{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:d0313ff2-03d0-5c80-854b-42ce2ab51da5", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.122.Final-tuxcare.1", "type": "library", "group": "io.netty", "name": "netty-testsuite-http2", "version": "4.1.122.Final-tuxcare.1", "purl": "pkg:maven/io.netty/netty-testsuite-http2@4.1.122.Final-tuxcare.1" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:ef355064-d1c0-5d5e-b07d-c811c0d24705", "id": "CVE-2025-55163", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-55163 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-testsuite-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:830abf85-4150-5612-a20a-8d26de358dec", "id": "CVE-2025-58056", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-58056 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-testsuite-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:36cd5ee6-b0b5-50cd-9394-89aa53eec788", "id": "CVE-2025-58057", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-58057 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-testsuite-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:0929f3b8-70ae-579d-a177-7533df32b838", "id": "CVE-2025-59419", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-59419 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-testsuite-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:9f00d641-1576-560b-9b56-d539b647851a", "id": "CVE-2025-67735", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-67735 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-testsuite-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:7f34ba8b-8147-59fd-b593-67b4a02df1f4", "id": "CVE-2026-33870", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33870 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-testsuite-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:64d6a704-9b61-5d8f-a57c-8406d501b404", "id": "CVE-2026-33871", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33871 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-testsuite-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:6f0c4d0a-905a-5540-b0f8-0a73afea4601", "id": "CVE-2026-41417", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41417 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-testsuite-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:26861029-9a2f-53d8-b25e-f76dd132e2ee", "id": "CVE-2026-42577", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-42577 does not affect version 4.1.122.Final-tuxcare.1 of io.netty:netty-testsuite-http2. CVE-2026-42577 affects Netty 4.2.x only (advisory range >= 4.2.0.Final, < 4.2.13.Final). An fd left registered with an epoll event mask of 0 is woken forever by the unmaskable EPOLLERR/EPOLLHUP after a RST on a half-closed connection. Target 4.1.122.Final is NOT affected due to architectural differences. The patch modifies EpollIoHandler.java and EpollIoOps.java, part of 4.2's IoHandler/IoOps abstraction. Neither file exists in 4.1.x, which registers via EpollEventLoop.modify() off AbstractEpollChannel.flags. That field is seeded Native.EPOLLET, and no read/close/half-close path clears it (only the explicit pre-registration setEpollMode(LEVEL_TRIGGERED) opt-in), so the registration stays edge-triggered and the RST is reported once per edge instead of on every epoll_wait. The chain from INPUT (connection state change) to GOAL (CPU busy-loop via empty event mask) is broken at step (ii): the target cannot produce an empty event mask. Verdict: not_affected. Justification: code_not_reachable (Rule 5 Type A2)." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:2dbdfbdb-b7bb-5c4d-ab43-692b395b5e69", "id": "CVE-2026-42578", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42578 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-testsuite-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:b144799a-28ed-5dba-92a1-6f5c668e3663", "id": "CVE-2026-42579", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42579 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-testsuite-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:0f155a0c-04a0-5951-9988-9511518cda59", "id": "CVE-2026-42580", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42580 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-testsuite-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:c189c70d-1153-50c0-be2c-a66812bb5520", "id": "CVE-2026-42581", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42581 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-testsuite-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:cdbfcb41-3385-5d3e-b044-b6122d092602", "id": "CVE-2026-42583", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42583 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-testsuite-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:2fcf7941-d157-5d6f-9166-51c4a66bd6d8", "id": "CVE-2026-42584", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42584 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-testsuite-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:9e8a7a0f-87cb-5906-8a1e-a747e606554d", "id": "CVE-2026-42585", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42585 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-testsuite-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:7c245b78-4aef-574e-a8d5-9c66e35e809d", "id": "CVE-2026-42586", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42586 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-testsuite-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:ee176907-2935-5173-8dfe-e627205de9d5", "id": "CVE-2026-42587", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42587 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-testsuite-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:dee672bc-2016-5460-9ebf-0efa29a0acc1", "id": "CVE-2026-44248", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44248 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-testsuite-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:98bcf201-ae62-5da9-abe3-e0ddb7bb6eca", "id": "CVE-2026-44249", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44249 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-testsuite-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:299e4301-61b3-58db-b33f-4c3846a7ea9e", "id": "CVE-2026-44250", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44250 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-testsuite-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:03d06f45-c1e7-56b2-8088-306b4da75755", "id": "CVE-2026-44890", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44890 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-testsuite-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:ad5c0325-85da-5074-8cbb-4afa35886b6a", "id": "CVE-2026-44891", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44891 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-testsuite-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:f3c50adf-abfd-5388-9ab3-05d8b6a02d96", "id": "CVE-2026-44893", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44893 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-testsuite-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:1fd760ec-1a8a-50f8-9d61-f2e163be3967", "id": "CVE-2026-45416", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45416 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-testsuite-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:98721e50-f916-59d7-ae80-006d64230848", "id": "CVE-2026-45536", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45536 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-testsuite-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:c062697b-ecc3-5414-90f7-790d29917877", "id": "CVE-2026-45673", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45673 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-testsuite-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:22333a04-e050-56cf-a1d1-fa92405a74a4", "id": "CVE-2026-45674", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45674 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-testsuite-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:f0075917-2b4b-512c-83fa-99e340e26e5b", "id": "CVE-2026-46340", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-46340 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-testsuite-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:7f6c4662-868f-5d20-817d-69330a25d0a5", "id": "CVE-2026-47244", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47244 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-testsuite-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:a1fedfb6-7184-597c-83b3-72c63f7f37ab", "id": "CVE-2026-47691", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47691 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-testsuite-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:14469449-8c57-5647-800c-9f03ca4c212d", "id": "CVE-2026-48006", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-48006 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-testsuite-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:9a43a1ce-c9fc-5c83-afdc-ef5aebbd6c0a", "id": "CVE-2026-48043", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-48043 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-testsuite-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:26be385c-b0b9-5a8a-b4f1-666819c1f939", "id": "CVE-2026-48059", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-48059 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-testsuite-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:ffec2522-d263-5696-9b3b-9c4d51337595", "id": "CVE-2026-50010", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50010 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-testsuite-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:8b0539a1-4d66-587e-a0e7-6f6e91554eeb", "id": "CVE-2026-50011", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50011 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-testsuite-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:cc09d466-2080-54a2-a028-e3122c9cf24d", "id": "CVE-2026-50020", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50020 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-testsuite-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:a38a1666-4394-508a-95a5-29c00f2cec32", "id": "CVE-2026-50560", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50560 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-testsuite-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:620e15b5-e649-5a59-be20-85f5521b3567", "id": "CVE-2026-55831", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55831 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-testsuite-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:465b8def-2759-531e-9645-b627cd3a3002", "id": "CVE-2026-55833", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55833 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-testsuite-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:4d178de9-5520-5d34-bf9f-f0445d8b0af2", "id": "CVE-2026-55851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55851 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-testsuite-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:b960b492-b6ea-513c-8ab0-56c8df12f2aa", "id": "CVE-2026-56745", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56745 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-testsuite-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:4c031992-e2e3-5d48-af93-3797cc934514", "id": "CVE-2026-56746", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56746 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-testsuite-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:d04476ff-b21c-54ad-bc49-a8d642ae6e8b", "id": "CVE-2026-56817", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56817 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-testsuite-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:ddd9a7b5-4e5a-5a40-90f6-9c7d259059fa", "id": "CVE-2026-56818", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56818 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-testsuite-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:e63381f8-14ad-535e-a83d-98c6c9221599", "id": "CVE-2026-56819", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56819 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-testsuite-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:973df7e5-c44c-5886-b293-5bcae6b0e5e0", "id": "CVE-2026-56820", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56820 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-testsuite-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:e2cbc647-d916-538c-b26a-254905f5ff93", "id": "CVE-2026-56821", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56821 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-testsuite-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:94470008-8553-5c94-a3db-1b732eb7302a", "id": "CVE-2026-56822", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56822 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-testsuite-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:8f35657c-51ab-52fa-9cb0-5c77ffaf174b", "id": "CVE-2026-59898", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59898 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-testsuite-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:52a34977-7f5d-5317-b5a6-12ead3304834", "id": "CVE-2026-59899", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59899 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-testsuite-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:837bfb44-fc78-519f-9e4e-3d21e426a389", "id": "CVE-2026-59900", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59900 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-testsuite-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:d5a6a3f9-4490-5375-860d-5d7f1ed37c0b", "id": "CVE-2026-59901", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59901 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-testsuite-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:c7be0947-c927-55d7-b7ca-b0494899e306", "id": "CVE-2026-59902", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59902 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-testsuite-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:4e36d86c-3b74-5772-b2df-92c90637e732", "id": "CVE-2026-59903", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59903 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-testsuite-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:0958106f-b004-5434-818c-fdef37c7dab3", "id": "CVE-2026-59919", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59919 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-testsuite-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:0b08b4ee-2bef-5da7-80b1-2e057fee45b3", "id": "CVE-2026-59920", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59920 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-testsuite-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:e67cb869-0c83-5f82-b31d-7082ff60c1b8", "id": "CVE-2026-59921", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59921 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-testsuite-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:514852a8-af8d-5b3e-8e1d-51865964e526", "id": "CVE-2026-73507", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-73507 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-testsuite-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:16927765-4d7d-560c-8310-6c6136ad9cff", "id": "CVE-2026-73508", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-73508 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-testsuite-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:0bac12c1-769a-5984-ba8b-c73c0d163166", "id": "GHSA-mfg7-5gfp-c4w3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-testsuite-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:7ebab7d3-7bbf-5075-bef7-0cf11f22dc44", "id": "GHSA-v74w-7mr3-4qg3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-testsuite-http2." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.122.Final-tuxcare.1" } ] } ], "dependencies": [ { "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.122.Final-tuxcare.1" } ] }