{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:d3b82ff0-5419-59ac-a1da-65af9254699d",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/io.netty/netty-resolver@4.1.73.Final-tuxcare.4",
      "type": "library",
      "group": "io.netty",
      "name": "netty-resolver",
      "version": "4.1.73.Final-tuxcare.4",
      "purl": "pkg:maven/io.netty/netty-resolver@4.1.73.Final-tuxcare.4"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:71205a58-9847-54a8-a5d4-7c4ef6d1a81f",
      "id": "CVE-2022-24823",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-24823 is fixed in version 4.1.73.Final-tuxcare.4 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:29810a89-56cc-5006-9fc1-bf0b2f8779b8",
      "id": "CVE-2022-41881",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-41881 is fixed in version 4.1.73.Final-tuxcare.4 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8d85d35c-d28e-59aa-9229-bb2525e40813",
      "id": "CVE-2022-41915",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-41915 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2efece72-8712-534a-8935-98ee8634801d",
      "id": "CVE-2023-34462",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-34462 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9cd06f02-53bb-5f57-89d5-e1b7803c8d94",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-44487 is fixed in version 4.1.73.Final-tuxcare.4 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:58870c46-94df-5b49-babc-a0a0edac4393",
      "id": "CVE-2023-4586",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2023-4586 is a false positive for io.netty:netty-resolver 4.1.73.Final-tuxcare.4."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c686cdc1-bed8-5c00-b44e-072df5ccba0a",
      "id": "CVE-2024-29025",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-29025 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8612a3be-9790-5899-b251-f13c231edf66",
      "id": "CVE-2024-47535",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-47535 is fixed in version 4.1.73.Final-tuxcare.4 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d5638d30-31c0-5b1b-99b8-9d3408008910",
      "id": "CVE-2025-24970",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-24970 is fixed in version 4.1.73.Final-tuxcare.4 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:118fdc7b-59bc-500a-bb34-aeb807020c52",
      "id": "CVE-2025-25193",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-25193 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:95d96367-7c4f-5080-8f89-5b9ebcd465ab",
      "id": "CVE-2025-55163",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-55163 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d5a8051d-7da9-5b74-ac66-eadfde6d1702",
      "id": "CVE-2025-58056",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58056 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5aff7ad9-fcc7-560d-a277-57a2a5075888",
      "id": "CVE-2025-58057",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58057 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c1077ebd-1e1d-54e4-be99-0c3fa94be025",
      "id": "CVE-2025-59419",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-59419 is fixed in version 4.1.73.Final-tuxcare.4 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a50fd00d-6d9a-5977-9e46-732ca5e9429f",
      "id": "CVE-2025-67735",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-67735 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:153a0900-5290-52b6-8cdf-010af64f8b8f",
      "id": "CVE-2026-33870",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33870 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8f7b4656-8aa0-5c87-b2a6-f03ea760e3a6",
      "id": "CVE-2026-33871",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33871 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6dc7fca3-7c1d-5353-ad41-0e9e6698ab65",
      "id": "CVE-2026-41417",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41417 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3bf307c6-a4b7-5591-bf67-87a6d8ec9192",
      "id": "CVE-2026-42577",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42577 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9bdec595-5ded-5212-848f-15b7d8cbb459",
      "id": "CVE-2026-42578",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42578 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e40ff1b7-7b32-50e8-a6c6-b67c750675ff",
      "id": "CVE-2026-42579",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42579 is fixed in version 4.1.73.Final-tuxcare.4 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:df3bba4e-2480-58ab-8c2a-7ab7e51320cb",
      "id": "CVE-2026-42580",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42580 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6881db5d-14ee-547e-a16a-210962fc5ac0",
      "id": "CVE-2026-42581",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42581 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:667a5d05-531c-5132-a2ae-391e06bdcedc",
      "id": "CVE-2026-42583",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42583 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3a69e052-d905-553b-8171-f5a5abd4332c",
      "id": "CVE-2026-42584",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42584 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ef474756-0401-5701-8c98-e21e2d59e6ce",
      "id": "CVE-2026-42585",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42585 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0eebf620-7511-5492-a7d8-4ee56caa5e32",
      "id": "CVE-2026-42586",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42586 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ce75ff92-d96a-56a3-a6a6-97b9b762ad0d",
      "id": "CVE-2026-42587",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42587 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a87f2f13-e7c3-565b-a94e-877cc3b2e989",
      "id": "CVE-2026-44248",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44248 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4c4166c7-c745-58d0-b2f3-212bc8f301c5",
      "id": "CVE-2026-44249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44249 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c4996a63-84f9-543f-914a-171250b6b81a",
      "id": "CVE-2026-44250",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44250 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:deb5f933-dd2d-52f7-a718-f06c69300ae0",
      "id": "CVE-2026-44890",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.73.Final-tuxcare.4 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:04e6f56d-0637-5a0d-8616-001386d7ded8",
      "id": "CVE-2026-44891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44891 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9584147c-738d-548b-9baa-ecbf4e6e8192",
      "id": "CVE-2026-44893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44893 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:65926e28-7615-5e4b-baa3-6190a6e30c34",
      "id": "CVE-2026-45416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45416 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:97f87266-0162-5123-802e-1dd409a9a0fe",
      "id": "CVE-2026-45536",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45536 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1e70250b-3ce4-5b69-bf28-389289fd2327",
      "id": "CVE-2026-45673",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45673 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b3b99504-3782-5d06-8b20-7f549988d63a",
      "id": "CVE-2026-45674",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-45674 is fixed in version 4.1.73.Final-tuxcare.4 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:97dab8bd-6a39-515f-b4f7-5184272d6851",
      "id": "CVE-2026-46340",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-46340 is fixed in version 4.1.73.Final-tuxcare.4 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:125d5a65-55b7-5ad7-b367-3dbc8e85d1db",
      "id": "CVE-2026-47244",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47244 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b5f7bd98-f9aa-5ebf-a914-5e3ca648ad15",
      "id": "CVE-2026-47691",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47691 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1c878fd9-1a53-56c2-99f5-9a98eef6ffcc",
      "id": "CVE-2026-48006",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48006 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:457a406d-9065-5f29-98fc-7f1baafc2562",
      "id": "CVE-2026-48043",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-48043 does not affect version 4.1.73.Final-tuxcare.4 of io.netty:netty-resolver. not_affected \u2014 Version 4.1.73 is not affected by CVE-2026-48043. The target uses a loop-based architecture with try-finally protection (introduced in 2016) that prevents the buffer leak described in the CVE. The vulnerable ChannelInboundHandlerAdapter pattern that the upstream patch fixes does not exist in this version."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c6a48260-2273-5910-a10b-81e8fd1b4db2",
      "id": "CVE-2026-48059",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48059 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:678ea2e0-4b7a-5801-99a7-82a4e34dcbf6",
      "id": "CVE-2026-50010",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50010 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e5bd9226-72cb-5c7e-9d36-b545af99fccb",
      "id": "CVE-2026-50011",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50011 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:36ec67e1-f097-5363-9e91-48bd9f741c0d",
      "id": "CVE-2026-50020",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50020 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:be5fad94-091f-5a70-955d-19a66bfb13b1",
      "id": "CVE-2026-50560",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.73.Final-tuxcare.4 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6dcfa9ed-191d-58d4-89cf-133cc6f7bc4d",
      "id": "CVE-2026-55831",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55831 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3f0c6261-ce2b-5407-82cf-ea8c5a8c964f",
      "id": "CVE-2026-55833",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55833 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0d000880-8dab-5782-910e-499f0c55b509",
      "id": "CVE-2026-55851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55851 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e6ab97c4-aed7-5372-b7a8-3ec8548000eb",
      "id": "CVE-2026-56745",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56745 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b1660fbe-4108-558a-8243-acce0998aea5",
      "id": "CVE-2026-56746",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56746 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:73bca77e-091b-5c2f-ad38-31cc6a55b719",
      "id": "CVE-2026-56817",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56817 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:89c5d2df-bcdf-57fb-9930-fd209bd5ce57",
      "id": "CVE-2026-56818",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-56818 does not affect version 4.1.73.Final-tuxcare.4 of io.netty:netty-resolver. not_affected \u2014 The target version 4.1.73.Final-tuxcare.2 is NOT AFFECTED by CVE-2026-56818. The vulnerable code pattern (configurable `maxElements` limit check without cleanup, contrasting with `maxNestedArrayDepth` limit check WITH cleanup) was introduced in version 4.1.135.Final through commits e51c64c964 and 728c98b8ec (dated 2026-06-01/02). The target version predates these features entirely and does not ..."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a6b8252d-5c1b-5947-a365-6c6391c206f8",
      "id": "CVE-2026-56819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56819 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2b505fcf-5da4-5756-aeaf-e827ee12e05c",
      "id": "CVE-2026-59898",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59898 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:425f2e1f-a7d8-5c2c-b29a-b9e29a32350b",
      "id": "CVE-2026-59899",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59899 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:71c09a89-3f06-5e38-9bbc-936c2d450382",
      "id": "CVE-2026-59900",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59900 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:35815514-4b85-5814-b6fe-c5cc97362f82",
      "id": "CVE-2026-59901",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59901 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f2003c16-cb5a-5ef6-bcf0-2987b9800ea1",
      "id": "CVE-2026-59902",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59902 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8f53941e-57bf-5c8f-a6a8-7d2b65aac858",
      "id": "CVE-2026-59903",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59903 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b7b3b266-7aae-523e-a71f-88a0721d9398",
      "id": "CVE-2026-59919",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59919 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fa2a754d-70f3-54d9-959c-cf535cde7eb1",
      "id": "CVE-2026-59920",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59920 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0bebc31f-2ef7-54c7-9b85-d9b4f6779aea",
      "id": "CVE-2026-59921",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59921 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8fbed4be-edb2-5e0f-81ff-e9b64b89b4ac",
      "id": "CVE-2026-73507",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-73507 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8a1cc7c4-6604-5b86-946c-0cc7c1aa907c",
      "id": "CVE-2026-73508",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-73508 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ec6c170c-b433-5ce7-986b-d3871af6a28d",
      "id": "GHSA-mfg7-5gfp-c4w3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:31e8ba7b-2b20-58ea-b283-6bcf9b6e7a7f",
      "id": "GHSA-v74w-7mr3-4qg3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:25befb33-42a5-52cd-af48-da45069db11a",
      "id": "GHSA-xpw8-rcwv-8f8p",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-xpw8-rcwv-8f8p affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-resolver."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-resolver@4.1.73.Final-tuxcare.4"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.netty/netty-resolver@4.1.73.Final-tuxcare.4"
    }
  ]
}