{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:18723857-4c95-5035-b1c8-a730736355f8", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/io.netty/netty-tarball@4.1.63.Final-tuxcare.5", "type": "library", "group": "io.netty", "name": "netty-tarball", "version": "4.1.63.Final-tuxcare.5", "purl": "pkg:maven/io.netty/netty-tarball@4.1.63.Final-tuxcare.5" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:73423b78-6275-5897-99b5-8d115874f3d4", "id": "CVE-2021-37136", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-37136 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-tarball." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-tarball@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:d921361d-c4da-5cec-a61b-9a811b4be888", "id": "CVE-2021-37137", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-37137 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-tarball." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-tarball@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:fc5d3e81-d9e6-5b49-8de3-87b68be416d4", "id": "CVE-2021-43797", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-43797 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-tarball." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-tarball@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:df7ba481-fd24-5d9d-a51a-d3d2d385e70f", "id": "CVE-2022-24823", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-24823 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-tarball." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-tarball@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:5ca5bcb7-cd9d-5cfd-96a8-44af1f50760b", "id": "CVE-2022-41881", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-41881 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-tarball." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-tarball@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:7a4ca5f8-2891-5947-a3c9-80e54343a94d", "id": "CVE-2022-41915", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-41915 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-tarball." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-tarball@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:5d518686-e809-569f-8566-a99c5d1286c2", "id": "CVE-2023-34462", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-34462 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-tarball." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-tarball@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:71206faf-eebd-57d7-9c45-512957e8ecad", "id": "CVE-2023-44487", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-44487 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-tarball." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-tarball@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:eb5adfad-9da4-5ef3-84f4-39879fd7b4fb", "id": "CVE-2023-4586", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2023-4586 is a false positive for io.netty:netty-tarball 4.1.63.Final-tuxcare.5." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-tarball@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:e1134301-a0dd-5a19-ba0a-d513284b31ba", "id": "CVE-2024-29025", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-29025 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-tarball." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-tarball@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:8df3833e-4082-5f95-8fa4-38bb82ca17f0", "id": "CVE-2024-47535", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-47535 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-tarball." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-tarball@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:113df332-995a-5025-a52a-312f8928a093", "id": "CVE-2025-24970", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-24970 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-tarball." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-tarball@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:2d37ac90-7972-53ba-a26d-20c6311120d5", "id": "CVE-2025-25193", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-25193 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-tarball." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-tarball@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:04b04bc8-58e0-5a39-b88f-42ff4c74d7be", "id": "CVE-2025-55163", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55163 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-tarball." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-tarball@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:78ed79e1-d62d-5363-b1b2-11d44a9720ad", "id": "CVE-2025-58056", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-58056 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-tarball." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-tarball@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:30dfaef4-d1f5-577a-a77b-e7efc91d6bb4", "id": "CVE-2025-58057", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-58057 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-tarball." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-tarball@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:929ef4fb-a273-591b-8df5-39dc25f6efa3", "id": "CVE-2025-59419", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59419 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-tarball." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-tarball@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:39b08a1e-13e9-5237-a121-7f6e9086feb4", "id": "CVE-2025-67735", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-67735 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-tarball." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-tarball@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:180d68ba-e426-5128-a2cc-7650e297bec9", "id": "CVE-2026-33870", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33870 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-tarball." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-tarball@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:4ea2b642-ec24-5e48-9d03-a3acc9f9a1aa", "id": "CVE-2026-33871", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33871 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-tarball." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-tarball@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:abc7b941-2d91-50c4-bba6-e092bd64ef86", "id": "CVE-2026-41417", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41417 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-tarball." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-tarball@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:0ff9bed5-389c-5bc0-9bf0-60e47b2d2939", "id": "CVE-2026-42577", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42577 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-tarball." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-tarball@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:de3d7426-eb4d-5d95-bac4-0f05f1bc12d9", "id": "CVE-2026-42578", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42578 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-tarball." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-tarball@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:aa46d36f-89e4-5bcc-a3bb-beb3edbc26e7", "id": "CVE-2026-42579", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42579 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-tarball." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-tarball@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:a5cd1da0-0ffa-5525-8eb3-1e02551341fd", "id": "CVE-2026-42580", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42580 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-tarball." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-tarball@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:4e75e437-1773-57d1-867e-236d14eb49b0", "id": "CVE-2026-42581", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42581 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-tarball." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-tarball@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:63277fed-c728-5d25-b313-8675e4a2b06f", "id": "CVE-2026-42583", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42583 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-tarball." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-tarball@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:7240954d-36ed-5fe8-af9f-db761ef97abb", "id": "CVE-2026-42584", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42584 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-tarball." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-tarball@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:69fdc6bf-b299-5e80-9546-3eec22c6cacc", "id": "CVE-2026-42585", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42585 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-tarball." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-tarball@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:d6bdde82-bec4-5ad9-aa35-47f140147b1c", "id": "CVE-2026-42586", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42586 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-tarball." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-tarball@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:7203bf80-373e-5d87-bbd3-c84e671ecf9b", "id": "CVE-2026-42587", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42587 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-tarball." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-tarball@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:cc50a979-9938-58d9-ade7-ec5a32d04b65", "id": "CVE-2026-44248", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44248 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-tarball." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-tarball@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:3e73114c-7831-56fb-a0da-72e800802687", "id": "CVE-2026-44249", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44249 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-tarball." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-tarball@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:433c4a24-473e-5c51-b69c-7d194fe672c9", "id": "CVE-2026-44250", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44250 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-tarball." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-tarball@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:e701b824-fb40-5bea-a462-e6f484a0331b", "id": "CVE-2026-44890", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-tarball." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-tarball@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:3a719a20-0096-5771-8f0b-9003d93cfcda", "id": "CVE-2026-44891", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44891 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-tarball." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-tarball@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:7fd603a1-003d-535e-80f7-b809fa282793", "id": "CVE-2026-44893", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44893 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-tarball." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-tarball@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:23e40eec-14fe-5132-86af-f882a14e054b", "id": "CVE-2026-45416", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45416 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-tarball." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-tarball@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:b151498b-195c-5559-8d9e-2aa4eb42b8c3", "id": "CVE-2026-45536", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45536 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-tarball." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-tarball@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:5ad8f21c-31b7-5869-b829-49aa7f6eba09", "id": "CVE-2026-45673", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45673 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-tarball." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-tarball@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:212fea00-edc4-59c8-9133-52deb46f5910", "id": "CVE-2026-45674", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-45674 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-tarball." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-tarball@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:777adbd7-0218-5040-b63e-14866c69633c", "id": "CVE-2026-46340", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-46340 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-tarball." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-tarball@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:96c70ea8-a6fa-522b-b30c-628bab44be3a", "id": "CVE-2026-47244", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47244 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-tarball." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-tarball@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:d81cc19f-c592-50f8-bf74-467536de7679", "id": "CVE-2026-47691", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47691 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-tarball." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-tarball@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:b101bc1b-02df-5574-94da-ecdeb6785035", "id": "CVE-2026-48006", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-48006 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-tarball." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-tarball@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:c7ea977f-7657-56db-85a0-692bb2263655", "id": "CVE-2026-48043", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48043 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-tarball." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-tarball@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:57fcff7d-ee1d-5cc8-8183-fa64c6dc910c", "id": "CVE-2026-48059", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-48059 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-tarball." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-tarball@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:9768dd0c-5476-5d4b-8255-e8719d800b97", "id": "CVE-2026-50010", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50010 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-tarball." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-tarball@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:77744bce-b31c-5ce6-b812-d8157001d0dc", "id": "CVE-2026-50011", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50011 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-tarball." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-tarball@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:2824b601-17ef-5a5e-9dd4-a02e5f3aac0f", "id": "CVE-2026-50020", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50020 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-tarball." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-tarball@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:5a4de4e7-b8c2-58c6-bbd3-eef81f781761", "id": "CVE-2026-50560", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-tarball." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-tarball@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:9fdf4b48-565c-506b-a9c4-8f59c9b31d73", "id": "CVE-2026-55831", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55831 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-tarball." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-tarball@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:d9c8aef2-f56a-51a6-b595-ea992723c049", "id": "CVE-2026-55833", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55833 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-tarball." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-tarball@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:4c1c96b8-d224-519f-a1bf-5fd668ede009", "id": "CVE-2026-55851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55851 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-tarball." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-tarball@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:a0e35f0b-8c44-5000-86f1-e8f8739e30af", "id": "CVE-2026-56745", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56745 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-tarball." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-tarball@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:4a49a97b-1ef9-5ff4-8d77-49519874fdb1", "id": "CVE-2026-56746", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56746 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-tarball." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-tarball@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:aa925cba-3c69-5666-8f83-508bcee7b96b", "id": "CVE-2026-56817", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-56817 does not affect version 4.1.63.Final-tuxcare.5 of io.netty:netty-tarball. not_affected \u2014 The Netty codec-xml module contains XmlDecoder, which instantiates an Aalto XML parser without security configuration (line 38: new InputFactoryImpl() with no XXE protection). However, this is a library component that Netty itself does not use in its own production code. The vulnerability only manifests when downstream applications explicitly add XmlDecoder to their Netty channel pipelines. Per..." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-tarball@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:b74e6932-caa9-54eb-ba64-50c6e6bc0b1c", "id": "CVE-2026-56818", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56818 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-tarball." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-tarball@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:e21bb400-1385-5975-a452-f0d2f90886e9", "id": "CVE-2026-56819", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56819 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-tarball." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-tarball@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:f8cde001-8fad-5e17-8026-7ab9d0d71604", "id": "CVE-2026-59898", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59898 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-tarball." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-tarball@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:026471ee-388a-5edb-b4bb-887cc6b1b3ee", "id": "CVE-2026-59899", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59899 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-tarball." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-tarball@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:9e8f5aa0-f2f3-5259-ad7f-f800957d12bc", "id": "CVE-2026-59900", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59900 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-tarball." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-tarball@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:c4d56340-f122-54d3-9376-28f4091202cf", "id": "CVE-2026-59901", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59901 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-tarball." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-tarball@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:7b55e9f0-37c2-54d0-a350-ea26cd61afa9", "id": "CVE-2026-59902", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59902 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-tarball." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-tarball@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:6abb8de2-9f47-5578-9b34-6e4ef93ba6da", "id": "CVE-2026-59903", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59903 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-tarball." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-tarball@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:04240f88-b6d2-5828-a870-f9aee3f844f6", "id": "CVE-2026-59919", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59919 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-tarball." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-tarball@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:62a21c37-c760-5029-85b2-750b1709dac8", "id": "CVE-2026-59920", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59920 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-tarball." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-tarball@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:7a15667d-0caa-53b5-b4de-29f5030e6368", "id": "CVE-2026-59921", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59921 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-tarball." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-tarball@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:09c9b663-68e6-5916-a19c-5c6ec710f7ef", "id": "CVE-2026-73507", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-73507 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-tarball." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-tarball@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:44235abf-0828-5a25-8589-443dad6df914", "id": "CVE-2026-73508", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-73508 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-tarball." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-tarball@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:b12af471-9a68-553f-9d83-cf1d4933df46", "id": "GHSA-mfg7-5gfp-c4w3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-tarball." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-tarball@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:fd7d6f16-12dc-50c6-bdac-ec92c179405a", "id": "GHSA-v74w-7mr3-4qg3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-tarball." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-tarball@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:751ffe06-1e32-5ee0-b51b-1675a98f1ae2", "id": "GHSA-xpw8-rcwv-8f8p", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-xpw8-rcwv-8f8p affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-tarball." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-tarball@4.1.63.Final-tuxcare.5" } ] } ], "dependencies": [ { "ref": "pkg:maven/io.netty/netty-tarball@4.1.63.Final-tuxcare.5" } ] }