{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:70215c45-f64c-58d5-89bf-f25c2e8dc2aa",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.3",
      "type": "library",
      "group": "io.netty",
      "name": "netty-parent",
      "version": "4.1.130.Final-tuxcare.3",
      "purl": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.3"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:d7a116ab-e2dd-51b9-9d10-22d96caf509f",
      "id": "CVE-2025-55163",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2025-55163 does not affect version 4.1.130.Final-tuxcare.3 of io.netty:netty-parent. already_fixed \u2014 The target Netty 4.1.130.Final repository already contains the complete MadeYouReset (CVE-2025-55163) mitigation. The Http2MaxRstFrameLimitEncoder defense class is present, integrated into the HTTP/2 connection handler builder, and enabled by default for servers with a threshold of 200 RST_STREAM frames per 30-second window. All protocol-error-triggered RST writes route through the protected en..."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1a554537-02f3-5c22-8f3b-22029c04547f",
      "id": "CVE-2026-33870",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33870 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:782c38df-0e0d-5c36-9b23-61113370bd0e",
      "id": "CVE-2026-33871",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-33871 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b10ff741-f23d-55bb-84dc-44e6e789b748",
      "id": "CVE-2026-41417",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41417 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:17a51b3e-0aec-54c2-8ae0-c7611e56667f",
      "id": "CVE-2026-42578",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42578 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:aeb9680e-5082-5770-b2b0-c7adfaaaf7be",
      "id": "CVE-2026-42579",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42579 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c8ab78d8-ad02-55c9-9d32-e5ffed71ad92",
      "id": "CVE-2026-42580",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42580 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7acf86c3-65e0-56aa-a823-0c4cd347fbc9",
      "id": "CVE-2026-42581",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42581 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cecbecba-b870-5faf-9d93-bc8ebce5375d",
      "id": "CVE-2026-42583",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42583 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b4ac57a7-f7d0-5027-9032-13cd915b3a31",
      "id": "CVE-2026-42584",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42584 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7f6f5a9b-be44-55cc-a3e9-5bfe3eb5ea32",
      "id": "CVE-2026-42585",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42585 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:22c7d31c-b93f-5321-b996-a42aa4569c12",
      "id": "CVE-2026-42586",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42586 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b7b25ca6-4129-557e-8118-9158cddf139a",
      "id": "CVE-2026-42587",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42587 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d3bd0abc-7530-547a-823b-cef785ce1e10",
      "id": "CVE-2026-44248",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44248 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a801bb88-36d9-5585-b656-3f679ca086cb",
      "id": "CVE-2026-44249",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44249 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:160a5719-af12-5a57-bd62-d8e25e2da509",
      "id": "CVE-2026-44250",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44250 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1f229436-4714-54cc-b80f-0c4949a14aa2",
      "id": "CVE-2026-44890",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f56aa212-f4d8-5b71-9afa-a6e4109d5fc4",
      "id": "CVE-2026-44891",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44891 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:733a4fdb-16ba-565b-9959-4ba4d4c3d768",
      "id": "CVE-2026-44893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44893 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b251945c-7fe5-5e09-86e0-c8d29626f6fa",
      "id": "CVE-2026-45416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45416 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e3d68a25-5600-558a-8ce2-f532fdf00702",
      "id": "CVE-2026-45536",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45536 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c1152fd1-3efe-5c2b-b777-433e4073f123",
      "id": "CVE-2026-45673",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-45673 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fa2ffa20-5725-549b-a971-38a353a03923",
      "id": "CVE-2026-45674",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-45674 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f1a2a84b-9d55-58fc-b19e-4db1c3b9a082",
      "id": "CVE-2026-46340",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-46340 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:30ca975c-b11d-5701-bb56-58e96ca9ffba",
      "id": "CVE-2026-47244",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47244 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ec08c551-8eca-5869-81b4-5c34d0ed0f7c",
      "id": "CVE-2026-47691",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47691 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ece8be22-8a71-569f-aecc-d19dcd963113",
      "id": "CVE-2026-48006",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-48006 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:96e4b7da-985d-5ffc-90bd-65160d5bad90",
      "id": "CVE-2026-48043",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-48043 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:178def80-cd0f-5331-b46c-7880626ca32c",
      "id": "CVE-2026-48059",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-48059 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f83d9a57-166a-5e72-8164-afb237c9ae8d",
      "id": "CVE-2026-50010",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50010 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c0a260dc-a040-59ec-9482-9a0677faef75",
      "id": "CVE-2026-50011",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-50011 does not affect version 4.1.130.Final-tuxcare.3 of io.netty:netty-parent. Patches already applied: bff98ee51b5d0b7ee25fd5005f2169f2a0467efa (already in target via d5b4e38845f5 'Backport CVE-2026-44890 to 4.1.130.Final')"
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8b254296-2ef3-53a3-b887-21918c3b809d",
      "id": "CVE-2026-50020",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50020 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:78c78fd4-0e59-5dfd-871b-4044c04309cd",
      "id": "CVE-2026-50560",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c4cac695-f328-500e-9fd4-8a4347132407",
      "id": "CVE-2026-55831",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-55831 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d96d5e3c-40b9-5dff-9600-fce8605bb9c1",
      "id": "CVE-2026-55833",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-55833 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:33f87eff-791e-56f3-8703-5f357a85e110",
      "id": "CVE-2026-55851",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-55851 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9734f197-7f78-5c59-bb5c-1d4811cc6eae",
      "id": "CVE-2026-56745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-56745 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:54d24088-e233-5313-ad76-205c658eee4a",
      "id": "CVE-2026-56746",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-56746 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1602cd6e-d387-565f-ad81-ab10e032dea1",
      "id": "CVE-2026-56817",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-56817 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:683901e8-f6c0-5fe1-9b61-d53941980908",
      "id": "CVE-2026-56818",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-56818 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1d0a2397-e2b3-5918-8468-4e03209f7116",
      "id": "CVE-2026-56819",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-56819 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9297315c-c748-52e7-8dee-3c2d9dd3d844",
      "id": "CVE-2026-56820",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-56820 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:082dbc96-ec78-5abc-a454-2244c4ad4dfb",
      "id": "CVE-2026-56821",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-56821 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ca55f86d-3944-5223-8b21-d3547dd958b1",
      "id": "CVE-2026-56822",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-56822 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:683719a7-4026-51eb-b525-9c95a48c7566",
      "id": "CVE-2026-59898",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59898 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:499c0e74-5f75-559d-bcd3-520e410c6743",
      "id": "CVE-2026-59899",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59899 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1d1d38a5-7c42-5263-bc8f-7fd03492e9a7",
      "id": "CVE-2026-59900",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59900 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2cf76f60-c7b4-5b95-9304-076648107d42",
      "id": "CVE-2026-59901",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59901 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:63853005-fe0b-5cd3-97e9-8e7ccfb5bf39",
      "id": "CVE-2026-59902",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59902 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3ffc9f2f-2456-56f6-8771-7dc273998d55",
      "id": "CVE-2026-59903",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59903 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:da305ca2-1339-557b-b38d-f5f75d812fc6",
      "id": "CVE-2026-59919",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59919 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:78554c06-5126-56ca-b328-c9a669660a05",
      "id": "CVE-2026-59920",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59920 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b7c481df-6df0-57d0-87a1-6fee373cd666",
      "id": "CVE-2026-59921",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59921 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4496cb4d-1ed3-5701-9af2-f459d142015b",
      "id": "CVE-2026-73507",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-73507 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:50437345-6de3-5887-88f0-f59f00b15725",
      "id": "CVE-2026-73508",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-73508 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5231c6d4-6ffb-5675-9671-6255c975caca",
      "id": "GHSA-mfg7-5gfp-c4w3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:76891a6a-cf17-5373-95a5-e1c3a16bbd30",
      "id": "GHSA-v74w-7mr3-4qg3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.3"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.3"
    }
  ]
}