{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:319e747c-c60d-599c-bf9f-30f2b499eb7f", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.2", "type": "library", "group": "io.netty", "name": "netty-parent", "version": "4.1.130.Final-tuxcare.2", "purl": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.2" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:ef08b200-5881-5921-ab5d-e9b657de1d9c", "id": "CVE-2025-55163", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-55163 does not affect version 4.1.130.Final-tuxcare.2 of io.netty:netty-parent. already_fixed \u2014 The target Netty 4.1.130.Final repository already contains the complete MadeYouReset (CVE-2025-55163) mitigation. The Http2MaxRstFrameLimitEncoder defense class is present, integrated into the HTTP/2 connection handler builder, and enabled by default for servers with a threshold of 200 RST_STREAM frames per 30-second window. All protocol-error-triggered RST writes route through the protected en..." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:09b4e689-e904-58d3-9770-eb31cb681473", "id": "CVE-2026-33870", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33870 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:e708d938-c1e2-50fa-8144-a8d13031b3e7", "id": "CVE-2026-33871", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33871 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:34de9d02-a150-5a6f-81e1-157cc9ee942a", "id": "CVE-2026-41417", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41417 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:7f3a94a8-c7cb-5012-a75a-0e3aecf438e3", "id": "CVE-2026-42578", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42578 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:744cfef8-f801-5521-b07c-4fb5880b20d9", "id": "CVE-2026-42579", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42579 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:6e95b600-2b36-5c24-90fc-fc037524c3cf", "id": "CVE-2026-42580", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42580 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:f4d59469-04aa-50c1-a980-36dec3d8980e", "id": "CVE-2026-42581", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42581 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:f946a536-e666-523f-b955-4e93898fa767", "id": "CVE-2026-42583", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42583 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:f9f8f071-f03e-5b39-97f9-d58b1e906912", "id": "CVE-2026-42584", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42584 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:22903c97-8db7-5f04-a4b9-b7faa03d856c", "id": "CVE-2026-42585", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42585 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:57c51b81-39c1-5f3e-89ac-0e2c1b7b677f", "id": "CVE-2026-42586", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42586 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:e9fc0318-bda2-5ebf-b8f7-4b7e213855db", "id": "CVE-2026-42587", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42587 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:5c3c8409-ce13-5080-b914-4478fbccc678", "id": "CVE-2026-44248", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44248 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:212ad51c-aed8-5623-9079-e5db46edf2b4", "id": "CVE-2026-44249", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44249 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:32f4155e-5dd9-5eba-85e8-5b88d81f92ff", "id": "CVE-2026-44250", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44250 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:7a298c7c-d3eb-5689-a0f1-1a1af62a8122", "id": "CVE-2026-44890", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:68bf102c-5be1-5669-b3ec-9d5ee465fdee", "id": "CVE-2026-44891", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44891 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:7abb39b8-ec16-5138-8584-98f93c617aef", "id": "CVE-2026-44893", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44893 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:b6a9b22d-4b6f-5836-b6b5-ada2a094c513", "id": "CVE-2026-45416", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45416 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:5b08aaf3-96be-501c-be2f-bb0af5bb232b", "id": "CVE-2026-45536", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45536 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:0a3713ca-9e43-5d8f-9a42-188838c23d58", "id": "CVE-2026-45673", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-45673 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:2520c33f-beab-5940-9883-6a8639ae3090", "id": "CVE-2026-45674", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-45674 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:f20de3c6-128e-5996-9bcb-fe5dde63732f", "id": "CVE-2026-46340", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46340 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:cdbf64ea-f605-54e8-af2d-e8b7836ee245", "id": "CVE-2026-47244", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47244 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:f9af4aba-11a7-557c-ab19-50b82d0748a6", "id": "CVE-2026-47691", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47691 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:532ea9b1-c89e-543a-8979-af99c0b7e739", "id": "CVE-2026-48006", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48006 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:6544dedd-eb04-59a0-8040-70da67586aad", "id": "CVE-2026-48043", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48043 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:905aee04-497a-5d0b-82f1-a03afd0a7e13", "id": "CVE-2026-48059", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48059 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:6aa64945-2d68-5749-bc30-4b92d14b6266", "id": "CVE-2026-50010", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50010 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:911f363e-8d67-56ba-b74b-deddab6e6107", "id": "CVE-2026-50011", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-50011 does not affect version 4.1.130.Final-tuxcare.2 of io.netty:netty-parent. Patches already applied: bff98ee51b5d0b7ee25fd5005f2169f2a0467efa (already in target via d5b4e38845f5 'Backport CVE-2026-44890 to 4.1.130.Final')" }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:0b5baede-30ab-5fa3-bf08-e903f202a1b1", "id": "CVE-2026-50020", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50020 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:cf6e9ccb-5e63-5206-89fc-2960550553f2", "id": "CVE-2026-50560", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:df342532-d1a5-51cf-8872-e2807c56b098", "id": "CVE-2026-55831", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55831 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:173c7dad-763d-5f39-9b72-2cb94d4f519c", "id": "CVE-2026-55833", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55833 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:c78920ed-2269-5758-9a0a-3acf5f6a5f13", "id": "CVE-2026-55851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55851 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:f259ef8b-adf9-5b45-9622-2ef2835992c9", "id": "CVE-2026-56745", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56745 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:778bef26-ece0-59e6-bc8f-a875166658ff", "id": "CVE-2026-56746", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56746 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:1ae40eb4-178c-5f4d-9653-8347fb4d089b", "id": "CVE-2026-56817", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56817 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:64982c3b-11b2-562e-a939-6948fbf64936", "id": "CVE-2026-56818", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56818 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:837ca837-9efe-5b2b-b828-61bf86c22f93", "id": "CVE-2026-56819", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56819 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:9653505a-04cc-5257-a08d-a4a8492c8f63", "id": "CVE-2026-56820", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56820 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:5e5c43cf-6f92-5c73-bec8-c88a9d25c87e", "id": "CVE-2026-56821", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56821 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:e4349343-b842-5956-ad1e-4ba36497a0ad", "id": "CVE-2026-56822", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56822 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:50d70c2e-b7b1-57b0-a69e-707b5f6213db", "id": "CVE-2026-59898", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59898 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:0425a5bf-bebf-507e-a8cb-81a49e55b81d", "id": "CVE-2026-59899", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59899 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:82dbc3ba-8732-5314-866d-efc8d8f490ce", "id": "CVE-2026-59900", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59900 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:f16ed725-0d46-53e0-bc78-64053daf3ba6", "id": "CVE-2026-59901", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59901 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:4e88c60b-c073-5395-82b8-75b14949ea62", "id": "CVE-2026-59902", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59902 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:2b5b996d-e8cd-50b2-949f-340d24c065c0", "id": "CVE-2026-59903", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59903 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:92955381-0a74-5323-939e-41efc0a4f07a", "id": "CVE-2026-59919", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59919 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:99cc5672-df0d-5e0f-90e0-77e8f856c35f", "id": "CVE-2026-59920", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59920 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:52695bd8-23e4-563b-810e-3f83edd61a87", "id": "CVE-2026-59921", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59921 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:44a1a4ac-a470-5dc6-8245-62aeaa5801cb", "id": "CVE-2026-73507", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-73507 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:adbf2eba-8f21-59ea-9cee-43d95100f3e2", "id": "CVE-2026-73508", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-73508 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:9ca167b2-7e0b-56a7-a0bb-15d31c184565", "id": "GHSA-mfg7-5gfp-c4w3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:236854e9-4ce8-55e4-afb8-75e77f44bc9a", "id": "GHSA-v74w-7mr3-4qg3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.2" } ] } ], "dependencies": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.2" } ] }