{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:6e4f57bf-42d3-5a65-86ba-43c900ff773c",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.122.Final-tuxcare.2",
      "type": "library",
      "group": "io.netty",
      "name": "netty-testsuite-http2",
      "version": "4.1.122.Final-tuxcare.2",
      "purl": "pkg:maven/io.netty/netty-testsuite-http2@4.1.122.Final-tuxcare.2"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:79aaf340-5d35-5c13-914b-1789b0b01f3e",
      "id": "CVE-2025-55163",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55163 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e021c0f2-5526-51e6-a163-7e142f10c7b1",
      "id": "CVE-2025-58056",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-58056 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4489d60d-26a4-5e61-8caf-4c4bef9c86f5",
      "id": "CVE-2025-58057",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-58057 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bb52a053-dc61-57b3-9f2d-2c5901696986",
      "id": "CVE-2025-59419",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-59419 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e33e5368-46ad-56be-9c8e-225cecb449a8",
      "id": "CVE-2025-67735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-67735 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5a9bd187-8831-5e73-b899-2a43a84059e5",
      "id": "CVE-2026-33870",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-33870 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3d426fce-9789-5130-b768-3b5e208ae196",
      "id": "CVE-2026-33871",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-33871 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3e5dd209-2ecd-58b3-8111-ece853f23701",
      "id": "CVE-2026-41417",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41417 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:921122f0-fb64-56e2-ab63-c9cde4b09d28",
      "id": "CVE-2026-42577",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-42577 does not affect version 4.1.122.Final-tuxcare.2 of io.netty:netty-testsuite-http2. CVE-2026-42577 affects Netty 4.2.x only (advisory range >= 4.2.0.Final, < 4.2.13.Final). An fd left registered with an epoll event mask of 0 is woken forever by the unmaskable EPOLLERR/EPOLLHUP after a RST on a half-closed connection. Target 4.1.122.Final is NOT affected due to architectural differences. The patch modifies EpollIoHandler.java and EpollIoOps.java, part of 4.2's IoHandler/IoOps abstraction. Neither file exists in 4.1.x, which registers via EpollEventLoop.modify() off AbstractEpollChannel.flags. That field is seeded Native.EPOLLET, and no read/close/half-close path clears it (only the explicit pre-registration setEpollMode(LEVEL_TRIGGERED) opt-in), so the registration stays edge-triggered and the RST is reported once per edge instead of on every epoll_wait. The chain from INPUT (connection state change) to GOAL (CPU busy-loop via empty event mask) is broken at step (ii): the target cannot produce an empty event mask. Verdict: not_affected. Justification: code_not_reachable (Rule 5 Type A2)."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9e067685-3980-5f54-b145-e2a62ae0db81",
      "id": "CVE-2026-42578",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42578 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f9fc3d9c-c448-5cbf-ac0c-b23cc6cf7ccd",
      "id": "CVE-2026-42579",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42579 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:72d829b3-15c9-590a-b24f-ae17b41d12f1",
      "id": "CVE-2026-42580",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42580 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c842ad6e-87ae-5abc-8bd5-beb061a62768",
      "id": "CVE-2026-42581",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42581 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:16e85234-a97c-5683-ab14-3374b1b55e36",
      "id": "CVE-2026-42583",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42583 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:919279d5-4fd3-5d41-85cb-4acd0a4a2c51",
      "id": "CVE-2026-42584",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42584 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b69740dd-4a51-54e2-b84f-a0421d72e483",
      "id": "CVE-2026-42585",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42585 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a9d9a0ab-99ef-5d84-8802-38532bb67ad3",
      "id": "CVE-2026-42586",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42586 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ef1c974b-9cae-58b0-bf60-7414fcf0f639",
      "id": "CVE-2026-42587",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42587 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4d8caaa9-85ba-53ba-9ab8-8f0cc2a7336b",
      "id": "CVE-2026-44248",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44248 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f41ed28b-84fa-568f-8cbb-7f6ce0b4bcf4",
      "id": "CVE-2026-44249",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44249 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:03d2bb8a-1bad-56db-b78e-92b2f1387478",
      "id": "CVE-2026-44250",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44250 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a49bf830-9b32-5ca8-bf8e-4635c633cb50",
      "id": "CVE-2026-44890",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:99647f88-86e0-532b-8cd9-e3874d7e5516",
      "id": "CVE-2026-44891",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44891 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:99bf9e01-139d-58e4-ad9a-97bbc22b8582",
      "id": "CVE-2026-44893",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44893 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:251a47c0-db07-53a7-b7c6-856f3cca7eda",
      "id": "CVE-2026-45416",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-45416 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e62cccd5-d21a-5894-9a70-4076fac5c445",
      "id": "CVE-2026-45536",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-45536 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:08a3e421-155a-5cf7-be42-d9ae623c7495",
      "id": "CVE-2026-45673",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-45673 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c8da9f80-dca0-557d-ba39-e530affe6e53",
      "id": "CVE-2026-45674",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-45674 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:aa685c9a-2bc9-5e4e-9605-eaa9df1cda97",
      "id": "CVE-2026-46340",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-46340 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e7127f0a-5c43-50c0-8384-c6c6103a3aac",
      "id": "CVE-2026-47244",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47244 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f51adf90-e1e8-5aa3-a531-823bfdf3b5db",
      "id": "CVE-2026-47691",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47691 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c7be85d9-6c76-5859-8cc4-4728da4c2873",
      "id": "CVE-2026-48006",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-48006 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1b583b55-ebea-536e-9097-3564d2132a0e",
      "id": "CVE-2026-48043",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-48043 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a7f39250-d8b1-5f5b-bf0f-49f1445c1890",
      "id": "CVE-2026-48059",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-48059 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:54771b46-2b86-5f3f-a019-bd03f379398b",
      "id": "CVE-2026-50010",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50010 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:405b763d-1860-5fe4-a3d0-7901453665cf",
      "id": "CVE-2026-50011",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50011 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:46029439-a40f-541a-8a44-5d36a48b3870",
      "id": "CVE-2026-50020",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50020 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0ee49e9e-7255-556c-88cc-e2a2e4eceaac",
      "id": "CVE-2026-50560",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:27808dbd-94ae-52bc-9dbe-aad2037705bf",
      "id": "CVE-2026-55831",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-55831 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ad7d7f42-2679-5508-85d2-cb34aaf0de43",
      "id": "CVE-2026-55833",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-55833 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:21302c71-32d5-5ccf-8b1f-3db3d8332bb8",
      "id": "CVE-2026-55851",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-55851 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5f3b97d8-3386-5ab9-875d-dffc25c321e4",
      "id": "CVE-2026-56745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-56745 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7eea8254-3da5-5331-9488-c433c5091610",
      "id": "CVE-2026-56746",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-56746 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e2d947ab-5462-564f-8c8f-a2196e31f896",
      "id": "CVE-2026-56817",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-56817 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e8c2681b-e68b-5a7f-a3ee-5eb9b4954d03",
      "id": "CVE-2026-56818",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-56818 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0aa83675-f0ac-5011-8f91-88694f53af1f",
      "id": "CVE-2026-56819",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-56819 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3b97028c-477f-53a3-ad7f-d7bb5e732c82",
      "id": "CVE-2026-56820",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-56820 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f0834c79-0737-5c14-8684-a2fb7b2ad067",
      "id": "CVE-2026-56821",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-56821 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3f9ead20-c365-52a2-b03b-7166c244889d",
      "id": "CVE-2026-56822",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-56822 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:348af987-79b0-5fe3-b5d9-150c328c3cb1",
      "id": "CVE-2026-59898",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59898 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2394a752-73d9-5aee-8ffa-df8c877c4b61",
      "id": "CVE-2026-59899",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59899 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2f8eec40-813a-5db9-a12f-544fd1796d9f",
      "id": "CVE-2026-59900",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59900 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c5bf94f3-acc5-55ad-88f6-de9ea0b8b42c",
      "id": "CVE-2026-59901",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59901 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f202cefb-311c-559b-b8c3-7be8498c81e8",
      "id": "CVE-2026-59902",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59902 affects version 4.1.122.Final-tuxcare.2 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:980c409a-ecb3-5488-95c6-49697b4cc57e",
      "id": "CVE-2026-59903",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59903 affects version 4.1.122.Final-tuxcare.2 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:eaa48958-ea2c-5308-bb01-b4e5f6616dc3",
      "id": "CVE-2026-59919",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59919 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:47c3dfd8-2347-5290-88c6-beb2ca37cdf7",
      "id": "CVE-2026-59920",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59920 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bc2d7b7d-2c0b-5974-aea0-a27d02a4160b",
      "id": "CVE-2026-59921",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59921 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:eee0e1a1-b84f-5b44-a3ac-ea931bff9c6c",
      "id": "CVE-2026-73507",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-73507 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:39dc078c-43d2-54a5-ab63-ae836fe66748",
      "id": "CVE-2026-73508",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-73508 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2d0c9a37-59ce-5d23-b06b-417d2b20626b",
      "id": "GHSA-mfg7-5gfp-c4w3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.122.Final-tuxcare.2 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:85892383-c430-5081-b4a6-2a5076bc895f",
      "id": "GHSA-v74w-7mr3-4qg3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.122.Final-tuxcare.2 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.122.Final-tuxcare.2"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.122.Final-tuxcare.2"
    }
  ]
}