{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:dfebb27b-7e7d-509d-8d06-f28e1d86c0f2", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/io.netty/netty-parent@4.1.122.Final-tuxcare.1", "type": "library", "group": "io.netty", "name": "netty-parent", "version": "4.1.122.Final-tuxcare.1", "purl": "pkg:maven/io.netty/netty-parent@4.1.122.Final-tuxcare.1" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:b8cdce9d-1d81-5c1a-a236-f885a6e969ee", "id": "CVE-2025-55163", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-55163 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:08e304e6-85f9-52c8-9e32-b4fec04ccbd2", "id": "CVE-2025-58056", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-58056 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:182f17e9-94c9-55f6-8e35-45f1ce8617e9", "id": "CVE-2025-58057", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-58057 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:47e81200-9bea-5974-bfc2-866f8f564625", "id": "CVE-2025-59419", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-59419 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:0adaceb8-0f46-5fd5-bedf-a0603eae7e08", "id": "CVE-2025-67735", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-67735 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:4699b6cd-54f3-5347-b680-caa4b3c9b873", "id": "CVE-2026-33870", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33870 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:a8a4f8f7-f917-5147-863e-cb42966a0202", "id": "CVE-2026-33871", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33871 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:ea3f62f0-b87d-5874-b28c-0a7b8f42777f", "id": "CVE-2026-41417", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41417 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:c764774e-d408-579e-a875-5176c68d5b62", "id": "CVE-2026-42577", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-42577 does not affect version 4.1.122.Final-tuxcare.1 of io.netty:netty-parent. CVE-2026-42577 affects Netty 4.2.x only (advisory range >= 4.2.0.Final, < 4.2.13.Final). An fd left registered with an epoll event mask of 0 is woken forever by the unmaskable EPOLLERR/EPOLLHUP after a RST on a half-closed connection. Target 4.1.122.Final is NOT affected due to architectural differences. The patch modifies EpollIoHandler.java and EpollIoOps.java, part of 4.2's IoHandler/IoOps abstraction. Neither file exists in 4.1.x, which registers via EpollEventLoop.modify() off AbstractEpollChannel.flags. That field is seeded Native.EPOLLET, and no read/close/half-close path clears it (only the explicit pre-registration setEpollMode(LEVEL_TRIGGERED) opt-in), so the registration stays edge-triggered and the RST is reported once per edge instead of on every epoll_wait. The chain from INPUT (connection state change) to GOAL (CPU busy-loop via empty event mask) is broken at step (ii): the target cannot produce an empty event mask. Verdict: not_affected. Justification: code_not_reachable (Rule 5 Type A2)." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:196ec8bc-9e7e-5a7f-bf3c-e625177a6f88", "id": "CVE-2026-42578", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42578 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:4e0a51b1-0757-59bb-a9b0-2e64f6b367d9", "id": "CVE-2026-42579", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42579 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:92b0c7e6-10c7-5896-ab91-cb3fab4f97ba", "id": "CVE-2026-42580", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42580 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:150c8fbc-4f78-53bc-98d2-12b3d6f6c265", "id": "CVE-2026-42581", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42581 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:64c4c008-5aeb-52dc-8aaa-c3cc9f3dde2b", "id": "CVE-2026-42583", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42583 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:1fb68ba6-855d-5da8-bc01-5a10ee6c8dca", "id": "CVE-2026-42584", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42584 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:269bd6a0-f97a-5786-913b-413fdfd91fa6", "id": "CVE-2026-42585", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42585 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:0273bf19-a17e-523d-a1be-7dda06a5e55f", "id": "CVE-2026-42586", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42586 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:cdaa90c0-cbc7-5f46-a7b6-b9239b7391e2", "id": "CVE-2026-42587", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42587 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:3fab439c-05c1-52c9-a274-5b7854308f26", "id": "CVE-2026-44248", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44248 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:ada2c92a-63ae-57a1-8149-38a62e8b402a", "id": "CVE-2026-44249", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44249 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:93a7d635-ad6b-56bc-b24a-72a671877461", "id": "CVE-2026-44250", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44250 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:8b8e2bf6-7cac-5885-99c7-1881d4e4f614", "id": "CVE-2026-44890", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44890 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:40c9672a-f460-50cc-bd1c-be26b1b260e6", "id": "CVE-2026-44891", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44891 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:3d351be6-2f07-573c-bdb8-2695c2db286c", "id": "CVE-2026-44893", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44893 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:bcc88cfc-292c-5d22-aa03-1ac5f9cad21d", "id": "CVE-2026-45416", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45416 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:f0c94a71-d3bd-5567-b180-b7b998848c67", "id": "CVE-2026-45536", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45536 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:1e95d673-11e3-5791-a506-705dc91dd446", "id": "CVE-2026-45673", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45673 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:b8d9ada1-1912-5e76-92d3-397aab81c2f0", "id": "CVE-2026-45674", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45674 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:e8100299-c332-5947-a978-25687ccdaea2", "id": "CVE-2026-46340", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-46340 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:fd246026-4fd0-5d35-b98a-752b2fd7dd57", "id": "CVE-2026-47244", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47244 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:8a495ab7-f934-5a1e-afce-43f510d53423", "id": "CVE-2026-47691", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47691 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:283d1542-0ed6-524e-b831-42cd9fd603d8", "id": "CVE-2026-48006", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-48006 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:0b728e55-bf62-5934-af74-6f865160a2ec", "id": "CVE-2026-48043", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-48043 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:1f6b5a4c-9693-54dd-9266-1e9c0864d9ae", "id": "CVE-2026-48059", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-48059 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:a608a268-6ff3-5371-91c1-fd4b18ea89b2", "id": "CVE-2026-50010", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50010 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:34933af1-8557-5cbd-97d1-65470979dc8a", "id": "CVE-2026-50011", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50011 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:e1204829-2145-54b0-bb3b-17be0439cadc", "id": "CVE-2026-50020", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50020 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:2d1afd39-358d-5b7a-84b7-d24bdc87810a", "id": "CVE-2026-50560", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50560 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:27ff618b-104e-546c-81b5-d3b5970b8c32", "id": "CVE-2026-55831", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55831 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:5f65d0b2-807b-5903-a4b0-f6883828d355", "id": "CVE-2026-55833", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55833 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:1ef0a5ef-3d5c-5491-9468-75328f7e4fd1", "id": "CVE-2026-55851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55851 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:9c719ba2-ac9d-5263-8b65-8f62be33e359", "id": "CVE-2026-56745", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56745 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:7dbc457f-c8b6-5906-8b1d-ce3d0c03e490", "id": "CVE-2026-56746", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56746 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:eed98ec3-84bd-5d0e-bc40-b464417c8512", "id": "CVE-2026-56817", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56817 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:2d09da90-2934-5803-9703-3673c3dd5b58", "id": "CVE-2026-56818", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56818 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:1089cb54-e4c1-5bb5-b8e5-c05ad3d6128b", "id": "CVE-2026-56819", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56819 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:194a5f07-aafa-589e-8c32-64aa81fb803d", "id": "CVE-2026-56820", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56820 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:367480e3-6d7c-518e-a9cb-5432fb1644b0", "id": "CVE-2026-56821", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56821 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:0664057f-80af-5cec-b4a4-61b8939b1cd4", "id": "CVE-2026-56822", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56822 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:1bbde31b-ddfe-5897-9b70-293cf0399715", "id": "CVE-2026-59898", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59898 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:1e86e5b6-f692-5776-9895-22fc6255ef82", "id": "CVE-2026-59899", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59899 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:6d6dfa29-dbc3-5eb1-b741-ee9466657a8a", "id": "CVE-2026-59900", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59900 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:f2bb20d1-0b3f-579a-9eaf-343f00e8d157", "id": "CVE-2026-59901", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59901 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:82a295cd-0f53-5f16-ab02-a56f636ba058", "id": "CVE-2026-59902", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59902 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:5b190d9a-482a-59ab-aaf8-a6564398263d", "id": "CVE-2026-59903", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59903 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:6cd80f08-d027-5c56-806a-4bf8863631bc", "id": "CVE-2026-59919", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59919 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:7216404c-0ec8-5ffb-b5a2-5d074f1f785e", "id": "CVE-2026-59920", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59920 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:b8e2a51d-4212-586d-9acf-dbdd87e6b045", "id": "CVE-2026-59921", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59921 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:a05fbc1d-fc01-546b-bc74-af3d34ee9759", "id": "CVE-2026-73507", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-73507 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:7d6d5f84-8eac-5fb6-b3c3-27c95d373f45", "id": "CVE-2026-73508", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-73508 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:e97f66f1-7e6a-5de2-8648-8f45fd21fc58", "id": "GHSA-mfg7-5gfp-c4w3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:8bba17f3-6ebc-52dc-85a7-5174bdb6719c", "id": "GHSA-v74w-7mr3-4qg3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.122.Final-tuxcare.1" } ] } ], "dependencies": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.122.Final-tuxcare.1" } ] }