{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:523d3682-f2dd-59ef-be38-1ec9e145c30f", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.1", "type": "library", "group": "io.netty", "name": "netty-parent", "version": "4.1.130.Final-tuxcare.1", "purl": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.1" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:7441d593-d60b-54b0-85fb-6698a4440324", "id": "CVE-2025-55163", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-55163 does not affect version 4.1.130.Final-tuxcare.1 of io.netty:netty-parent. already_fixed \u2014 The target Netty 4.1.130.Final repository already contains the complete MadeYouReset (CVE-2025-55163) mitigation. The Http2MaxRstFrameLimitEncoder defense class is present, integrated into the HTTP/2 connection handler builder, and enabled by default for servers with a threshold of 200 RST_STREAM frames per 30-second window. All protocol-error-triggered RST writes route through the protected en..." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:5a6d10f7-0409-59ca-a6cb-3b585f658ccb", "id": "CVE-2026-33870", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33870 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:f75b8063-3552-5799-80ab-21edccd02854", "id": "CVE-2026-33871", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33871 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:037cbdc8-4e05-5cba-93eb-1d7ca43d3f89", "id": "CVE-2026-41417", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41417 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:fbabe06e-50b1-5e1a-9baf-9540e2bc3e63", "id": "CVE-2026-42578", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42578 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:8c2f38f6-04f7-5f5d-9b8b-36a3d0cfd5b7", "id": "CVE-2026-42579", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42579 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:07201a3d-58a8-5b93-839e-a0ff394ad057", "id": "CVE-2026-42580", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42580 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:78f60c0e-2312-5f3d-865b-9b0d9c82d86a", "id": "CVE-2026-42581", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42581 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:3755dea1-b28e-56ac-9d44-1f08667a3726", "id": "CVE-2026-42583", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42583 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:4b0fa900-2c10-5f8b-9015-72753dba7245", "id": "CVE-2026-42584", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42584 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:ec324866-5d15-5077-a0b4-5f59967d6154", "id": "CVE-2026-42585", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42585 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:d51d6aa6-4e51-5477-8a26-49b3e6f0ab87", "id": "CVE-2026-42586", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42586 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:50fb145f-ecb7-5e74-a698-cdc7f6bcc4fe", "id": "CVE-2026-42587", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42587 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:79eb4203-3eb4-5a27-8a3d-d3dd5a1e614a", "id": "CVE-2026-44248", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44248 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:6d3582f4-2e81-58d2-bc81-71207e313d35", "id": "CVE-2026-44249", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44249 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:3ef9405a-3d10-5e37-856a-272dc9bb2533", "id": "CVE-2026-44250", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44250 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:d92fc9a4-5fd0-536f-92dd-84bfb3481fa7", "id": "CVE-2026-44890", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:d9b8e2d7-95dc-5012-a962-5bdc5b96c400", "id": "CVE-2026-44891", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44891 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:444b5986-dfec-5d99-8838-6d6196f3ad6a", "id": "CVE-2026-44893", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44893 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:6fdb6908-6883-53d8-b56e-34afded0c773", "id": "CVE-2026-45416", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45416 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:734d0ead-3cbf-5073-96e8-75c164cf60a8", "id": "CVE-2026-45536", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45536 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:652e6b5b-4be1-5832-b4b7-ef8441d5b986", "id": "CVE-2026-45673", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45673 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:5bdb3954-037d-5710-be97-9156504ef4d3", "id": "CVE-2026-45674", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45674 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:536e7e81-fca4-5e56-b290-76c273192143", "id": "CVE-2026-46340", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-46340 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:6c73556b-d02c-5d26-879a-701ba3e919f5", "id": "CVE-2026-47244", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47244 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:7cbe7da8-6151-577f-98e6-5c0640b4888f", "id": "CVE-2026-47691", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47691 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:d0308538-6897-5e21-959e-43c03fc47e06", "id": "CVE-2026-48006", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-48006 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:c3f75ac4-2631-5f87-a74f-c1099989464e", "id": "CVE-2026-48043", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48043 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:978de9c3-4ba0-5e42-b90f-d568a9abefc6", "id": "CVE-2026-48059", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48059 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:e490213d-84d9-53db-999a-cf620317733f", "id": "CVE-2026-50010", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50010 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:2d8eb674-7420-57ed-9c22-199c82ed2c3d", "id": "CVE-2026-50011", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-50011 does not affect version 4.1.130.Final-tuxcare.1 of io.netty:netty-parent. Patches already applied: bff98ee51b5d0b7ee25fd5005f2169f2a0467efa (already in target via d5b4e38845f5 'Backport CVE-2026-44890 to 4.1.130.Final')" }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:50ec1645-f6e7-5471-bf84-1ecb1932334c", "id": "CVE-2026-50020", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50020 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:f82fbe89-3caa-5eb9-b6e3-66d7b98b372b", "id": "CVE-2026-50560", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:cd6542f1-89ef-5fab-8ff2-3f2aeee407a7", "id": "CVE-2026-55831", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55831 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:22d36cbb-81c7-5fe1-ba25-d10156ec640b", "id": "CVE-2026-55833", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55833 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:24b61a3c-62e7-50c1-b5d9-6d1ceb24c1ac", "id": "CVE-2026-55851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55851 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:8fda4f31-e1fc-5d09-ac2e-ad079191acd9", "id": "CVE-2026-56745", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56745 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:cf074fdd-d5ac-5e4b-9b7c-7fbc322a6282", "id": "CVE-2026-56746", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56746 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:94801f2e-ac8a-5f09-9eee-a2c717eadeef", "id": "CVE-2026-56817", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56817 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:eaf542f7-00ae-5ce4-8c70-57e370852cc9", "id": "CVE-2026-56818", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56818 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:a5ed8100-8fe6-5a4f-ae0c-e78c11f1d7e8", "id": "CVE-2026-56819", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56819 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:e9a02c42-021f-545b-943b-fcaf8a734f64", "id": "CVE-2026-56820", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56820 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:022c761f-0cbd-5394-a197-612f2a499955", "id": "CVE-2026-56821", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56821 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:45d4c2be-e482-5533-bf93-248559f61e3e", "id": "CVE-2026-56822", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56822 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:1c4d9756-63dc-51e5-b510-5915bd4be4e2", "id": "CVE-2026-59898", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59898 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:4872f39c-e89c-5bc5-a73b-84c2c33668e0", "id": "CVE-2026-59899", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59899 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:6f6f3305-ca47-53aa-8089-668714a4461b", "id": "CVE-2026-59900", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59900 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:2b2e6481-a1f5-532b-aa3a-a1876077a248", "id": "CVE-2026-59901", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59901 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:8de202f5-09e2-58ea-a541-490558f36a80", "id": "CVE-2026-59902", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59902 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:42c52743-1909-5b1e-b098-a0f318680833", "id": "CVE-2026-59903", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59903 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:1935aea7-c05c-569a-bfae-4bf88b3945ad", "id": "CVE-2026-59919", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59919 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:0197dc6e-7642-51c8-88f3-64e3a4795319", "id": "CVE-2026-59920", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59920 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:cad28fc3-9ef2-5ebf-bc72-850f5f8c42aa", "id": "CVE-2026-59921", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59921 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:e75b9142-9fb3-5026-9996-25623bfeab53", "id": "CVE-2026-73507", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-73507 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:801f0c89-d601-515b-9d21-7d5ccfe9544b", "id": "CVE-2026-73508", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-73508 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:91e24fee-0357-55bb-ad44-ea7605a9a720", "id": "GHSA-mfg7-5gfp-c4w3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:8122f5ad-8622-5af5-b3cb-3133a3f7d6ea", "id": "GHSA-v74w-7mr3-4qg3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.1" } ] } ], "dependencies": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.1" } ] }