{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:c0b276c2-c0a9-5e9a-9d86-7e524a9dbcaf",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/io.netty/netty-handler@4.1.130.Final-tuxcare.3",
      "type": "library",
      "group": "io.netty",
      "name": "netty-handler",
      "version": "4.1.130.Final-tuxcare.3",
      "purl": "pkg:maven/io.netty/netty-handler@4.1.130.Final-tuxcare.3"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:5e723451-30f6-5b5b-99ca-e53891c7e413",
      "id": "CVE-2025-55163",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2025-55163 does not affect version 4.1.130.Final-tuxcare.3 of io.netty:netty-handler. already_fixed \u2014 The target Netty 4.1.130.Final repository already contains the complete MadeYouReset (CVE-2025-55163) mitigation. The Http2MaxRstFrameLimitEncoder defense class is present, integrated into the HTTP/2 connection handler builder, and enabled by default for servers with a threshold of 200 RST_STREAM frames per 30-second window. All protocol-error-triggered RST writes route through the protected en..."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:00fdf481-aac8-5548-b00a-24570a7a65f6",
      "id": "CVE-2026-33870",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33870 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:aa9d9fce-b695-557d-a076-86bc1d8e88b8",
      "id": "CVE-2026-33871",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-33871 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:86d21fc4-d8d3-52cc-9c1b-cdab34da98cf",
      "id": "CVE-2026-41417",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41417 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bce78dcd-025f-5afa-ba64-1692d45b988f",
      "id": "CVE-2026-42578",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42578 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0dab8249-7fec-5eee-9a9b-1cb1bd3c67ed",
      "id": "CVE-2026-42579",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42579 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7725cde5-a022-56c1-9a4c-025415263b83",
      "id": "CVE-2026-42580",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42580 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9dd23688-df3f-5b07-a026-a70dd800ef04",
      "id": "CVE-2026-42581",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42581 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1a616bb1-af88-53e6-b1ac-184db0aace3b",
      "id": "CVE-2026-42583",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42583 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:20aa5391-fd5a-5943-bd7f-f1d1f2f96e11",
      "id": "CVE-2026-42584",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42584 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:be6f360a-7156-5af2-8d90-172a838f73b4",
      "id": "CVE-2026-42585",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42585 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9f7c6079-3a5e-58c3-a9ff-eb937c557c9c",
      "id": "CVE-2026-42586",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42586 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1d4338ce-7b77-527c-987e-49a08d399750",
      "id": "CVE-2026-42587",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42587 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cbc69dba-8a0e-5dd9-a6b1-e9e328675ae5",
      "id": "CVE-2026-44248",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44248 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:adc3ed9d-b9dc-53a0-afc8-75d30511e7a1",
      "id": "CVE-2026-44249",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44249 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ff3a130d-5b43-5ee6-a2ec-a3fe17fa4262",
      "id": "CVE-2026-44250",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44250 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:23d4a30b-33b5-5537-995c-266f7ff172e6",
      "id": "CVE-2026-44890",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:37a25a42-6fe5-5f82-8ad4-f0d3c17e664d",
      "id": "CVE-2026-44891",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44891 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6a8a6c04-d6d1-50a0-94dc-d6e729e607d2",
      "id": "CVE-2026-44893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44893 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8e4916da-6b9f-5fa8-be9b-171086ea62da",
      "id": "CVE-2026-45416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45416 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bed1c606-8afb-536e-95eb-0cd1815a4507",
      "id": "CVE-2026-45536",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45536 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:46353934-0409-5cb8-b984-deeec6458c8c",
      "id": "CVE-2026-45673",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-45673 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:16349e47-805e-5cdc-96d2-21b7cc1e8d87",
      "id": "CVE-2026-45674",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-45674 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4b6149d9-e6d6-54df-bda1-dedbc3a57156",
      "id": "CVE-2026-46340",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-46340 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4ffc9a3c-417b-5cbe-9b7f-bfaf0125f2c3",
      "id": "CVE-2026-47244",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47244 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9f1c187c-7cfb-579f-a7ad-5c02207a73da",
      "id": "CVE-2026-47691",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47691 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:46ee2fb0-0055-535f-a7a2-54c7639b5f1f",
      "id": "CVE-2026-48006",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-48006 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d5cdb405-ee34-5a3c-b0e8-196e4b769eb4",
      "id": "CVE-2026-48043",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-48043 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6a8d5d2e-2065-5863-9aea-288ae0e6aaf4",
      "id": "CVE-2026-48059",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-48059 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8b03a7b2-ce10-5bc2-a636-6c358277406f",
      "id": "CVE-2026-50010",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50010 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4d38926a-4462-568c-9a66-3fdc17483fc0",
      "id": "CVE-2026-50011",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-50011 does not affect version 4.1.130.Final-tuxcare.3 of io.netty:netty-handler. Patches already applied: bff98ee51b5d0b7ee25fd5005f2169f2a0467efa (already in target via d5b4e38845f5 'Backport CVE-2026-44890 to 4.1.130.Final')"
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f38652ed-6972-567d-ba9a-3b02e9793bed",
      "id": "CVE-2026-50020",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50020 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:41229928-9226-557b-9aa5-cc0e59023159",
      "id": "CVE-2026-50560",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a7de8117-0412-5423-9f23-79435bcf7662",
      "id": "CVE-2026-55831",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-55831 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5d61108d-28c4-573f-93f9-72d42d0a78ab",
      "id": "CVE-2026-55833",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-55833 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7cd01087-d490-51a8-8130-7cef75ef7187",
      "id": "CVE-2026-55851",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-55851 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c325fd31-3a8d-5619-bbfe-6ee4b75b920d",
      "id": "CVE-2026-56745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-56745 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9f629008-c9b6-53f8-86f9-d5a1243fbd19",
      "id": "CVE-2026-56746",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-56746 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:05aec3db-a544-54bd-be61-35c0ff1a65f4",
      "id": "CVE-2026-56817",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-56817 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d295832e-5c71-5116-9c04-beec0684e758",
      "id": "CVE-2026-56818",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-56818 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f6f5f028-0000-5d2b-83ec-cd731cfc0886",
      "id": "CVE-2026-56819",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-56819 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bd341b2c-fed9-5d4e-bb5c-51922993a8b5",
      "id": "CVE-2026-56820",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-56820 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:71cb7994-7f1c-5628-b8d3-3762804d086a",
      "id": "CVE-2026-56821",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-56821 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:34e0694a-8ca4-5f16-b691-fa0bb4fe43b4",
      "id": "CVE-2026-56822",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-56822 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d055f7e0-9f40-5408-bc61-dd7cbd419e7e",
      "id": "CVE-2026-59898",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59898 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f7068e77-bc10-5c9a-bf45-eab4c52c5dfd",
      "id": "CVE-2026-59899",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59899 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b4ea1c7a-7248-540d-9db2-affd4a32838e",
      "id": "CVE-2026-59900",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59900 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8dfb30fe-194f-585b-b7ee-1a074278b154",
      "id": "CVE-2026-59901",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59901 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cc6ca4d5-30b4-5528-950f-97e8f82388d7",
      "id": "CVE-2026-59902",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59902 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2ba8617e-2f81-540b-bd9f-5b46a372fd15",
      "id": "CVE-2026-59903",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59903 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fbe86ef2-9d7f-5820-b2af-871f5c9f3fd8",
      "id": "CVE-2026-59919",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59919 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:158879f0-b928-598b-b6c0-30f3eacf8d2b",
      "id": "CVE-2026-59920",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59920 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cbb0e624-999e-53c3-b577-6bad026c5e01",
      "id": "CVE-2026-59921",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59921 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:efb6c00a-b832-5eab-84bf-37b01ddebde3",
      "id": "CVE-2026-73507",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-73507 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fd7a5152-14b2-551f-bca1-dff797bb70e7",
      "id": "CVE-2026-73508",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-73508 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2fa8619e-3621-5139-9d4b-d25f9174da3b",
      "id": "GHSA-mfg7-5gfp-c4w3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:49264748-3448-51fd-abad-6e8dd213773d",
      "id": "GHSA-v74w-7mr3-4qg3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-handler."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-handler@4.1.130.Final-tuxcare.3"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.netty/netty-handler@4.1.130.Final-tuxcare.3"
    }
  ]
}