{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:897d4c54-6c1c-58cd-b82f-3add242e57ae",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.3",
      "type": "library",
      "group": "io.netty",
      "name": "netty-handler-ssl-ocsp",
      "version": "4.1.130.Final-tuxcare.3",
      "purl": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.3"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:43298073-29e7-5f47-a48a-5b76d8f3e6a2",
      "id": "CVE-2025-55163",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2025-55163 does not affect version 4.1.130.Final-tuxcare.3 of io.netty:netty-handler-ssl-ocsp. already_fixed \u2014 The target Netty 4.1.130.Final repository already contains the complete MadeYouReset (CVE-2025-55163) mitigation. The Http2MaxRstFrameLimitEncoder defense class is present, integrated into the HTTP/2 connection handler builder, and enabled by default for servers with a threshold of 200 RST_STREAM frames per 30-second window. All protocol-error-triggered RST writes route through the protected en..."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:745df0fa-dafa-5cf0-a60a-0edc16d4525b",
      "id": "CVE-2026-33870",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33870 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:45c322a9-98cf-5001-834c-71b1b65d0a35",
      "id": "CVE-2026-33871",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-33871 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:16cc38d6-26c2-5a24-8fa3-bbc162e2de4c",
      "id": "CVE-2026-41417",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41417 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:eb7f32be-219a-56b8-b4b2-875369d4c7e0",
      "id": "CVE-2026-42578",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42578 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dbceb09c-da7a-535d-afca-791f459c1b82",
      "id": "CVE-2026-42579",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42579 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:79f74145-230d-5ee3-acf3-8a02f15d61d0",
      "id": "CVE-2026-42580",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42580 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a9e9f5c3-3866-53f5-a1a2-632d495ae813",
      "id": "CVE-2026-42581",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42581 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4638d9dd-d8fb-5da3-9829-ac14d1703f09",
      "id": "CVE-2026-42583",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42583 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5631b5ac-8797-5bed-a4a5-56a94d04851b",
      "id": "CVE-2026-42584",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42584 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:df5ec965-1f51-5e53-834a-e189d7322a91",
      "id": "CVE-2026-42585",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42585 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:93e7f619-5c93-57df-bacb-4334e2fabf13",
      "id": "CVE-2026-42586",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42586 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e980fc33-add5-5ed6-b551-f98f55e1d72b",
      "id": "CVE-2026-42587",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42587 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2f0d9d40-ad6d-5f8b-b398-7a8fed778af7",
      "id": "CVE-2026-44248",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44248 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:041d0d05-f05e-50d7-bd07-6ffe7d1ffe37",
      "id": "CVE-2026-44249",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44249 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b1ca1f92-1028-566b-85f1-ed6b1fb44089",
      "id": "CVE-2026-44250",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44250 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5982467d-d398-58ec-bf98-b110e546b28c",
      "id": "CVE-2026-44890",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4729183a-6623-59f0-87fe-239567a3cc0c",
      "id": "CVE-2026-44891",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44891 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:62a68d91-7a71-548a-8618-b50dbd50e5aa",
      "id": "CVE-2026-44893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44893 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c761ed2f-d94f-5129-8abe-fc411ee35470",
      "id": "CVE-2026-45416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45416 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f0e0566c-85f0-58dd-9b4b-b7f344864919",
      "id": "CVE-2026-45536",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45536 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f09dfc16-c172-505a-9c65-f712c0b1329a",
      "id": "CVE-2026-45673",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-45673 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dd87433b-f038-58d5-a398-8f6085d9f8f4",
      "id": "CVE-2026-45674",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-45674 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:57875cd8-bdef-58bd-8df4-4abce4b20661",
      "id": "CVE-2026-46340",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-46340 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:47c8ab41-08d2-5178-bffa-aad2f481556d",
      "id": "CVE-2026-47244",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47244 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:52a4a0df-4097-5b78-b1cf-0b21a77c69c3",
      "id": "CVE-2026-47691",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47691 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f4127b48-7ac5-5a39-ad3c-0b4f0248b78d",
      "id": "CVE-2026-48006",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-48006 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2d557f48-d967-5068-a7f8-43579b944c99",
      "id": "CVE-2026-48043",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-48043 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:53440292-3f1c-514c-bcd8-da72bd9f95bf",
      "id": "CVE-2026-48059",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-48059 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0f1a9f59-0d6e-5d51-b101-fb3f197c9165",
      "id": "CVE-2026-50010",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50010 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:65df4511-290e-55ba-9807-e60b92c5d44e",
      "id": "CVE-2026-50011",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-50011 does not affect version 4.1.130.Final-tuxcare.3 of io.netty:netty-handler-ssl-ocsp. Patches already applied: bff98ee51b5d0b7ee25fd5005f2169f2a0467efa (already in target via d5b4e38845f5 'Backport CVE-2026-44890 to 4.1.130.Final')"
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:92bba5f0-5fb8-5c34-8185-72fa0656d3b2",
      "id": "CVE-2026-50020",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50020 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f906e17b-9748-5b09-a82e-0b05c8e467ef",
      "id": "CVE-2026-50560",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:68117b52-fde5-5189-ac07-bfaf0716c50c",
      "id": "CVE-2026-55831",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-55831 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:853ab22e-2319-59fa-8d07-fa1ee327bed5",
      "id": "CVE-2026-55833",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-55833 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a81e22ca-b67c-5efc-a680-a59cb51be844",
      "id": "CVE-2026-55851",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-55851 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b2e9bfe8-ce56-5fee-89a4-c4d09919d8ce",
      "id": "CVE-2026-56745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-56745 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:326ef8df-73bb-5a74-86f9-5be01dfb256f",
      "id": "CVE-2026-56746",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-56746 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1bd9b653-5166-5459-9962-fb612e0627d1",
      "id": "CVE-2026-56817",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-56817 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5d0d5109-b4d5-534b-a3d4-e8d9db9d059f",
      "id": "CVE-2026-56818",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-56818 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:aa57a9a5-6ace-54b6-81f4-83e52452a003",
      "id": "CVE-2026-56819",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-56819 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:db6f4c3b-d810-5a84-a6a0-21d51994eaad",
      "id": "CVE-2026-56820",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-56820 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d98e2d0a-6fbf-55e5-96ad-adb9b6cd9b03",
      "id": "CVE-2026-56821",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-56821 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:778cc2f6-53f1-5ab0-8246-02390841afb5",
      "id": "CVE-2026-56822",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-56822 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a7a0f790-59a3-58e0-b947-8996fce5f6ab",
      "id": "CVE-2026-59898",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59898 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fe0de24d-f761-5f08-83a9-bf120bc1da00",
      "id": "CVE-2026-59899",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59899 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:aecd53c2-7f69-5857-88ea-666946e7f525",
      "id": "CVE-2026-59900",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59900 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:18e0d2d2-fb8e-5cfd-b12a-2c39d756989a",
      "id": "CVE-2026-59901",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59901 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a81510d0-61a3-52db-941e-b8f46cd0b841",
      "id": "CVE-2026-59902",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59902 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:01e4a377-205c-5ed3-a0ee-f1857496eaf1",
      "id": "CVE-2026-59903",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59903 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b5deee24-1ca8-5d96-8ede-95387ad1aaba",
      "id": "CVE-2026-59919",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59919 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1dc1aac1-dbe5-59df-92cb-9d4969b110aa",
      "id": "CVE-2026-59920",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59920 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:773c6ec4-7789-5aa0-878c-e7c1f3d7828c",
      "id": "CVE-2026-59921",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59921 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5f6664e8-89a4-5dbb-a42c-029ec1a18799",
      "id": "CVE-2026-73507",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-73507 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0c1c1892-0077-58c3-98c9-7ed04dc1e300",
      "id": "CVE-2026-73508",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-73508 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:458fa13f-653d-56d4-bcd4-65dbf8f7c424",
      "id": "GHSA-mfg7-5gfp-c4w3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:26ff145d-1667-5976-b847-0fb4a22e666f",
      "id": "GHSA-v74w-7mr3-4qg3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-handler-ssl-ocsp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.3"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.netty/netty-handler-ssl-ocsp@4.1.130.Final-tuxcare.3"
    }
  ]
}