{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:ced89213-279c-5e39-8abe-bbc14cd9bab5", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/io.netty/netty-parent@4.1.63.Final-tuxcare.5", "type": "library", "group": "io.netty", "name": "netty-parent", "version": "4.1.63.Final-tuxcare.5", "purl": "pkg:maven/io.netty/netty-parent@4.1.63.Final-tuxcare.5" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:af0407dd-5a15-5a87-b117-ae3fafea5f4d", "id": "CVE-2021-37136", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-37136 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:6eb9bb56-b653-55f5-8805-2092ae6eafac", "id": "CVE-2021-37137", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-37137 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:cb38d085-f116-5a27-aaee-b5c541c3140c", "id": "CVE-2021-43797", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-43797 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:06c16016-080f-5a13-90cc-e1188a38c639", "id": "CVE-2022-24823", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-24823 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:bc1cb3be-37a4-591a-ba1c-c5561cb7f154", "id": "CVE-2022-41881", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-41881 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:6714ff0c-97a0-5bf3-afb3-ed9750fe0f13", "id": "CVE-2022-41915", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-41915 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:8df42360-86d7-5680-bda1-6a9600d517e3", "id": "CVE-2023-34462", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-34462 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:1fe72b90-550b-5dc4-ba58-01a03bca3426", "id": "CVE-2023-44487", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-44487 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:8d9bc62f-33d1-5676-b87c-8833339bece2", "id": "CVE-2023-4586", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2023-4586 is a false positive for io.netty:netty-parent 4.1.63.Final-tuxcare.5." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:bb48cc78-ebb7-566f-8ac0-bc2c6fcc1cba", "id": "CVE-2024-29025", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-29025 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:d40ed534-4a7b-5524-be64-0d1332d01f9e", "id": "CVE-2024-47535", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-47535 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:c3209845-0e0c-5800-88d5-31f9f78758ee", "id": "CVE-2025-24970", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-24970 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:ac924bca-7b30-553b-90c9-4ed99efb359b", "id": "CVE-2025-25193", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-25193 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:3abb4f42-36ba-5a83-a527-47ef2315e592", "id": "CVE-2025-55163", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55163 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:3730c882-ddd5-5b6d-9aeb-ab312f91d010", "id": "CVE-2025-58056", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-58056 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:3fb57789-4644-526b-857e-85eb489e0731", "id": "CVE-2025-58057", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-58057 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:d8324a93-e034-506b-8e7a-519b2a25d8e1", "id": "CVE-2025-59419", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59419 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:f85d0da6-e2a7-51e5-acc3-47681e81312b", "id": "CVE-2025-67735", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-67735 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:a67963b1-de81-5c62-b361-81906cb8ed4b", "id": "CVE-2026-33870", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33870 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:7304753a-8e24-5a76-84a3-0be8d1a1ae20", "id": "CVE-2026-33871", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33871 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:8767ccf3-94fc-5b7d-8c74-eb8d188ff4d9", "id": "CVE-2026-41417", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41417 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:4b323f57-01f2-5cd3-a53c-ec36b4c5729b", "id": "CVE-2026-42577", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42577 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:8f1c761a-0420-53fd-b9ab-0f174dae1491", "id": "CVE-2026-42578", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42578 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:e561aef0-6317-54e4-bf63-c625f9893c6e", "id": "CVE-2026-42579", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42579 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:c9bc753f-353d-5448-af55-eeba78f7c13b", "id": "CVE-2026-42580", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42580 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:a8e835c2-c1d1-58d7-b6bd-ec63281c16e8", "id": "CVE-2026-42581", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42581 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:cb79e2fd-6296-5211-9359-e990d8e45805", "id": "CVE-2026-42583", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42583 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:3be028f0-6360-5381-8ef1-23d73c7842c6", "id": "CVE-2026-42584", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42584 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:5b5c7544-5155-5459-9cdd-4cf34e7463ec", "id": "CVE-2026-42585", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42585 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:3773ab74-3a85-5d31-a326-3d677c9d21a9", "id": "CVE-2026-42586", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42586 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:098e1cf5-7a3c-5e1c-ab78-5bfacc76b997", "id": "CVE-2026-42587", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42587 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:dcb0fa5d-3194-5e95-9dd3-546d41e7cae0", "id": "CVE-2026-44248", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44248 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:81055184-b85e-5ada-b32d-0a5aab4cd321", "id": "CVE-2026-44249", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44249 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:0126e4c1-3a61-5215-b404-be115752e5cb", "id": "CVE-2026-44250", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44250 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:5931fd28-0f76-5083-84a3-7bba24871bc1", "id": "CVE-2026-44890", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:d9ef4eeb-fcb0-58c4-a7a5-32caee8ebee9", "id": "CVE-2026-44891", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44891 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:d954bebd-a706-5799-8fc1-de99e1fc8adf", "id": "CVE-2026-44893", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44893 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:62855634-73ee-59d6-bf82-c9fd0b732fa1", "id": "CVE-2026-45416", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45416 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:b1b7a4b2-3b71-580c-a6ad-a9ec6e621aed", "id": "CVE-2026-45536", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45536 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:50f38875-07a7-5b8f-8bed-a809b14bb7d9", "id": "CVE-2026-45673", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45673 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:1911ee8a-43d2-5a26-a3c8-e8a97ec8e2c3", "id": "CVE-2026-45674", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-45674 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:659e9a32-867f-5fcc-b59b-bc28563d0d7c", "id": "CVE-2026-46340", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-46340 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:d4a28bc3-cb03-5ab6-a311-031d4cc74879", "id": "CVE-2026-47244", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47244 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:de0ef9c7-02f8-59a7-9861-018390035569", "id": "CVE-2026-47691", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47691 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:5c1c8827-f855-5756-b6d9-0828dd1962e4", "id": "CVE-2026-48006", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-48006 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:9e372c1e-4a95-541a-80eb-097729d72d91", "id": "CVE-2026-48043", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48043 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:abe9ce70-bac3-58f8-a809-4dafb59d4ab9", "id": "CVE-2026-48059", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-48059 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:6dea99ec-d060-5581-8d16-32d58c136b1a", "id": "CVE-2026-50010", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50010 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:9f7d313c-bf00-5162-8b6c-534db913d67e", "id": "CVE-2026-50011", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50011 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:f92c1b3f-a3b1-5be8-bc32-6ed3ec9aa929", "id": "CVE-2026-50020", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50020 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:4999475c-b474-5357-a081-1dcad65906a1", "id": "CVE-2026-50560", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:c620bb1d-ddfd-544a-ba1e-246db053b096", "id": "CVE-2026-55831", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55831 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:c0989627-0c4c-514a-8d60-3cb4998b86c3", "id": "CVE-2026-55833", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55833 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:c3a443e8-9c68-5de7-bdbe-b58efa3e10ab", "id": "CVE-2026-55851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55851 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:4b4d3bf2-3db4-5fa6-8bf4-38230ebc9b37", "id": "CVE-2026-56745", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56745 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:97c80bf5-ef02-5ef7-ac26-57dff7ce1fc4", "id": "CVE-2026-56746", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56746 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:43a83212-7d38-5a0b-99fc-edaf94c2a508", "id": "CVE-2026-56817", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-56817 does not affect version 4.1.63.Final-tuxcare.5 of io.netty:netty-parent. not_affected \u2014 The Netty codec-xml module contains XmlDecoder, which instantiates an Aalto XML parser without security configuration (line 38: new InputFactoryImpl() with no XXE protection). However, this is a library component that Netty itself does not use in its own production code. The vulnerability only manifests when downstream applications explicitly add XmlDecoder to their Netty channel pipelines. Per..." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:8aeec6a3-4eb0-52df-9f31-c8bb2bdcf515", "id": "CVE-2026-56818", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56818 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:76dfb618-62bc-59ad-a0d3-91c6894800fe", "id": "CVE-2026-56819", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56819 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:61909287-3a65-53e5-8cac-6170afc05e1e", "id": "CVE-2026-59898", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59898 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:644603c9-938a-5567-b597-a40c3606cd0a", "id": "CVE-2026-59899", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59899 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:a6dfb56c-9f73-544e-b710-4d545890f80f", "id": "CVE-2026-59900", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59900 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:21fdc2cd-43c0-55bf-a684-51dd3efaa594", "id": "CVE-2026-59901", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59901 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:3f9c57aa-fee3-5ca1-a78e-69b8a4c3f84f", "id": "CVE-2026-59902", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59902 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:cfd8812a-5318-5d57-87f8-7289e0028228", "id": "CVE-2026-59903", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59903 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:9ad2c953-2fdc-50e2-aada-036571c14b2b", "id": "CVE-2026-59919", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59919 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:bcba51ad-fb58-5a88-a543-e8c04d15f408", "id": "CVE-2026-59920", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59920 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:ebc843dd-0c2f-52ca-b5c1-bbca45041926", "id": "CVE-2026-59921", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59921 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:d3c2577e-9107-5b97-9dc2-f941609b2b06", "id": "CVE-2026-73507", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-73507 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:94330d10-0bcc-5510-9010-1f07fc8f2bee", "id": "CVE-2026-73508", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-73508 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:8115eac8-878a-596b-abe5-9b6c55c63c99", "id": "GHSA-mfg7-5gfp-c4w3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:c7bf69a6-a90f-5bb5-8697-28a4cb026212", "id": "GHSA-v74w-7mr3-4qg3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:e8375262-e47f-5dcd-ac18-273e1e5dfded", "id": "GHSA-xpw8-rcwv-8f8p", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-xpw8-rcwv-8f8p affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-parent." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.63.Final-tuxcare.5" } ] } ], "dependencies": [ { "ref": "pkg:maven/io.netty/netty-parent@4.1.63.Final-tuxcare.5" } ] }