{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:42b20276-9c49-5eca-acca-db88870f12db", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/io.netty/netty-resolver@4.1.63.Final-tuxcare.5", "type": "library", "group": "io.netty", "name": "netty-resolver", "version": "4.1.63.Final-tuxcare.5", "purl": "pkg:maven/io.netty/netty-resolver@4.1.63.Final-tuxcare.5" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:263cc994-f432-52a7-9bdf-8af8ba93def7", "id": "CVE-2021-37136", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-37136 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-resolver." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-resolver@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:9673e32a-f77d-5a65-9f3b-324bc8727ba1", "id": "CVE-2021-37137", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-37137 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-resolver." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-resolver@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:1d7bf44c-70e1-5a41-af71-239718ab2bca", "id": "CVE-2021-43797", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-43797 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-resolver." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-resolver@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:eed75474-dceb-524c-8a76-301d2cab9f83", "id": "CVE-2022-24823", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-24823 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-resolver." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-resolver@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:f2b274fb-cc36-5288-a9af-e69fd721c4ea", "id": "CVE-2022-41881", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-41881 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-resolver." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-resolver@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:f4acc727-16c7-59f4-8c93-b99791bcb3b3", "id": "CVE-2022-41915", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-41915 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-resolver." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-resolver@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:5d487218-91aa-5de3-8f2d-9078b8384588", "id": "CVE-2023-34462", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-34462 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-resolver." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-resolver@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:8d08bd37-2197-5d5c-a14a-6a3c19a8a016", "id": "CVE-2023-44487", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-44487 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-resolver." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-resolver@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:ac6de7ac-56b8-5807-9fc8-7bec44ed1a4f", "id": "CVE-2023-4586", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2023-4586 is a false positive for io.netty:netty-resolver 4.1.63.Final-tuxcare.5." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-resolver@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:75235cdd-8295-5b56-a73e-400925713f8c", "id": "CVE-2024-29025", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-29025 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-resolver." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-resolver@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:28c167c4-1a95-5bff-ac7a-7425983d1931", "id": "CVE-2024-47535", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-47535 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-resolver." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-resolver@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:11a92bfa-2671-5552-97e7-1ca7ec77c8b7", "id": "CVE-2025-24970", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-24970 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-resolver." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-resolver@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:5f3b2b8c-1e46-550b-b14e-124a2745a5bd", "id": "CVE-2025-25193", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-25193 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-resolver." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-resolver@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:d4409120-6e30-5e91-a05c-ba2ab1060908", "id": "CVE-2025-55163", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55163 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-resolver." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-resolver@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:f7a0c466-645b-5f36-9816-9cdde8bc2f80", "id": "CVE-2025-58056", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-58056 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-resolver." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-resolver@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:06f87e01-8f94-5994-b880-99d40621f5c9", "id": "CVE-2025-58057", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-58057 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-resolver." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-resolver@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:ad205242-3d7d-5f54-a612-e704dc98312a", "id": "CVE-2025-59419", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59419 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-resolver." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-resolver@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:5e283cd5-2ca0-54f3-ab2c-c19346af4ecd", "id": "CVE-2025-67735", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-67735 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-resolver." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-resolver@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:86c02ca5-9732-523b-8c83-dd918a20ca57", "id": "CVE-2026-33870", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33870 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-resolver." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-resolver@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:5e301c9d-2109-5c6d-a929-c80c06d0bc26", "id": "CVE-2026-33871", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33871 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-resolver." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-resolver@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:d9e7b300-a222-5d4e-ad9e-d5e2b5177ee8", "id": "CVE-2026-41417", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41417 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-resolver." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-resolver@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:51f102c7-4d0b-54ee-8af5-ca337d8e0c94", "id": "CVE-2026-42577", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42577 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-resolver." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-resolver@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:0b3713bb-919b-5891-8f2e-b0356580f336", "id": "CVE-2026-42578", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42578 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-resolver." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-resolver@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:59882b1a-4555-51d8-85a4-f92178d3cded", "id": "CVE-2026-42579", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42579 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-resolver." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-resolver@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:6ef62d4c-3f67-5144-89ed-630867e7ec05", "id": "CVE-2026-42580", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42580 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-resolver." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-resolver@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:14f6a62c-5eae-5c01-ae6d-0c3846470e11", "id": "CVE-2026-42581", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42581 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-resolver." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-resolver@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:f75cbb7d-e99b-509d-9612-53a55c38b8c4", "id": "CVE-2026-42583", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42583 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-resolver." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-resolver@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:6ce3366a-95bf-5cd1-ab5f-8f68b75225a0", "id": "CVE-2026-42584", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42584 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-resolver." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-resolver@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:4b0982a1-296e-5bdf-a5ec-81e32a2cc84d", "id": "CVE-2026-42585", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42585 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-resolver." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-resolver@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:b752d2bd-b295-5c04-8ec8-4528b54740ad", "id": "CVE-2026-42586", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42586 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-resolver." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-resolver@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:7a514861-6b98-5a6a-aa39-fa4719f9ca56", "id": "CVE-2026-42587", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42587 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-resolver." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-resolver@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:bdd439f0-9c54-59fd-ac48-48148d73ff67", "id": "CVE-2026-44248", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44248 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-resolver." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-resolver@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:33ecb6e5-a526-550d-a8ef-0b0ca82b3405", "id": "CVE-2026-44249", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44249 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-resolver." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-resolver@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:04f502b9-187c-5195-ad4c-a7418c1b051c", "id": "CVE-2026-44250", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44250 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-resolver." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-resolver@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:5a5eaa74-d962-52b6-a3f1-4b4f385b6d27", "id": "CVE-2026-44890", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-resolver." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-resolver@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:66361087-a4ab-5762-ab6f-8418e4454028", "id": "CVE-2026-44891", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44891 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-resolver." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-resolver@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:9842079d-72b1-5c7b-9c01-4e869374c204", "id": "CVE-2026-44893", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44893 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-resolver." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-resolver@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:9fe0385b-65c0-5b1c-8895-6c3c50f62d61", "id": "CVE-2026-45416", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45416 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-resolver." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-resolver@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:93a65944-93f3-5dd2-b3cb-465d7c4dc79d", "id": "CVE-2026-45536", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45536 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-resolver." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-resolver@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:779fa204-7897-5d79-8cf1-30943f4df201", "id": "CVE-2026-45673", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45673 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-resolver." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-resolver@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:09566169-0d85-5849-95bc-e61d4751baef", "id": "CVE-2026-45674", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-45674 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-resolver." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-resolver@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:e96b752d-30f6-51ee-9c92-04618ef85107", "id": "CVE-2026-46340", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-46340 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-resolver." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-resolver@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:ae86082a-9106-54d1-85b1-04c8a62d24fa", "id": "CVE-2026-47244", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47244 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-resolver." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-resolver@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:b9f269cd-eb55-5654-97c9-40669d8015a6", "id": "CVE-2026-47691", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47691 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-resolver." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-resolver@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:92b81630-eaf9-515b-98e6-38d94d48e25f", "id": "CVE-2026-48006", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-48006 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-resolver." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-resolver@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:249bde47-9641-58c1-ae2c-b74cd86031fc", "id": "CVE-2026-48043", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48043 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-resolver." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-resolver@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:41efe4ab-8967-5429-b7f9-c6e55cafd131", "id": "CVE-2026-48059", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-48059 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-resolver." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-resolver@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:2d102290-e0f3-533c-ba0d-8a9fbd44cdef", "id": "CVE-2026-50010", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50010 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-resolver." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-resolver@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:a8553279-442f-50cb-8dc1-467a1a26b4fb", "id": "CVE-2026-50011", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50011 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-resolver." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-resolver@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:aec6a615-4edf-5d63-9f50-1dae41433c43", "id": "CVE-2026-50020", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50020 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-resolver." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-resolver@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:5b9bf31c-b99b-5f97-a9cc-15ba013f00fd", "id": "CVE-2026-50560", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-resolver." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-resolver@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:0c3c1397-8ce1-5fe8-8459-48ae578f9e08", "id": "CVE-2026-55831", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55831 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-resolver." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-resolver@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:4b1a464f-5715-50ba-81bd-6aed58161514", "id": "CVE-2026-55833", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55833 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-resolver." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-resolver@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:ff92b0eb-e376-5c3e-8781-e6eef03df6f9", "id": "CVE-2026-55851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55851 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-resolver." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-resolver@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:500ec103-96a1-5453-8c99-f210cc92d9bf", "id": "CVE-2026-56745", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56745 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-resolver." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-resolver@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:1f91958d-d417-5a33-bc77-4551aa037e04", "id": "CVE-2026-56746", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56746 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-resolver." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-resolver@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:22fcb76d-8de0-5cb2-9f27-1017bb56db96", "id": "CVE-2026-56817", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-56817 does not affect version 4.1.63.Final-tuxcare.5 of io.netty:netty-resolver. not_affected \u2014 The Netty codec-xml module contains XmlDecoder, which instantiates an Aalto XML parser without security configuration (line 38: new InputFactoryImpl() with no XXE protection). However, this is a library component that Netty itself does not use in its own production code. The vulnerability only manifests when downstream applications explicitly add XmlDecoder to their Netty channel pipelines. Per..." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-resolver@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:2ca8714b-b22f-5555-aaff-8995c42ec5ed", "id": "CVE-2026-56818", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56818 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-resolver." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-resolver@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:8fa73f18-5863-55d6-ab23-98c71a420f07", "id": "CVE-2026-56819", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56819 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-resolver." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-resolver@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:bd0a24fc-3420-5dba-9445-35636216f405", "id": "CVE-2026-59898", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59898 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-resolver." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-resolver@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:8a9cef7f-34a7-5bf3-92fd-87e5544c1083", "id": "CVE-2026-59899", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59899 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-resolver." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-resolver@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:9f1700b5-4961-5319-bdb4-4bf4d7eeba89", "id": "CVE-2026-59900", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59900 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-resolver." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-resolver@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:2208c7e8-185e-52ea-aa22-4c9435225323", "id": "CVE-2026-59901", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59901 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-resolver." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-resolver@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:bc40543d-20c0-5522-9a7f-68461dcaacbb", "id": "CVE-2026-59902", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59902 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-resolver." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-resolver@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:838977a8-a5c2-551b-ab6e-c3cad0120acb", "id": "CVE-2026-59903", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59903 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-resolver." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-resolver@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:d281ffd0-433d-56d7-b73a-c17a073c8f2e", "id": "CVE-2026-59919", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59919 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-resolver." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-resolver@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:5ca4874f-81a0-5a08-8b3c-50202b40f8b1", "id": "CVE-2026-59920", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59920 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-resolver." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-resolver@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:e1da41ea-6d2a-5288-b2cd-787ee071f4ee", "id": "CVE-2026-59921", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59921 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-resolver." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-resolver@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:2609a8a8-817d-5897-82bd-b43fb199cbbd", "id": "CVE-2026-73507", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-73507 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-resolver." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-resolver@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:5616d47f-5ba6-59a9-b461-889c48dac88f", "id": "CVE-2026-73508", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-73508 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-resolver." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-resolver@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:a7a89c67-4dd8-5d28-93f7-48acf8392585", "id": "GHSA-mfg7-5gfp-c4w3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-resolver." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-resolver@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:3cedefea-c5f1-5bf1-88fc-0a06045a14f0", "id": "GHSA-v74w-7mr3-4qg3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-resolver." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-resolver@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:10ccd7cb-c1d6-57cc-8480-a01d63ccd5fe", "id": "GHSA-xpw8-rcwv-8f8p", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-xpw8-rcwv-8f8p affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-resolver." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-resolver@4.1.63.Final-tuxcare.5" } ] } ], "dependencies": [ { "ref": "pkg:maven/io.netty/netty-resolver@4.1.63.Final-tuxcare.5" } ] }