      "group": "io.netty",
      "name": "netty-handler-ssl-ocsp",
      "version": "4.1.130.Final-tuxcare.2",
      "purl": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.2"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:57d9e3af-6a52-5689-9214-c9bf5aaf0723",
      "id": "CVE-2025-55163",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2025-55163 does not affect version 4.1.130.Final-tuxcare.2 of io.netty:netty-handler-ssl-ocsp. already_fixed \u2014 The target Netty 4.1.130.Final repository already contains the complete MadeYouReset (CVE-2025-55163) mitigation. The Http2MaxRstFrameLimitEncoder defense class is present, integrated into the HTTP/2 connection handler builder, and enabled by default for servers with a threshold of 200 RST_STREAM frames per 30-second window. All protocol-error-triggered RST writes route through the protected en..."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:067b9485-1c1b-5917-8903-55d53a550e50",
      "id": "CVE-2026-33870",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33870 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e6cc7554-3f6b-5b3d-92dc-59b0f132584a",
      "id": "CVE-2026-33871",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-33871 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a980979a-e4cf-5a47-b3eb-e5d7972f717f",
      "id": "CVE-2026-41417",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41417 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e7e00b26-0dc9-506f-9ba1-3e012a9b6e6a",
      "id": "CVE-2026-42578",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42578 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f18e16c8-06e4-54a7-bd1f-3d4ca6e83a88",
      "id": "CVE-2026-42579",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42579 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:24051ac2-73bf-5ed9-b14c-bb3b48db3280",
      "id": "CVE-2026-42580",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42580 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:832c2c8e-b6ae-588d-a3b3-9fb159255761",
      "id": "CVE-2026-42581",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42581 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:96acf212-001a-54a1-8465-3422320f8da7",
      "id": "CVE-2026-42583",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42583 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:891aa8fd-8625-5d1f-96ff-8a28600f3bbc",
      "id": "CVE-2026-42584",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42584 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4448d848-d818-5ff8-b060-42ba6453c160",
      "id": "CVE-2026-42585",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42585 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3e0ba025-112d-58b6-8672-83d3e79f3fea",
      "id": "CVE-2026-42586",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42586 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:18cb901e-cfa1-593e-85e4-81ce5e26296c",
      "id": "CVE-2026-42587",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42587 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e5217660-3778-58d4-ad8d-489cc318fcd9",
      "id": "CVE-2026-44248",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44248 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:81a11a83-0bbb-5c1a-b5c4-9709bb39a660",
      "id": "CVE-2026-44249",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44249 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:eed5d2da-8e9e-55ea-8eb7-fd98c7b23cce",
      "id": "CVE-2026-44250",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44250 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:01545d65-49e0-5c35-80c5-e7ddf2b04d5c",
      "id": "CVE-2026-44890",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e21f7c73-ef75-5e28-b01e-8f65d2d8e186",
      "id": "CVE-2026-44891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44891 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ca66e942-185c-501e-87f8-cb7ed3a2bebf",
      "id": "CVE-2026-44893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44893 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fabf4548-a77a-5384-930b-c8e122aa20b8",
      "id": "CVE-2026-45416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45416 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9e6e8d75-434d-5278-98c7-4fb2ff8fb66a",
      "id": "CVE-2026-45536",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45536 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:be4be1b6-854d-5e9f-acf0-d1790fd31d92",
      "id": "CVE-2026-45673",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-45673 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2eac6cdd-6bdc-5284-aad4-19781fbd6685",
      "id": "CVE-2026-45674",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-45674 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2ab54f12-8ffa-5ce7-8558-17a7974a08ce",
      "id": "CVE-2026-46340",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-46340 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d6405d2f-cc3e-5955-8851-16a3d8c08a0a",
      "id": "CVE-2026-47244",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47244 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ab8b6881-8c0d-58ce-b5ea-123c9c40233a",
      "id": "CVE-2026-47691",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47691 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:983be00c-6f78-5519-beba-4629be0f5cce",
      "id": "CVE-2026-48006",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-48006 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:de72b2e8-543f-5f97-bd6a-5c96562a4491",
      "id": "CVE-2026-48043",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-48043 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:95c1bcaf-c107-52a9-b882-f51fc4b4db27",
      "id": "CVE-2026-48059",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-48059 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:46b7fd1e-eacd-5f71-b32c-42c0995b20ea",
      "id": "CVE-2026-50010",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50010 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e318eeba-d838-5ac2-bb28-e2377843e66e",
      "id": "CVE-2026-50011",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-50011 does not affect version 4.1.130.Final-tuxcare.2 of io.netty:netty-handler-ssl-ocsp. Patches already applied: bff98ee51b5d0b7ee25fd5005f2169f2a0467efa (already in target via d5b4e38845f5 'Backport CVE-2026-44890 to 4.1.130.Final')"
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:015304c1-dd33-57d9-a37d-2197ec7e03be",
      "id": "CVE-2026-50020",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50020 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fdd3164e-5769-51ea-a8c0-826a78f3aa79",
      "id": "CVE-2026-50560",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:72cc582b-866c-53b8-b1ab-52e25ca07a54",
      "id": "CVE-2026-55831",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55831 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:15539332-6d44-5194-aa8a-6f019ab81260",
      "id": "CVE-2026-55833",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55833 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7f97e486-ec33-58be-8fdd-007aee96ed0c",
      "id": "CVE-2026-55851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55851 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a59f54c2-1f85-552f-89f5-cfb3dc1fd32c",
      "id": "CVE-2026-56745",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56745 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bffc7c75-667e-540b-80d9-43614ccdba79",
      "id": "CVE-2026-56746",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56746 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2f23e1e8-1632-5335-9c91-3a456362241a",
      "id": "CVE-2026-56817",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56817 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:28e9dc6c-2dc6-57f0-b6f6-5dfa3bf4f886",
      "id": "CVE-2026-56818",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56818 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f41eabe6-6a8c-5168-97f4-a5578e3748bd",
      "id": "CVE-2026-56819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56819 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:354a01b8-5660-559e-9b97-9fd830d43ff1",
      "id": "CVE-2026-56820",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56820 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:488c4873-392a-5859-94c9-2f5507905755",
      "id": "CVE-2026-56821",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56821 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3faf0f97-54e5-5da8-9a2f-b8653479ca0f",
      "id": "CVE-2026-56822",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56822 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f51ab49f-411e-5213-9f8e-7feba1e4554a",
      "id": "CVE-2026-59898",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59898 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4a5752db-c7d6-5a7c-a11a-1737433bb2c7",
      "id": "CVE-2026-59899",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59899 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:10e44250-03e1-58eb-8025-de0dd23c0fb7",
      "id": "CVE-2026-59900",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59900 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1b86bf8a-ae5a-5298-b564-d4c4f4cd7f18",
      "id": "CVE-2026-59901",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59901 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dd306313-6c38-53d5-ba20-1fe4bf428d02",
      "id": "CVE-2026-59902",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59902 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7d34812d-9306-5f87-b177-e7f5160048f0",
      "id": "CVE-2026-59903",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59903 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b34bb0c3-a194-5940-accf-5eab858eeeda",
      "id": "CVE-2026-59919",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59919 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5a57c1ec-759a-51a1-a083-5ca57593b45c",
      "id": "CVE-2026-59920",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59920 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:10f01844-c1b1-5a20-b7b0-ca9020efa4c1",
      "id": "CVE-2026-59921",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59921 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e6a79f0a-ef2a-58dd-ad6c-24e431788371",
      "id": "CVE-2026-73507",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-73507 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:073f4114-3b11-5cd7-b5ad-f084e3a0d406",
      "id": "CVE-2026-73508",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-73508 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:82a6b4b3-c9b8-5169-b42c-c6cf366da85f",
      "id": "GHSA-mfg7-5gfp-c4w3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:908c77aa-e084-572f-9e1c-cd80b1dcba29",
      "id": "GHSA-v74w-7mr3-4qg3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.2"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.2"
    }
  ]
}