{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:fa7e56a4-1efc-52dc-bd81-7df02ff7d547", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/io.netty/netty-handler@4.1.122.Final-tuxcare.2", "type": "library", "group": "io.netty", "name": "netty-handler", "version": "4.1.122.Final-tuxcare.2", "purl": "pkg:maven/io.netty/netty-handler@4.1.122.Final-tuxcare.2" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:7a837b31-d545-5f58-92ae-90b0e66bb029", "id": "CVE-2025-55163", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55163 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-handler." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-handler@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:b1bade6b-4874-5dbc-8ba7-7d965cc54cf7", "id": "CVE-2025-58056", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-58056 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-handler." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-handler@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:3a36603b-ee70-55b6-a0c5-4390d53c2f4f", "id": "CVE-2025-58057", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-58057 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-handler." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-handler@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:20615d07-d7d0-55d2-80a2-b7871baccf6e", "id": "CVE-2025-59419", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59419 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-handler." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-handler@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:639d9955-cb5a-5113-b134-39f13742a580", "id": "CVE-2025-67735", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-67735 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-handler." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-handler@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:c92f1f3d-40f0-5f05-bb80-576f4a04fd65", "id": "CVE-2026-33870", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33870 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-handler." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-handler@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:52bddf18-a976-5258-bd02-fb1dd6997810", "id": "CVE-2026-33871", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33871 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-handler." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-handler@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:2adf2c1a-ba0a-5199-97d7-ee360d6f778d", "id": "CVE-2026-41417", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41417 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-handler." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-handler@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:94129e0d-be48-52a2-8afc-3cc1db645b87", "id": "CVE-2026-42577", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-42577 does not affect version 4.1.122.Final-tuxcare.2 of io.netty:netty-handler. CVE-2026-42577 affects Netty 4.2.x only (advisory range >= 4.2.0.Final, < 4.2.13.Final). An fd left registered with an epoll event mask of 0 is woken forever by the unmaskable EPOLLERR/EPOLLHUP after a RST on a half-closed connection. Target 4.1.122.Final is NOT affected due to architectural differences. The patch modifies EpollIoHandler.java and EpollIoOps.java, part of 4.2's IoHandler/IoOps abstraction. Neither file exists in 4.1.x, which registers via EpollEventLoop.modify() off AbstractEpollChannel.flags. That field is seeded Native.EPOLLET, and no read/close/half-close path clears it (only the explicit pre-registration setEpollMode(LEVEL_TRIGGERED) opt-in), so the registration stays edge-triggered and the RST is reported once per edge instead of on every epoll_wait. The chain from INPUT (connection state change) to GOAL (CPU busy-loop via empty event mask) is broken at step (ii): the target cannot produce an empty event mask. Verdict: not_affected. Justification: code_not_reachable (Rule 5 Type A2)." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-handler@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:2b98a340-8062-5cfd-86cd-568d0c98bf56", "id": "CVE-2026-42578", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42578 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-handler." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-handler@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:e20c17d5-9012-5fe6-8572-5f59276f34e2", "id": "CVE-2026-42579", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42579 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-handler." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-handler@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:9cde6182-c75b-5835-9aa7-51ee5cdb614b", "id": "CVE-2026-42580", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42580 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-handler." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-handler@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:2a167bc5-98e1-5b11-bcf3-c0ef71cf12b9", "id": "CVE-2026-42581", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42581 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-handler." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-handler@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:7490e0da-075f-5182-848d-e5d843e2c440", "id": "CVE-2026-42583", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42583 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-handler." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-handler@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:535cd6c5-0fc2-541e-bb59-bd1e24d1c9bb", "id": "CVE-2026-42584", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42584 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-handler." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-handler@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:45e3f9be-525f-516b-ae6b-90394b3a4585", "id": "CVE-2026-42585", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42585 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-handler." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-handler@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:b9a5d58c-f395-5208-8d0f-67a927de14a3", "id": "CVE-2026-42586", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42586 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-handler." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-handler@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:94be92d8-fd65-53fa-8231-e0aab30ff80d", "id": "CVE-2026-42587", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42587 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-handler." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-handler@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:edb2db7e-7282-5474-a9fe-c5d732fb8976", "id": "CVE-2026-44248", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44248 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-handler." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-handler@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:f7e3be9d-db95-5396-af70-2b5b12b3e070", "id": "CVE-2026-44249", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44249 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-handler." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-handler@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:aab2dff3-c920-51cf-af89-13a752cebb68", "id": "CVE-2026-44250", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44250 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-handler." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-handler@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:66b4727f-a79b-534b-a7f5-b3723d370e97", "id": "CVE-2026-44890", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-handler." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-handler@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:69136157-481e-59b7-891e-5df3d7b2e358", "id": "CVE-2026-44891", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44891 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-handler." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-handler@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:c5ac4f42-da46-5aa7-961c-df7a8cc1e3c6", "id": "CVE-2026-44893", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44893 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-handler." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-handler@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:4e36efda-c7c0-5a70-bed0-c574cb7ba136", "id": "CVE-2026-45416", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-45416 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-handler." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-handler@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:2cb83e7a-05c1-56b4-8a58-560f053354d6", "id": "CVE-2026-45536", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-45536 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-handler." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-handler@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:f1000628-27d3-5d87-a7a9-dae07e2c34d4", "id": "CVE-2026-45673", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-45673 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-handler." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-handler@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:45790fb3-4044-5d49-8bbd-91dbbe0825ea", "id": "CVE-2026-45674", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-45674 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-handler." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-handler@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:20336972-f946-5232-b85e-338d7863ad15", "id": "CVE-2026-46340", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46340 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-handler." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-handler@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:9a2e87ae-309f-58f7-870a-7f218e546fba", "id": "CVE-2026-47244", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47244 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-handler." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-handler@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:5a4ce5a8-83fa-533d-b157-deaed3f829cf", "id": "CVE-2026-47691", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47691 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-handler." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-handler@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:967614cd-9a8e-5c0c-97a6-1f9c5d6a1314", "id": "CVE-2026-48006", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48006 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-handler." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-handler@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:a0157066-c388-5b2c-ad93-4686de05a2cc", "id": "CVE-2026-48043", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48043 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-handler." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-handler@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:1e3cc6a0-bea9-5222-8612-4aee20a75bf3", "id": "CVE-2026-48059", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48059 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-handler." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-handler@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:a0c973f4-c5ac-56ec-9760-53379f02f838", "id": "CVE-2026-50010", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50010 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-handler." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-handler@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:95b4a9e7-dff5-56fb-9621-370c8574b4dc", "id": "CVE-2026-50011", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50011 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-handler." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-handler@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:30755031-669c-594b-838e-5724a01e1a93", "id": "CVE-2026-50020", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50020 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-handler." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-handler@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:0e610d6f-08f0-5ab7-8ecf-ded3eb4ebc56", "id": "CVE-2026-50560", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-handler." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-handler@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:2960493b-5f6a-5ceb-b627-8d2286da2cc0", "id": "CVE-2026-55831", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-55831 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-handler." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-handler@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:62871e2f-cfa1-5eb8-b1af-82b23d7f6eda", "id": "CVE-2026-55833", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-55833 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-handler." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-handler@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:e1833155-f672-581c-8060-1916ea3255c1", "id": "CVE-2026-55851", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-55851 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-handler." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-handler@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:a06937f1-2826-5a06-ba5b-c7d5be55609a", "id": "CVE-2026-56745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56745 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-handler." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-handler@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:b78cde19-2e1f-505e-86e1-a16bc1f1508a", "id": "CVE-2026-56746", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56746 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-handler." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-handler@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:c0a666e9-9d50-5fe3-bfd0-249436f74537", "id": "CVE-2026-56817", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56817 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-handler." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-handler@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:730e69d0-13da-5572-b975-57f4af789848", "id": "CVE-2026-56818", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56818 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-handler." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-handler@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:1840bd75-9a18-5ffb-97d6-4506c1d46f08", "id": "CVE-2026-56819", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56819 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-handler." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-handler@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:96b1bcb4-f56d-5938-86c3-a602bfb43291", "id": "CVE-2026-56820", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56820 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-handler." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-handler@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:b9036e4a-307d-5cd4-a317-b369a6e1ed2a", "id": "CVE-2026-56821", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56821 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-handler." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-handler@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:09a7e747-694a-5ff2-b731-39ddf1689496", "id": "CVE-2026-56822", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56822 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-handler." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-handler@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:29e3d56e-e930-588b-8a7a-c7b48a6f9948", "id": "CVE-2026-59898", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59898 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-handler." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-handler@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:4349989a-aaf1-5d95-af18-4d35c76a2248", "id": "CVE-2026-59899", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59899 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-handler." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-handler@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:8090bb10-7077-59c9-ab86-8ce8767fac92", "id": "CVE-2026-59900", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59900 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-handler." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-handler@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:70ca4f67-af2a-5bb6-937d-e8241582b654", "id": "CVE-2026-59901", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59901 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-handler." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-handler@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:85552565-356f-5021-af41-88e191b59dcd", "id": "CVE-2026-59902", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59902 affects version 4.1.122.Final-tuxcare.2 of io.netty:netty-handler." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-handler@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:5ee88267-ec3c-5b39-bafe-019b840299c4", "id": "CVE-2026-59903", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59903 affects version 4.1.122.Final-tuxcare.2 of io.netty:netty-handler." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-handler@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:0cb1234f-289b-5fbe-9054-bfba8bcc6296", "id": "CVE-2026-59919", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59919 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-handler." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-handler@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:615db923-73f7-5414-879a-cdf221991f1e", "id": "CVE-2026-59920", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59920 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-handler." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-handler@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:f599e323-e5ab-5bf5-b811-c62b4b423e46", "id": "CVE-2026-59921", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59921 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-handler." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-handler@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:84d9dd33-447e-5663-9705-0bd5f863a5b2", "id": "CVE-2026-73507", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-73507 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-handler." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-handler@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:f50ff450-03fc-553c-b306-c90128d5e43a", "id": "CVE-2026-73508", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-73508 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-handler." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-handler@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:6e7762dd-fe68-5fd4-b7ae-51ca6ed6c031", "id": "GHSA-mfg7-5gfp-c4w3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.122.Final-tuxcare.2 of io.netty:netty-handler." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-handler@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:82a53738-6f9a-5da3-bfe7-0a4a9aa3f15c", "id": "GHSA-v74w-7mr3-4qg3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.122.Final-tuxcare.2 of io.netty:netty-handler." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-handler@4.1.122.Final-tuxcare.2" } ] } ], "dependencies": [ { "ref": "pkg:maven/io.netty/netty-handler@4.1.122.Final-tuxcare.2" } ] }