{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:90707ca6-c98e-556d-baf5-56c6bc6f9525",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.73.Final-tuxcare.4",
      "type": "library",
      "group": "io.netty",
      "name": "netty-resolver-dns",
      "version": "4.1.73.Final-tuxcare.4",
      "purl": "pkg:maven/io.netty/netty-resolver-dns@4.1.73.Final-tuxcare.4"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:b976cc0a-bbf0-5374-921e-a5b4e2004a08",
      "id": "CVE-2022-24823",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-24823 is fixed in version 4.1.73.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:525cfc91-a0ba-53de-934e-12fe41181c3e",
      "id": "CVE-2022-41881",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-41881 is fixed in version 4.1.73.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cf9d092d-0d1a-5eb2-a6c9-411446d793a3",
      "id": "CVE-2022-41915",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-41915 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:15324e03-1ca4-5aec-973a-a6e9d6703a1a",
      "id": "CVE-2023-34462",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-34462 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:84c6e1a3-7092-56b3-a078-740d377af074",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-44487 is fixed in version 4.1.73.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e3989763-41fa-50e3-9e75-cb0f5fc9c182",
      "id": "CVE-2023-4586",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2023-4586 is a false positive for io.netty:netty-resolver-dns 4.1.73.Final-tuxcare.4."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:575ea9ce-34ea-51c5-af47-cc44b1b9d504",
      "id": "CVE-2024-29025",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-29025 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:de53321b-5278-5e6d-be1a-8a6c66a58ce8",
      "id": "CVE-2024-47535",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-47535 is fixed in version 4.1.73.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:99f15dd0-9282-5ec4-a47a-24906a2df627",
      "id": "CVE-2025-24970",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-24970 is fixed in version 4.1.73.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9b342b7d-c622-5fb6-8c01-891f5adb19af",
      "id": "CVE-2025-25193",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-25193 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d9f06266-5806-55fd-bab0-fd30a9e8f600",
      "id": "CVE-2025-55163",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-55163 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:41cc44d2-f46c-5091-9b64-8c1fca810158",
      "id": "CVE-2025-58056",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58056 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f4fa8789-2813-534c-a754-7e9218a8d3c0",
      "id": "CVE-2025-58057",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58057 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b5bc46f7-d520-57e1-8b53-9501ca980082",
      "id": "CVE-2025-59419",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-59419 is fixed in version 4.1.73.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:de2a665b-dbb2-5b17-ae3f-a9a7372475e8",
      "id": "CVE-2025-67735",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-67735 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b8aa4ec5-c8ca-5930-b5c9-3c4af3a7d102",
      "id": "CVE-2026-33870",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33870 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:600c7392-ae92-58a2-847b-de3e574fb1ed",
      "id": "CVE-2026-33871",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33871 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7bfa46ee-4c2b-5260-9e63-ebd3f49d309e",
      "id": "CVE-2026-41417",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41417 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:701ec9a4-ac64-53da-b4ad-d0d2dff2720a",
      "id": "CVE-2026-42577",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42577 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:16e97c47-074f-51e7-99dd-45c29bb67dfb",
      "id": "CVE-2026-42578",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42578 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:191693ee-e78e-5df4-93a0-fd5690f95b81",
      "id": "CVE-2026-42579",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42579 is fixed in version 4.1.73.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:561be21a-7ee5-5ba6-8dc5-907d5a6a8560",
      "id": "CVE-2026-42580",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42580 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0acb81d7-6cfb-5295-97ea-bedcb2ff60bf",
      "id": "CVE-2026-42581",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42581 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:67067a65-0b72-52f3-bf71-15f0cfd04fec",
      "id": "CVE-2026-42583",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42583 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2af1f5df-668e-5792-ac31-5d3f579aefb2",
      "id": "CVE-2026-42584",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42584 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:182dec13-4cc4-5969-a7ef-0e0fb5371ffd",
      "id": "CVE-2026-42585",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42585 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:49d2b8aa-2f0b-5ba7-ae9b-0dc714603854",
      "id": "CVE-2026-42586",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42586 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0917aa0a-e3fb-5a08-b557-e231faadaadc",
      "id": "CVE-2026-42587",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42587 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6a1e55c9-0359-5093-8b29-278b7f3ce326",
      "id": "CVE-2026-44248",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44248 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b6a513d4-2950-5eb0-9c96-6eb3220459a3",
      "id": "CVE-2026-44249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44249 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:de7f7877-6c72-5119-9d5a-dffab6d0d2c2",
      "id": "CVE-2026-44250",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44250 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cd5a5936-f299-5be7-801d-80094ee5557d",
      "id": "CVE-2026-44890",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.73.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0ec4b40e-e676-5bd9-8d5a-a1ad90c437c8",
      "id": "CVE-2026-44891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44891 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7bd78be0-a58c-505f-9f84-4cc13ceb6987",
      "id": "CVE-2026-44893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44893 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0992e5fb-2333-5113-b899-07c92f0e6d2b",
      "id": "CVE-2026-45416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45416 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dd404693-c3d3-5235-9a64-33675c59aa9e",
      "id": "CVE-2026-45536",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45536 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ea7fc532-28d6-503b-bb50-3a5de18f5696",
      "id": "CVE-2026-45673",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45673 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e1b6429f-22a1-541a-bbd3-c5f6de9db4b6",
      "id": "CVE-2026-45674",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-45674 is fixed in version 4.1.73.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:99f90142-88e0-5264-bc14-5e5035fea6ae",
      "id": "CVE-2026-46340",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-46340 is fixed in version 4.1.73.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:93e3eb57-0105-5cfd-8bf4-a606d19b0a36",
      "id": "CVE-2026-47244",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47244 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c9840dfb-fae2-5dfb-b90e-aafb688be9d1",
      "id": "CVE-2026-47691",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47691 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5230faac-f357-51fb-b529-a89c0288f505",
      "id": "CVE-2026-48006",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48006 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:15946655-c5c7-5ad6-a770-e5f22d1c23b4",
      "id": "CVE-2026-48043",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-48043 does not affect version 4.1.73.Final-tuxcare.4 of io.netty:netty-resolver-dns. not_affected \u2014 Version 4.1.73 is not affected by CVE-2026-48043. The target uses a loop-based architecture with try-finally protection (introduced in 2016) that prevents the buffer leak described in the CVE. The vulnerable ChannelInboundHandlerAdapter pattern that the upstream patch fixes does not exist in this version."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1b63e402-60df-5eb0-b115-12494d9cfe77",
      "id": "CVE-2026-48059",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48059 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a3ec4d50-0633-592c-b1c3-fb032a140c1b",
      "id": "CVE-2026-50010",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50010 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4b7ca469-c64e-5999-89ba-2eb2d66de2d6",
      "id": "CVE-2026-50011",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50011 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6821a8d5-2989-5990-9f02-737d3db5616d",
      "id": "CVE-2026-50020",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50020 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:361917c0-8920-5171-8a4e-1d1f99f20d03",
      "id": "CVE-2026-50560",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.73.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ce20ae9d-f037-5005-9b18-941cc243a5c0",
      "id": "CVE-2026-55831",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55831 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:23290e5c-24fd-5a06-ac4a-a0eebc4698e8",
      "id": "CVE-2026-55833",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55833 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:76764920-39ce-59f3-aa0d-4cec0104946f",
      "id": "CVE-2026-55851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55851 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:aa801764-2b07-59df-9058-de69b0ca97d6",
      "id": "CVE-2026-56745",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56745 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:22561a4e-bef5-598a-a15c-056fc8c6e2d8",
      "id": "CVE-2026-56746",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56746 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2b6524ad-6613-53c8-9049-179a9302e540",
      "id": "CVE-2026-56817",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56817 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2c5d828f-b7a1-51c7-91be-9e5449e94edb",
      "id": "CVE-2026-56818",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-56818 does not affect version 4.1.73.Final-tuxcare.4 of io.netty:netty-resolver-dns. not_affected \u2014 The target version 4.1.73.Final-tuxcare.2 is NOT AFFECTED by CVE-2026-56818. The vulnerable code pattern (configurable `maxElements` limit check without cleanup, contrasting with `maxNestedArrayDepth` limit check WITH cleanup) was introduced in version 4.1.135.Final through commits e51c64c964 and 728c98b8ec (dated 2026-06-01/02). The target version predates these features entirely and does not ..."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:283ff422-cfc7-566b-95f9-41a7a2eeb4d6",
      "id": "CVE-2026-56819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56819 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b935ed71-0578-5689-9c44-c7511baaf82f",
      "id": "CVE-2026-59898",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59898 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:29889fc3-628d-5d3d-a655-57274b8c3690",
      "id": "CVE-2026-59899",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59899 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a4ca3444-e317-5255-966f-ee3c004317d9",
      "id": "CVE-2026-59900",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59900 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0ca6f484-be50-5c9b-a522-7f72e1dca8c3",
      "id": "CVE-2026-59901",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59901 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d6302f10-e0db-5f20-add3-08787ec74def",
      "id": "CVE-2026-59902",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59902 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:69673f8b-c9cb-5b42-b122-64470dd7ebc0",
      "id": "CVE-2026-59903",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59903 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:775d9c76-6a2b-5ebc-9333-0c8a5885cdc9",
      "id": "CVE-2026-59919",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59919 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ef1f1549-9df8-556d-a78e-801d5d107e6a",
      "id": "CVE-2026-59920",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59920 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b39e0245-1582-5297-aa65-2d50dca58288",
      "id": "CVE-2026-59921",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59921 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3ef9404d-9b15-57a2-bedf-27dd071a0b64",
      "id": "CVE-2026-73507",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-73507 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:db9f4881-11f5-5f09-a042-a75c59935f81",
      "id": "CVE-2026-73508",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-73508 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:25ed6bd5-a4de-593e-9d26-00ea14013828",
      "id": "GHSA-mfg7-5gfp-c4w3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b0bb9ae2-0b2c-50bc-b382-453ae45ae1b4",
      "id": "GHSA-v74w-7mr3-4qg3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:082b32f1-3965-5b59-b32d-36ad8cb28c00",
      "id": "GHSA-xpw8-rcwv-8f8p",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-xpw8-rcwv-8f8p affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-resolver-dns."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.73.Final-tuxcare.4"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.73.Final-tuxcare.4"
    }
  ]
}