{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:0d85bff2-64b6-5591-aea2-1ffc7b783dec", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/io.netty/netty-handler@4.1.122.Final-tuxcare.1", "type": "library", "group": "io.netty", "name": "netty-handler", "version": "4.1.122.Final-tuxcare.1", "purl": "pkg:maven/io.netty/netty-handler@4.1.122.Final-tuxcare.1" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:403d0c45-a552-5d5b-a59b-efff826d7d1d", "id": "CVE-2025-55163", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-55163 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-handler." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-handler@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:514c32e0-44dc-584f-832a-b86d3d7378ab", "id": "CVE-2025-58056", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-58056 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-handler." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-handler@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:e0de5b33-0d7f-5543-963e-35a768ffcdab", "id": "CVE-2025-58057", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-58057 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-handler." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-handler@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:25392744-6347-511a-9c3d-e1d767ff8097", "id": "CVE-2025-59419", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-59419 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-handler." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-handler@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:42a908d5-6e69-5a94-b0be-610b29d3ff2c", "id": "CVE-2025-67735", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-67735 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-handler." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-handler@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:a9a02d1a-f4cf-5ac4-89b3-5d4da569f239", "id": "CVE-2026-33870", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33870 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-handler." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-handler@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:dd0969c8-6124-518f-bfc9-aebc1ab2e5d8", "id": "CVE-2026-33871", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33871 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-handler." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-handler@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:2a9aacfb-85fc-5f4a-897a-9da9690f4c8c", "id": "CVE-2026-41417", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41417 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-handler." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-handler@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:07c4edc6-e6be-5fb9-a0e9-d55adec7e392", "id": "CVE-2026-42577", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-42577 does not affect version 4.1.122.Final-tuxcare.1 of io.netty:netty-handler. CVE-2026-42577 affects Netty 4.2.x only (advisory range >= 4.2.0.Final, < 4.2.13.Final). An fd left registered with an epoll event mask of 0 is woken forever by the unmaskable EPOLLERR/EPOLLHUP after a RST on a half-closed connection. Target 4.1.122.Final is NOT affected due to architectural differences. The patch modifies EpollIoHandler.java and EpollIoOps.java, part of 4.2's IoHandler/IoOps abstraction. Neither file exists in 4.1.x, which registers via EpollEventLoop.modify() off AbstractEpollChannel.flags. That field is seeded Native.EPOLLET, and no read/close/half-close path clears it (only the explicit pre-registration setEpollMode(LEVEL_TRIGGERED) opt-in), so the registration stays edge-triggered and the RST is reported once per edge instead of on every epoll_wait. The chain from INPUT (connection state change) to GOAL (CPU busy-loop via empty event mask) is broken at step (ii): the target cannot produce an empty event mask. Verdict: not_affected. Justification: code_not_reachable (Rule 5 Type A2)." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-handler@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:0ea112a4-1f36-5d87-a448-b4e582050470", "id": "CVE-2026-42578", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42578 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-handler." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-handler@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:b11907a6-2470-5ebb-9478-5f572d6d4472", "id": "CVE-2026-42579", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42579 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-handler." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-handler@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:119ccaf2-0a9d-5572-84c5-c835443b959a", "id": "CVE-2026-42580", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42580 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-handler." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-handler@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:ddc2c2ad-211e-5ef4-b9ab-a1be432602e7", "id": "CVE-2026-42581", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42581 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-handler." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-handler@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:a3f664d8-1b1d-52b5-869b-1fca2170b463", "id": "CVE-2026-42583", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42583 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-handler." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-handler@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:21ee175f-2a1b-5fb1-a0c1-4d05e5ff1bd2", "id": "CVE-2026-42584", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42584 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-handler." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-handler@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:fd71dfd1-208b-5874-805f-01068dbf7234", "id": "CVE-2026-42585", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42585 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-handler." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-handler@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:ba2d877e-dcc1-5e04-a994-f4626b56f396", "id": "CVE-2026-42586", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42586 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-handler." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-handler@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:bed2ec6b-a69f-5ad1-8cde-66d1d535f94b", "id": "CVE-2026-42587", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42587 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-handler." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-handler@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:fcdeb01f-d9c9-53bd-adcc-406a4736dc3c", "id": "CVE-2026-44248", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44248 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-handler." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-handler@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:3ac60aaf-dac3-53e7-9a2b-4a2c5c995e7d", "id": "CVE-2026-44249", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44249 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-handler." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-handler@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:b4f750a1-6b9b-593d-a3cb-9eff670ce6da", "id": "CVE-2026-44250", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44250 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-handler." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-handler@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:9bafe0e7-bce7-587e-94ae-ea9fba366191", "id": "CVE-2026-44890", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44890 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-handler." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-handler@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:c59b05bc-6d89-51e5-878d-d6194774d5fa", "id": "CVE-2026-44891", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44891 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-handler." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-handler@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:c53eb542-ee93-5ede-9cb9-f72df03c7f19", "id": "CVE-2026-44893", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44893 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-handler." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-handler@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:35c5fae0-0aa2-5d72-a11f-5166d1ee5ab8", "id": "CVE-2026-45416", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45416 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-handler." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-handler@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:861fac4c-129d-5139-9a0a-2d58696693c1", "id": "CVE-2026-45536", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45536 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-handler." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-handler@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:7e003628-5e73-5ba3-8f1a-990eba2395c7", "id": "CVE-2026-45673", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45673 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-handler." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-handler@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:c08fbf05-5f9c-5e0e-8c0e-558b76d9d581", "id": "CVE-2026-45674", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45674 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-handler." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-handler@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:fef08cf3-2207-5b56-a327-91cc0d37e8f5", "id": "CVE-2026-46340", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-46340 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-handler." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-handler@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:4118c2a3-79b8-5196-8880-fad7cdb021d9", "id": "CVE-2026-47244", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47244 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-handler." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-handler@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:7ddcf976-cf31-5d8b-90e7-80e846afa782", "id": "CVE-2026-47691", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47691 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-handler." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-handler@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:bdc41c8c-3359-5f8e-b6f1-3659f2893824", "id": "CVE-2026-48006", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-48006 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-handler." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-handler@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:55dd2e5e-793a-59fe-8fa6-2038efa15aad", "id": "CVE-2026-48043", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-48043 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-handler." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-handler@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:1c91a007-66c9-5e86-86e5-c31e468d45eb", "id": "CVE-2026-48059", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-48059 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-handler." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-handler@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:c8044b31-06b3-5efa-87a4-479984b4eb97", "id": "CVE-2026-50010", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50010 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-handler." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-handler@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:2a1205f4-910a-50f9-b45c-a18cd3d7e16d", "id": "CVE-2026-50011", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50011 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-handler." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-handler@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:5a5ae406-c5ac-5dbe-b4a5-58f5e85ac389", "id": "CVE-2026-50020", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50020 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-handler." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-handler@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:5e99abd8-9ad1-5715-9db1-55332e8232ea", "id": "CVE-2026-50560", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50560 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-handler." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-handler@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:7c51f112-fe5c-5cab-a5bd-e9f785a991df", "id": "CVE-2026-55831", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55831 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-handler." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-handler@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:74a467b5-77da-5b8d-86fa-e2d2b51a81c9", "id": "CVE-2026-55833", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55833 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-handler." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-handler@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:7c5734e8-a12d-54d3-a2cb-7eded8a71aa0", "id": "CVE-2026-55851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55851 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-handler." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-handler@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:bf449554-b8c4-54d9-a510-c415f73bc106", "id": "CVE-2026-56745", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56745 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-handler." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-handler@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:44990c68-e38d-5b3f-95bb-e4e324723b41", "id": "CVE-2026-56746", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56746 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-handler." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-handler@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:5b532eef-e292-592b-932d-b5d054f7051a", "id": "CVE-2026-56817", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56817 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-handler." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-handler@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:b83870bd-d538-5f50-be41-7468be2e5a3e", "id": "CVE-2026-56818", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56818 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-handler." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-handler@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:1e639490-28a8-5511-a681-007799defbfb", "id": "CVE-2026-56819", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56819 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-handler." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-handler@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:6170c990-176e-5c3c-9730-2a85376a7719", "id": "CVE-2026-56820", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56820 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-handler." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-handler@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:4744c002-65d5-5851-b007-f3088044e5ab", "id": "CVE-2026-56821", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56821 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-handler." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-handler@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:ae485ba3-105d-5431-ba03-d45519e052f9", "id": "CVE-2026-56822", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56822 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-handler." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-handler@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:999aa217-3e6b-50c9-bbfb-cef18c0cbe83", "id": "CVE-2026-59898", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59898 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-handler." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-handler@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:7257375c-8d51-5bfb-85e0-a691b55a2895", "id": "CVE-2026-59899", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59899 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-handler." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-handler@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:8dc84cc5-5075-553f-a83a-472fc5166edd", "id": "CVE-2026-59900", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59900 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-handler." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-handler@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:ca22f42c-46e0-52e4-a202-c60c41e21a6d", "id": "CVE-2026-59901", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59901 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-handler." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-handler@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:f88d9fbf-017a-5ba3-ad1f-afd8f3d8fc7e", "id": "CVE-2026-59902", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59902 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-handler." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-handler@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:cceeff76-0603-5697-8086-f32c1878e124", "id": "CVE-2026-59903", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59903 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-handler." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-handler@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:697357d7-b4f5-5038-af34-5578f0bbea6d", "id": "CVE-2026-59919", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59919 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-handler." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-handler@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:93d53e21-ccc4-5518-9b9a-f8159b6ea22b", "id": "CVE-2026-59920", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59920 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-handler." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-handler@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:fb1a3886-d73d-5053-bd7b-9d30d6bb7d72", "id": "CVE-2026-59921", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59921 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-handler." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-handler@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:3b9a02d9-051d-5f60-abbe-d85a801dd5fa", "id": "CVE-2026-73507", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-73507 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-handler." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-handler@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:6f6a5ea5-ffd3-5dbd-8cc2-d98c67d0d656", "id": "CVE-2026-73508", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-73508 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-handler." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-handler@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:be917d3c-55b5-554d-9c0d-ab50f0bb3b07", "id": "GHSA-mfg7-5gfp-c4w3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-handler." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-handler@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:a6bd1f37-869d-5957-94cd-baf97cdc9270", "id": "GHSA-v74w-7mr3-4qg3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-handler." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-handler@4.1.122.Final-tuxcare.1" } ] } ], "dependencies": [ { "ref": "pkg:maven/io.netty/netty-handler@4.1.122.Final-tuxcare.1" } ] }