{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:b365ee5c-3df4-5987-a2f7-ff8190e40374",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.130.Final-tuxcare.1",
      "type": "library",
      "group": "io.netty",
      "name": "netty-testsuite-http2",
      "version": "4.1.130.Final-tuxcare.1",
      "purl": "pkg:maven/io.netty/netty-testsuite-http2@4.1.130.Final-tuxcare.1"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:67469fc3-1eff-5ba3-9532-f9c3d7ba7389",
      "id": "CVE-2025-55163",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2025-55163 does not affect version 4.1.130.Final-tuxcare.1 of io.netty:netty-testsuite-http2. already_fixed \u2014 The target Netty 4.1.130.Final repository already contains the complete MadeYouReset (CVE-2025-55163) mitigation. The Http2MaxRstFrameLimitEncoder defense class is present, integrated into the HTTP/2 connection handler builder, and enabled by default for servers with a threshold of 200 RST_STREAM frames per 30-second window. All protocol-error-triggered RST writes route through the protected en..."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.130.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7d5aa02f-03a6-5923-a1bc-24d8d90cc8d9",
      "id": "CVE-2026-33870",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33870 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.130.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b8ac88f3-200b-5c7a-91c7-d53c8506d46b",
      "id": "CVE-2026-33871",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-33871 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.130.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bf1073d2-e377-5503-9ad8-90c2505ca8f1",
      "id": "CVE-2026-41417",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41417 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.130.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a4043257-20c0-5a7f-bb08-20187b322555",
      "id": "CVE-2026-42578",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42578 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.130.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:de2a153f-2ba7-5480-ae0b-9a769e0ad591",
      "id": "CVE-2026-42579",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42579 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.130.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2150fc0f-cdc7-586e-ab13-83ad8c598ac2",
      "id": "CVE-2026-42580",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42580 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.130.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:10173a2e-a220-5087-850e-6fb611c29323",
      "id": "CVE-2026-42581",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42581 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.130.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4eb349cc-60c8-5298-ba7e-8afe35a25f40",
      "id": "CVE-2026-42583",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42583 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.130.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:350a23fa-9a3e-56e6-96ea-4f05c61d956f",
      "id": "CVE-2026-42584",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42584 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.130.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:919212b2-ac19-5192-b061-632c7766b27c",
      "id": "CVE-2026-42585",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42585 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.130.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8f14ddf0-b227-5698-9aa5-1781e10edaa7",
      "id": "CVE-2026-42586",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42586 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.130.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:75155417-f57c-5192-b5e6-de62104e795c",
      "id": "CVE-2026-42587",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42587 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.130.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5634b061-5810-5862-a7ec-39e8307ace77",
      "id": "CVE-2026-44248",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44248 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.130.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e2d0940e-ac1a-5c13-a0c4-2ea5357346eb",
      "id": "CVE-2026-44249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44249 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.130.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:79274c11-af57-5d31-82f0-f9cfc8b976d2",
      "id": "CVE-2026-44250",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44250 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.130.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d7ba0029-75a1-5a04-a9be-a26205eece96",
      "id": "CVE-2026-44890",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.130.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:348b5822-a926-5a28-b6a7-ebac2a74b39a",
      "id": "CVE-2026-44891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44891 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.130.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cb715ce7-a0f0-59cd-9217-79a03ff1226c",
      "id": "CVE-2026-44893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44893 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.130.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:116eb299-522a-5bca-aa0a-1e28cc163743",
      "id": "CVE-2026-45416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45416 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.130.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:49a0f06e-f87f-5c2a-966e-55f6d71db093",
      "id": "CVE-2026-45536",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45536 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.130.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e575a9e5-7cf9-580e-991a-3dd3db82d825",
      "id": "CVE-2026-45673",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45673 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.130.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0ff593c2-61b1-54c6-b77f-3e8214fd09ab",
      "id": "CVE-2026-45674",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45674 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.130.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c0c8bc0f-58e0-5d78-8e8e-8911fe9f8b50",
      "id": "CVE-2026-46340",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-46340 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.130.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:58edaeed-f277-53a3-8a2e-1115773b979a",
      "id": "CVE-2026-47244",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47244 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.130.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:96645223-7517-5ad5-99f0-4fd291419c13",
      "id": "CVE-2026-47691",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47691 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.130.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:241bf324-6a16-5782-9960-394ecbe00366",
      "id": "CVE-2026-48006",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48006 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.130.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:874dcf9d-5c58-5502-834f-0f52848c3eec",
      "id": "CVE-2026-48043",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-48043 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.130.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:79346ae8-c61a-5973-bc61-7cb101da7032",
      "id": "CVE-2026-48059",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-48059 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.130.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:64596b95-4cb0-5983-ab40-2e7e4c96e401",
      "id": "CVE-2026-50010",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50010 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.130.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fdec70b1-6037-5cb3-ae8b-e4cda48162ca",
      "id": "CVE-2026-50011",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-50011 does not affect version 4.1.130.Final-tuxcare.1 of io.netty:netty-testsuite-http2. Patches already applied: bff98ee51b5d0b7ee25fd5005f2169f2a0467efa (already in target via d5b4e38845f5 'Backport CVE-2026-44890 to 4.1.130.Final')"
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.130.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9f0e333b-8d90-5cb3-8a91-28068ff37427",
      "id": "CVE-2026-50020",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50020 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.130.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c88472ee-0b81-5080-8e52-c2f3565d393e",
      "id": "CVE-2026-50560",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.130.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6f56b4fe-15bd-5f52-b88d-18e57567367e",
      "id": "CVE-2026-55831",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55831 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.130.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:69faac7a-277e-59aa-8372-977e220af1f7",
      "id": "CVE-2026-55833",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55833 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.130.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d5274a10-852d-506d-a45f-ae62c9152616",
      "id": "CVE-2026-55851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55851 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.130.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e0f55675-0127-586a-b9c0-73854b0cb1d2",
      "id": "CVE-2026-56745",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56745 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.130.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a0a5f947-e136-55e4-9337-279d15bd37f9",
      "id": "CVE-2026-56746",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56746 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.130.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d261e84d-aefb-503d-af65-0d5a14cd7b05",
      "id": "CVE-2026-56817",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56817 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.130.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:eb292134-c0d8-5f89-adcc-f23bb422e8f3",
      "id": "CVE-2026-56818",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56818 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.130.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8b430891-7076-5101-a3ab-c653c8164e14",
      "id": "CVE-2026-56819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56819 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.130.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d1786fce-f470-5af2-9bdd-444f348bfe48",
      "id": "CVE-2026-56820",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56820 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.130.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:909c9d6d-0cda-51bf-9103-83dd4069e178",
      "id": "CVE-2026-56821",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56821 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.130.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:29fc8c62-9b01-55c0-aa90-169487724148",
      "id": "CVE-2026-56822",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56822 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.130.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f6e5da18-c346-56aa-9c8d-e81069240a75",
      "id": "CVE-2026-59898",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59898 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.130.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:aa4e9ec7-6ead-53cf-b829-09578e0cab3e",
      "id": "CVE-2026-59899",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59899 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.130.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0396a868-cebc-5aaf-88bd-d5783a823a0c",
      "id": "CVE-2026-59900",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59900 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.130.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:878c9d75-3bff-5fa2-b22b-39cf307c0e3f",
      "id": "CVE-2026-59901",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59901 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.130.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f181ad16-73ee-5bbb-9c85-022940887d67",
      "id": "CVE-2026-59902",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59902 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.130.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b4d02e3f-815f-556a-83e6-76a4df852979",
      "id": "CVE-2026-59903",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59903 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.130.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1ec79f9f-b7fa-509f-b40a-d5443e488a63",
      "id": "CVE-2026-59919",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59919 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.130.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2b6fdec3-fa42-5c54-8a3b-8f0ac88ab9a6",
      "id": "CVE-2026-59920",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59920 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.130.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1c1fffcd-04f1-50be-813a-06be9e849d74",
      "id": "CVE-2026-59921",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59921 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.130.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:07ef1072-3291-5786-8c98-a49f14374266",
      "id": "CVE-2026-73507",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-73507 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.130.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e0b8da7f-6e27-5cdc-9f5d-7d180f3fc353",
      "id": "CVE-2026-73508",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-73508 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.130.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fd6f7a38-37cc-5dc4-9c5e-dc47e5551db3",
      "id": "GHSA-mfg7-5gfp-c4w3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.130.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e57f2a48-1028-5a19-82b0-1dead967bd85",
      "id": "GHSA-v74w-7mr3-4qg3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.130.Final-tuxcare.1"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.130.Final-tuxcare.1"
    }
  ]
}