{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:7faa2311-5211-5060-94c9-943463b342d1",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/io.netty/netty-handler@4.1.130.Final-tuxcare.2",
      "type": "library",
      "group": "io.netty",
      "name": "netty-handler",
      "version": "4.1.130.Final-tuxcare.2",
      "purl": "pkg:maven/io.netty/netty-handler@4.1.130.Final-tuxcare.2"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:62b0f008-e04b-5cdd-9f33-58c3491f3f7e",
      "id": "CVE-2025-55163",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2025-55163 does not affect version 4.1.130.Final-tuxcare.2 of io.netty:netty-handler. already_fixed \u2014 The target Netty 4.1.130.Final repository already contains the complete MadeYouReset (CVE-2025-55163) mitigation. The Http2MaxRstFrameLimitEncoder defense class is present, integrated into the HTTP/2 connection handler builder, and enabled by default for servers with a threshold of 200 RST_STREAM frames per 30-second window. All protocol-error-triggered RST writes route through the protected en..."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cb8e5fd4-0f60-53b2-abaa-450befb173f5",
      "id": "CVE-2026-33870",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33870 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fe3f223f-04cc-5027-814d-a069a503da11",
      "id": "CVE-2026-33871",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-33871 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3bc45d71-b2be-5709-b646-d18f68fdc490",
      "id": "CVE-2026-41417",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41417 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b2124608-4e8f-5836-9248-19507a89316a",
      "id": "CVE-2026-42578",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42578 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3def69d8-a115-5e78-93d2-3e6c51216919",
      "id": "CVE-2026-42579",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42579 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f86435ac-4476-5f6f-a538-7c7c0e85459a",
      "id": "CVE-2026-42580",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42580 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:edc5ba43-186c-5f70-b7ec-f92f00eb86fd",
      "id": "CVE-2026-42581",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42581 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8b401eae-aaff-586a-80af-9a97cbafb4b1",
      "id": "CVE-2026-42583",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42583 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b748dde1-59b7-5a23-b5fe-e0e34903acb3",
      "id": "CVE-2026-42584",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42584 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bd9cf8b6-9111-54ee-9479-bd025da9c884",
      "id": "CVE-2026-42585",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42585 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cf91b6a1-5458-5756-9fa5-413e50c0d8d7",
      "id": "CVE-2026-42586",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42586 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9e370a8f-65cd-5492-9462-bc91e79d24eb",
      "id": "CVE-2026-42587",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42587 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4d3ed063-b436-588c-9fa2-643878b4a2b8",
      "id": "CVE-2026-44248",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44248 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:59764fb8-9cf4-5fdd-be3c-4005c9ea4e14",
      "id": "CVE-2026-44249",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44249 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b41056ae-236e-53db-9bc4-81be536ce81a",
      "id": "CVE-2026-44250",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44250 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a5ff80b0-3375-5780-8a94-8a374e777d8c",
      "id": "CVE-2026-44890",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0ced6dcf-a151-5535-92b5-9a65334ceffa",
      "id": "CVE-2026-44891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44891 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:815b288d-8c52-51da-98da-d4933daa769f",
      "id": "CVE-2026-44893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44893 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e76b1237-c05c-5117-8044-5adc1a955d49",
      "id": "CVE-2026-45416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45416 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5c28a506-b7f2-533e-8270-e64cbe9bf93b",
      "id": "CVE-2026-45536",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45536 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:69ae85ca-d1dd-53fe-a9ef-6d80c4156f05",
      "id": "CVE-2026-45673",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-45673 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e9838d62-1137-5ba3-9ebc-1b315a317ea2",
      "id": "CVE-2026-45674",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-45674 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4b457ba1-835e-5c9a-ad38-8a0a26e8af48",
      "id": "CVE-2026-46340",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-46340 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:07eb6cdd-28c7-50c2-b291-4f61fd8282cd",
      "id": "CVE-2026-47244",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47244 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:efbbb47f-3dcb-5e19-b352-b530032ea860",
      "id": "CVE-2026-47691",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47691 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d144a007-c6f1-5f9d-a06f-0195ec1a85f2",
      "id": "CVE-2026-48006",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-48006 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e216b731-1b7c-5daf-b22a-21e3fa2cc63f",
      "id": "CVE-2026-48043",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-48043 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a21ec82a-44ff-59ad-ad18-69d74af11144",
      "id": "CVE-2026-48059",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-48059 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d80b83fe-573d-58b5-adce-fd8fa9550031",
      "id": "CVE-2026-50010",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50010 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c070dede-3b80-5881-bc2c-e9958cb1a8fa",
      "id": "CVE-2026-50011",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-50011 does not affect version 4.1.130.Final-tuxcare.2 of io.netty:netty-handler. Patches already applied: bff98ee51b5d0b7ee25fd5005f2169f2a0467efa (already in target via d5b4e38845f5 'Backport CVE-2026-44890 to 4.1.130.Final')"
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3887bda6-83b5-5edf-8a18-2c50e932be20",
      "id": "CVE-2026-50020",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50020 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:656dbbb6-a621-5e4d-828f-e8bb95be8e01",
      "id": "CVE-2026-50560",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9eb76597-56d4-519d-a0a0-7a662cc473a2",
      "id": "CVE-2026-55831",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55831 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4009a04a-b0e1-519e-a9c3-b2435f4113d1",
      "id": "CVE-2026-55833",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55833 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2ceaf5e2-9e8c-51de-8b30-6c637674e202",
      "id": "CVE-2026-55851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55851 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a3b71e92-412a-5f06-a4f9-1b5cb38bac24",
      "id": "CVE-2026-56745",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56745 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9b18e924-6d49-54bd-bf42-59de24738b53",
      "id": "CVE-2026-56746",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56746 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:aa8f1ddd-0b0e-5f56-bf00-b195174c7956",
      "id": "CVE-2026-56817",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56817 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:25b74a3c-0fd0-5c1e-92a8-3a3c92eb40cc",
      "id": "CVE-2026-56818",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56818 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:35973a02-068d-5aba-847c-85e8ca07fd36",
      "id": "CVE-2026-56819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56819 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a95b3683-1385-5686-ab10-455ed69d82d0",
      "id": "CVE-2026-56820",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56820 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0b8b9e08-3578-5e4f-8f89-2ea63f2df942",
      "id": "CVE-2026-56821",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56821 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ef0e20e9-771f-5ef8-b68c-ce0241402789",
      "id": "CVE-2026-56822",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56822 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:aa547774-fa97-5e71-9ed3-7e296055e21f",
      "id": "CVE-2026-59898",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59898 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d24d4307-f05b-5343-b237-651e614a27aa",
      "id": "CVE-2026-59899",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59899 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1504d668-4a5b-53ca-bd68-3738ece60e76",
      "id": "CVE-2026-59900",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59900 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:277dd0e5-1a8a-503e-8cf6-1b4ef6a02f32",
      "id": "CVE-2026-59901",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59901 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:03153869-7e26-56b4-a24c-b53465a9b052",
      "id": "CVE-2026-59902",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59902 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:73c0ee99-88bb-5b76-8e28-96632350e857",
      "id": "CVE-2026-59903",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59903 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9eba1ea1-5099-5148-ae95-34d76dd9cfb5",
      "id": "CVE-2026-59919",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59919 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9567fe20-a6ec-559c-9f9b-1d81feba4d67",
      "id": "CVE-2026-59920",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59920 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5d09a551-0a1a-5453-ac27-004e4faf41e1",
      "id": "CVE-2026-59921",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59921 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b191cd5e-780d-5a04-94d9-3748027f85c4",
      "id": "CVE-2026-73507",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-73507 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:84f70cac-1340-5b22-a012-55c587cd38ee",
      "id": "CVE-2026-73508",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-73508 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ca81e624-e790-58c2-9f24-ff0ad514a65a",
      "id": "GHSA-mfg7-5gfp-c4w3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7e4f385b-e251-58d7-9388-513160b999b1",
      "id": "GHSA-v74w-7mr3-4qg3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.130.Final-tuxcare.2"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.netty/netty-handler@4.1.130.Final-tuxcare.2"
    }
  ]
}