{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:8f3b66ad-de6c-5f53-8d00-67a8d604e88a", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/io.netty/netty-parent@4.1.122.Final-tuxcare.2", "type": "library", "group": "io.netty", "name": "netty-parent", "version": "4.1.122.Final-tuxcare.2", "purl": "pkg:maven/io.netty/netty-parent@4.1.122.Final-tuxcare.2" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:bbca8ae4-d5b0-5b0c-bbf1-9ac6048709ed", "id": "CVE-2025-55163", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55163 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:f7ff7a54-4e50-5ceb-98f1-8962ca1dfe43", "id": "CVE-2025-58056", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-58056 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:75e3601f-dc41-53ef-9674-3e1e01d383ea", "id": "CVE-2025-58057", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-58057 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:bf3cf17e-f5f7-53c4-96ae-55ec3e22ae8a", "id": "CVE-2025-59419", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59419 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:ac7c82b6-5a1a-5954-83e0-8838ac944989", "id": "CVE-2025-67735", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-67735 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:b4b0aca1-2cbf-5bce-b843-9d499c76e832", "id": "CVE-2026-33870", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33870 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:5956f4d5-afd8-54af-8069-a79291dec526", "id": "CVE-2026-33871", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33871 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:a139fa51-08dd-5db6-8a61-2a9872ef8c8a", "id": "CVE-2026-41417", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41417 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:cfe34eff-03b4-5bb0-a3a7-c9a8c7e81470", "id": "CVE-2026-42577", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-42577 does not affect version 4.1.122.Final-tuxcare.2 of io.netty:netty-parent. CVE-2026-42577 affects Netty 4.2.x only (advisory range >= 4.2.0.Final, < 4.2.13.Final). An fd left registered with an epoll event mask of 0 is woken forever by the unmaskable EPOLLERR/EPOLLHUP after a RST on a half-closed connection. Target 4.1.122.Final is NOT affected due to architectural differences. The patch modifies EpollIoHandler.java and EpollIoOps.java, part of 4.2's IoHandler/IoOps abstraction. Neither file exists in 4.1.x, which registers via EpollEventLoop.modify() off AbstractEpollChannel.flags. That field is seeded Native.EPOLLET, and no read/close/half-close path clears it (only the explicit pre-registration setEpollMode(LEVEL_TRIGGERED) opt-in), so the registration stays edge-triggered and the RST is reported once per edge instead of on every epoll_wait. The chain from INPUT (connection state change) to GOAL (CPU busy-loop via empty event mask) is broken at step (ii): the target cannot produce an empty event mask. Verdict: not_affected. Justification: code_not_reachable (Rule 5 Type A2)." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:82a50651-bf3c-5607-8e55-1d61b9d30ead", "id": "CVE-2026-42578", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42578 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:b0b5b264-894b-51ee-819c-976421bc4a95", "id": "CVE-2026-42579", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42579 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:5e60dd2b-4749-5980-8980-a7a619c7baf5", "id": "CVE-2026-42580", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42580 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:2e1fa16d-34d7-57c5-808e-def68f84fe97", "id": "CVE-2026-42581", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42581 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:1544887a-021b-5897-becc-8ff9216fa467", "id": "CVE-2026-42583", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42583 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:138e7311-5dcc-5bbc-b142-b3b6c6282f38", "id": "CVE-2026-42584", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42584 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:45c3caa0-2f7d-5faa-bd7a-a7bb89da955e", "id": "CVE-2026-42585", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42585 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:660ad92c-5e25-5d58-b949-514f44fc6d76", "id": "CVE-2026-42586", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42586 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:6cd372f0-a047-5d5e-9a3d-a7f933a3cb60", "id": "CVE-2026-42587", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42587 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:93678b5c-8005-594f-a20c-8485da5adc75", "id": "CVE-2026-44248", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44248 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:e4b73626-4804-52e7-8db7-bfff8b0f6ce3", "id": "CVE-2026-44249", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44249 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:d7db37bd-fd8a-5069-9d94-4ff4ea2c49a4", "id": "CVE-2026-44250", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44250 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:4ad13048-00be-50ea-b95e-8ba5317182b9", "id": "CVE-2026-44890", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:f24a9486-3d61-5cdf-a0e7-2ab3ee553282", "id": "CVE-2026-44891", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44891 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:29e9f38e-061c-5419-81f8-3a0ba0d90b15", "id": "CVE-2026-44893", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44893 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:db7c25b7-c4af-5fa4-b9ea-0f80441d3d79", "id": "CVE-2026-45416", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-45416 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:c341732a-3c46-52df-85b3-9ae1ad1a73d4", "id": "CVE-2026-45536", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-45536 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:069e30a2-93f7-52a9-993f-5faba6c98758", "id": "CVE-2026-45673", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-45673 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:8c51c375-fc22-57a5-98a1-dad75474bc29", "id": "CVE-2026-45674", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-45674 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:dfad49d5-8d34-5130-a8f6-9259ae7442d9", "id": "CVE-2026-46340", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46340 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:f00fc34b-5097-5843-bc53-0450f8e991ff", "id": "CVE-2026-47244", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47244 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:d7cfd229-3259-575b-ac67-55a7f55503aa", "id": "CVE-2026-47691", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47691 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:8b273642-ef2c-5880-ab62-d1f6a7cceaaf", "id": "CVE-2026-48006", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48006 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:753830e4-2cda-57ba-8629-3846fabf5c49", "id": "CVE-2026-48043", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48043 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:291c8c67-a410-5a20-b52a-bc49ba3a3da1", "id": "CVE-2026-48059", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48059 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:80d5219b-0ef6-5082-bc52-760ac969e1b8", "id": "CVE-2026-50010", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50010 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:1c8e123f-f018-5af7-a3ba-2fc9ce9ab59a", "id": "CVE-2026-50011", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50011 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:b50c178b-28c1-5902-affe-7090edbe46c8", "id": "CVE-2026-50020", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50020 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:091adeb7-8c33-5260-bbf5-218cd529adc5", "id": "CVE-2026-50560", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:68b89362-21a5-585f-9bf4-a0bd18398475", "id": "CVE-2026-55831", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-55831 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:226bfdde-8912-576e-a685-9aa15296a5ec", "id": "CVE-2026-55833", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-55833 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:0dbd8c0c-5554-5159-94ed-137ab60a8b20", "id": "CVE-2026-55851", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-55851 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:159b2322-6754-5a23-86fc-77e1a15a14ff", "id": "CVE-2026-56745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56745 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:210464bc-1d40-576d-a876-846f849e7bdf", "id": "CVE-2026-56746", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56746 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:20cda6bf-3ee3-53f3-8797-b78de8918408", "id": "CVE-2026-56817", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56817 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:c28a7397-abd0-5057-a430-eca793d82b85", "id": "CVE-2026-56818", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56818 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:8b0b857f-767c-59b7-9765-d6fe5bb123a6", "id": "CVE-2026-56819", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56819 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:775d2bb7-6141-55a7-815d-b374456b7c79", "id": "CVE-2026-56820", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56820 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:2a32ce57-1a06-5f4b-b1d5-ce6d291a9bac", "id": "CVE-2026-56821", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56821 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:fc4b61d2-2ed8-5cc0-9340-ad043d6854e8", "id": "CVE-2026-56822", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56822 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:90e02f0b-7529-5b7d-a053-42212a25d4e0", "id": "CVE-2026-59898", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59898 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:4162ccce-6c4a-5a8f-a9b7-9368ef5586fd", "id": "CVE-2026-59899", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59899 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:ca93dca1-de10-5169-9ed1-9fb0bde1e88d", "id": "CVE-2026-59900", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59900 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:f7463fa0-8ba6-5da9-a641-0e26c56d5936", "id": "CVE-2026-59901", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59901 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:6c53ba01-db35-50de-9281-0d82916b19e6", "id": "CVE-2026-59902", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59902 affects version 4.1.122.Final-tuxcare.2 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:14682e24-a02e-5f67-8137-952f1262a334", "id": "CVE-2026-59903", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59903 affects version 4.1.122.Final-tuxcare.2 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:a37ae580-b13f-596b-8f8b-f4168a4c2aaf", "id": "CVE-2026-59919", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59919 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:57468f94-b735-5661-8496-35bb39a05826", "id": "CVE-2026-59920", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59920 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:1ab103a0-a669-513d-95c6-ffab28b00fb5", "id": "CVE-2026-59921", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59921 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:ce7a1b7c-7d52-5cc6-9be5-7da361b5f3ad", "id": "CVE-2026-73507", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-73507 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:84690694-61fb-582b-872e-50980c68994e", "id": "CVE-2026-73508", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-73508 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:d21d7ca6-9390-57a4-bfec-76f6ce97ff4d", "id": "GHSA-mfg7-5gfp-c4w3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.122.Final-tuxcare.2 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:90294521-8a7c-585e-9eec-6911477d36aa", "id": "GHSA-v74w-7mr3-4qg3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.122.Final-tuxcare.2 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.122.Final-tuxcare.2" } ] } ], "dependencies": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.122.Final-tuxcare.2" } ] }