{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:38021924-27ec-569a-a66c-2736e77f0f25",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.130.Final-tuxcare.4",
      "type": "library",
      "group": "io.netty",
      "name": "netty-testsuite-http2",
      "version": "4.1.130.Final-tuxcare.4",
      "purl": "pkg:maven/io.netty/netty-testsuite-http2@4.1.130.Final-tuxcare.4"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:5d307eb2-0e3d-5ef1-bb2e-16dc039d58f0",
      "id": "CVE-2025-55163",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2025-55163 does not affect version 4.1.130.Final-tuxcare.4 of io.netty:netty-testsuite-http2. already_fixed \u2014 The target Netty 4.1.130.Final repository already contains the complete MadeYouReset (CVE-2025-55163) mitigation. The Http2MaxRstFrameLimitEncoder defense class is present, integrated into the HTTP/2 connection handler builder, and enabled by default for servers with a threshold of 200 RST_STREAM frames per 30-second window. All protocol-error-triggered RST writes route through the protected en..."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d9176f76-06d5-5f61-bcb8-8331db13ef10",
      "id": "CVE-2026-33870",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-33870 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b3fb944c-6de2-52b4-98fa-f1f60c4caac8",
      "id": "CVE-2026-33871",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-33871 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:653f07ff-ba0b-5fdb-9d12-fecaf40fa7d2",
      "id": "CVE-2026-41417",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41417 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f4b8e343-bb1e-5ed8-b221-744630962f84",
      "id": "CVE-2026-42578",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42578 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:72029389-c6f7-532b-bf7e-19e46e1ad9c7",
      "id": "CVE-2026-42579",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42579 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:68da3a48-b2d9-50a9-a265-ae3f96c63d74",
      "id": "CVE-2026-42580",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42580 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5ea099d6-2103-52ce-85b8-7513c426c33f",
      "id": "CVE-2026-42581",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42581 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d8aaaf7d-6a97-5e56-b09d-4538b47a7d54",
      "id": "CVE-2026-42583",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42583 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9ff663dc-ecf1-502d-beac-beb4fec1fe68",
      "id": "CVE-2026-42584",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42584 affects version 4.1.130.Final-tuxcare.4 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9375d052-6be3-5203-bae9-4757050a54af",
      "id": "CVE-2026-42585",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42585 affects version 4.1.130.Final-tuxcare.4 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6ffc5721-aa09-54d6-a927-ba95b97dff72",
      "id": "CVE-2026-42586",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42586 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:35eecd12-a19e-5148-adfd-13f30e0411c5",
      "id": "CVE-2026-42587",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42587 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:78ea16a8-2adc-5ce3-b220-42104d450304",
      "id": "CVE-2026-44248",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44248 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8222eb7a-e164-5d19-b612-88ca5259f82e",
      "id": "CVE-2026-44249",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44249 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d6134b98-3569-5f13-94c5-12c2a1af0ca7",
      "id": "CVE-2026-44250",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44250 affects version 4.1.130.Final-tuxcare.4 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:56d47655-e876-57c5-ad99-656ca0b2c3f0",
      "id": "CVE-2026-44890",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:495b6e71-dc67-5df4-bfd1-5f27dcd57155",
      "id": "CVE-2026-44891",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44891 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:688a0fe4-fc2b-5575-9878-c91eb9aaf861",
      "id": "CVE-2026-44893",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44893 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3dfecfe6-9a8d-549d-8272-d87688ff4c05",
      "id": "CVE-2026-45416",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-45416 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:76269035-ccd1-5609-a0bf-7f94deadc289",
      "id": "CVE-2026-45536",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-45536 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:41672e55-6833-51b9-b060-2128c84cae72",
      "id": "CVE-2026-45673",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-45673 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:291335f5-0ff1-5678-b4a0-5b8d857c3acc",
      "id": "CVE-2026-45674",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-45674 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:520e9e56-f54f-59ed-ad20-a26835278d28",
      "id": "CVE-2026-46340",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-46340 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4f45edca-cd6c-58f3-9106-2f823956e9f2",
      "id": "CVE-2026-47244",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47244 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b6b07df0-f175-51c0-8d06-bddd3abf9f80",
      "id": "CVE-2026-47691",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47691 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c3984543-c867-5de3-8727-d11823e06c9e",
      "id": "CVE-2026-48006",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-48006 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8b9fc072-72e0-5b7e-9b5d-d3630b5e8bd4",
      "id": "CVE-2026-48043",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-48043 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:566d66dc-cba4-5416-a9ff-9ea3d05f8cd4",
      "id": "CVE-2026-48059",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-48059 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c2b92361-d514-5d0f-b011-3827fc49c760",
      "id": "CVE-2026-50010",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50010 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9b5e9557-6082-5a7f-a67b-ed352a9a7b9f",
      "id": "CVE-2026-50011",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-50011 does not affect version 4.1.130.Final-tuxcare.4 of io.netty:netty-testsuite-http2. Patches already applied: bff98ee51b5d0b7ee25fd5005f2169f2a0467efa (already in target via d5b4e38845f5 'Backport CVE-2026-44890 to 4.1.130.Final')"
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:15c54008-5c87-555a-b480-3d570d6457a0",
      "id": "CVE-2026-50020",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50020 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:941dc2b5-e1d1-5c71-84d9-15dbf72f8423",
      "id": "CVE-2026-50560",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d6f4873d-1423-5cfb-8d42-b8bd3e23f5a5",
      "id": "CVE-2026-55831",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-55831 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:52437b27-fe84-54ca-9329-9abeacd36d09",
      "id": "CVE-2026-55833",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-55833 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:40da9f87-b5db-5dc2-81a3-6ab8ebd524c2",
      "id": "CVE-2026-55851",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-55851 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dedd608c-03da-5efe-a3ac-0f182c00fb33",
      "id": "CVE-2026-56745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-56745 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6afcf8ef-4a68-55d8-a5ff-0328565516dc",
      "id": "CVE-2026-56746",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-56746 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3475d020-95d8-5698-bfe3-de98a2ccc026",
      "id": "CVE-2026-56817",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-56817 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:87958c66-2ecf-5574-a3ee-f754ad32fc0a",
      "id": "CVE-2026-56818",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-56818 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e3adaecc-8945-50c5-98be-c06f1bebf265",
      "id": "CVE-2026-56819",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-56819 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4615fcf5-8b99-503d-83b1-b8d9b5e50f88",
      "id": "CVE-2026-56820",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-56820 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:eb369ea9-a058-5a80-812f-8a3a960c137a",
      "id": "CVE-2026-56821",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-56821 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2e70fb1d-51fd-51a0-81ad-ab089bb1efda",
      "id": "CVE-2026-56822",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-56822 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2e6be2a4-78c2-57e1-b733-c9528b8808ec",
      "id": "CVE-2026-59898",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59898 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dc40352e-e9be-5213-af16-57827f51457a",
      "id": "CVE-2026-59899",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59899 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f9e40f44-8c3b-5c1e-86e9-9308587ebc79",
      "id": "CVE-2026-59900",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59900 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a05159fa-f157-56f1-9673-574b59a445e8",
      "id": "CVE-2026-59901",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59901 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f9f45e1c-f29e-5e29-a673-6f37edd8318f",
      "id": "CVE-2026-59902",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59902 affects version 4.1.130.Final-tuxcare.4 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a87481a0-0d81-58ee-88f7-309c8566b7c9",
      "id": "CVE-2026-59903",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59903 affects version 4.1.130.Final-tuxcare.4 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1b95bcce-a466-52be-b760-285fed0545b6",
      "id": "CVE-2026-59919",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59919 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fbcb30f3-26eb-5fec-8a26-78012ddd7adf",
      "id": "CVE-2026-59920",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59920 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c23c7e29-dc3c-536a-bb98-e1df46ffb940",
      "id": "CVE-2026-59921",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59921 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ae592b9d-3eac-5ef6-b852-226425281b94",
      "id": "CVE-2026-73507",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-73507 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4fd8ef3c-8f60-5747-a3a4-c72484180508",
      "id": "CVE-2026-73508",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-73508 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9e51ebaa-d837-51cb-81c5-f85d220675c3",
      "id": "GHSA-mfg7-5gfp-c4w3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.130.Final-tuxcare.4 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5bbd2227-8a9e-56c6-83f4-245be0cb3ea9",
      "id": "GHSA-v74w-7mr3-4qg3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.130.Final-tuxcare.4 of io.netty:netty-testsuite-http2."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.130.Final-tuxcare.4"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.netty/netty-testsuite-http2@4.1.130.Final-tuxcare.4"
    }
  ]
}