{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:9aca8e48-addb-5307-b7e2-ff1da9d31913",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/io.netty/netty-testsuite-osgi@4.1.73.Final-tuxcare.4",
      "type": "library",
      "group": "io.netty",
      "name": "netty-testsuite-osgi",
      "version": "4.1.73.Final-tuxcare.4",
      "purl": "pkg:maven/io.netty/netty-testsuite-osgi@4.1.73.Final-tuxcare.4"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:9e5a1e4d-e2ec-5f34-b8f6-c54f960cd0ce",
      "id": "CVE-2022-24823",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-24823 is fixed in version 4.1.73.Final-tuxcare.4 of io.netty:netty-testsuite-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-osgi@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8726c3ba-073f-593f-abf9-1194f49f5c98",
      "id": "CVE-2022-41881",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-41881 is fixed in version 4.1.73.Final-tuxcare.4 of io.netty:netty-testsuite-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-osgi@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7ed0a418-5a7f-51a5-a368-a61f4dcbc51b",
      "id": "CVE-2022-41915",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-41915 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-testsuite-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-osgi@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:553c1df7-39b9-52d4-8d5a-ce33e60a3c04",
      "id": "CVE-2023-34462",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-34462 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-testsuite-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-osgi@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f5414d51-755b-57f9-8327-bf128a5f15e7",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-44487 is fixed in version 4.1.73.Final-tuxcare.4 of io.netty:netty-testsuite-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-osgi@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:76523fb2-82cf-5c3c-8743-c16e39ff0523",
      "id": "CVE-2023-4586",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2023-4586 is a false positive for io.netty:netty-testsuite-osgi 4.1.73.Final-tuxcare.4."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-osgi@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:059645d0-1b8c-5c75-a4a8-ed8e6eee7374",
      "id": "CVE-2024-29025",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-29025 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-testsuite-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-osgi@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b0704bc5-0d17-5239-9efc-ecb405a46c19",
      "id": "CVE-2024-47535",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-47535 is fixed in version 4.1.73.Final-tuxcare.4 of io.netty:netty-testsuite-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-osgi@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:25ad8883-ca7f-53b8-a462-4c0bd5abd5ae",
      "id": "CVE-2025-24970",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-24970 is fixed in version 4.1.73.Final-tuxcare.4 of io.netty:netty-testsuite-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-osgi@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c967db18-8392-5c2b-937d-10ffa7d079f8",
      "id": "CVE-2025-25193",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-25193 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-testsuite-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-osgi@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:958ff6dd-6967-5f7d-80a0-1ec7b64ee440",
      "id": "CVE-2025-55163",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-55163 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-testsuite-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-osgi@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:99a05ca8-1891-5dd9-b423-0731cb7e30c7",
      "id": "CVE-2025-58056",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58056 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-testsuite-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-osgi@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4c905636-65c1-50bc-8f3a-481200141d22",
      "id": "CVE-2025-58057",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58057 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-testsuite-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-osgi@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3421c530-1275-541d-b211-788072e830b1",
      "id": "CVE-2025-59419",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-59419 is fixed in version 4.1.73.Final-tuxcare.4 of io.netty:netty-testsuite-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-osgi@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:40caa2d4-79ac-5fc3-8b9b-2fbf2d7b5bfd",
      "id": "CVE-2025-67735",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-67735 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-testsuite-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-osgi@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a5e0b85e-879d-5f76-998a-7233b8777ce4",
      "id": "CVE-2026-33870",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33870 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-testsuite-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-osgi@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5fb079d4-2051-5678-9d69-1903c4f5c2f8",
      "id": "CVE-2026-33871",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33871 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-testsuite-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-osgi@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:41fec1a5-d7aa-5cf4-9c89-5911d1096cc4",
      "id": "CVE-2026-41417",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41417 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-testsuite-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-osgi@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:77b75f7b-c0d4-501e-8d10-4d5e9d4cbcb9",
      "id": "CVE-2026-42577",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42577 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-testsuite-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-osgi@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2d4f39c7-1624-5580-bce8-48b15693040b",
      "id": "CVE-2026-42578",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42578 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-testsuite-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-osgi@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e19613ab-5dbd-5126-be41-5c7e41289636",
      "id": "CVE-2026-42579",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42579 is fixed in version 4.1.73.Final-tuxcare.4 of io.netty:netty-testsuite-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-osgi@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:77914a18-cecc-5cd7-9b6d-1bdf32bbf82c",
      "id": "CVE-2026-42580",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42580 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-testsuite-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-osgi@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c7fcc530-8162-5ad6-a180-d2f98ff9be5d",
      "id": "CVE-2026-42581",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42581 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-testsuite-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-osgi@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ee7ff8df-b632-5988-b9cf-926fff94768c",
      "id": "CVE-2026-42583",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42583 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-testsuite-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-osgi@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:03587778-36f2-530b-993a-06623c8d1255",
      "id": "CVE-2026-42584",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42584 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-testsuite-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-osgi@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9973c337-a8d0-512c-be70-73e15915a1bc",
      "id": "CVE-2026-42585",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42585 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-testsuite-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-osgi@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d80cb9ea-71a0-5d89-a6e0-1831d3bd5047",
      "id": "CVE-2026-42586",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42586 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-testsuite-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-osgi@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:11ab9b2c-fe30-511a-8ea2-bf6f88bde183",
      "id": "CVE-2026-42587",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42587 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-testsuite-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-osgi@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6cc434fe-c0c8-53f7-9146-b10bb1027cc5",
      "id": "CVE-2026-44248",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44248 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-testsuite-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-osgi@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3d434bbb-2f6f-5c33-92ad-12bd8e895577",
      "id": "CVE-2026-44249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44249 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-testsuite-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-osgi@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:60a8f9da-0c83-5b96-a9b9-3a671e3f7a9c",
      "id": "CVE-2026-44250",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44250 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-testsuite-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-osgi@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6d8ffffb-14f8-5efb-a879-b7570724910d",
      "id": "CVE-2026-44890",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.73.Final-tuxcare.4 of io.netty:netty-testsuite-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-osgi@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9e467dc9-c08c-5dae-97fd-09228c4a480a",
      "id": "CVE-2026-44891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44891 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-testsuite-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-osgi@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:927fef3c-0d11-5074-99e3-32653bb5d072",
      "id": "CVE-2026-44893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44893 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-testsuite-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-osgi@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c1cf53f2-dbc1-5a82-88f5-473a7a902888",
      "id": "CVE-2026-45416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45416 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-testsuite-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-osgi@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:21895ba0-2486-59cb-96db-30ab7bfc57c2",
      "id": "CVE-2026-45536",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45536 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-testsuite-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-osgi@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c690b4b2-28d7-5963-853c-d65c32fcec96",
      "id": "CVE-2026-45673",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45673 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-testsuite-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-osgi@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a41c585b-9d9e-52aa-bed3-cdcf44d3ee0f",
      "id": "CVE-2026-45674",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-45674 is fixed in version 4.1.73.Final-tuxcare.4 of io.netty:netty-testsuite-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-osgi@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:65b81886-b933-53c6-beac-ffe24ffc8578",
      "id": "CVE-2026-46340",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-46340 is fixed in version 4.1.73.Final-tuxcare.4 of io.netty:netty-testsuite-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-osgi@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1d39cb8b-ed74-5ddf-8bab-5064fe0aa6de",
      "id": "CVE-2026-47244",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47244 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-testsuite-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-osgi@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:af94a3e5-1665-5115-98e7-e9ee9c1d8a70",
      "id": "CVE-2026-47691",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47691 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-testsuite-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-osgi@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ad1daae2-3e26-519c-b798-eff67700f3a9",
      "id": "CVE-2026-48006",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48006 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-testsuite-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-osgi@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f1895559-502d-5383-aab6-b3fec69cbe6f",
      "id": "CVE-2026-48043",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-48043 does not affect version 4.1.73.Final-tuxcare.4 of io.netty:netty-testsuite-osgi. not_affected \u2014 Version 4.1.73 is not affected by CVE-2026-48043. The target uses a loop-based architecture with try-finally protection (introduced in 2016) that prevents the buffer leak described in the CVE. The vulnerable ChannelInboundHandlerAdapter pattern that the upstream patch fixes does not exist in this version."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-osgi@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b8db8e1b-0ceb-5985-b105-38aebf9292f3",
      "id": "CVE-2026-48059",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48059 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-testsuite-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-osgi@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:00d100f6-bed4-56d6-94fc-b774e65437a0",
      "id": "CVE-2026-50010",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50010 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-testsuite-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-osgi@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c7aa4c58-c9b1-55bb-a90e-24d3b16229a6",
      "id": "CVE-2026-50011",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50011 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-testsuite-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-osgi@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2e484c1e-8b71-5c2f-9189-97d4247daeb2",
      "id": "CVE-2026-50020",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50020 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-testsuite-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-osgi@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:52f6abe4-a2f5-5983-b586-a3e204b5412b",
      "id": "CVE-2026-50560",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.73.Final-tuxcare.4 of io.netty:netty-testsuite-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-osgi@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:526b4042-d65d-5aff-971c-0b900afed5e1",
      "id": "CVE-2026-55831",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55831 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-testsuite-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-osgi@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5f63340f-2b89-566c-8ad7-7df5ef20a064",
      "id": "CVE-2026-55833",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55833 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-testsuite-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-osgi@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cd8a026f-c9c3-5cf1-ac28-ef4a9c98f234",
      "id": "CVE-2026-55851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55851 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-testsuite-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-osgi@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:976561d2-cc26-579f-bd12-13a0fa9350da",
      "id": "CVE-2026-56745",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56745 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-testsuite-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-osgi@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:34627b96-68fb-5837-b0f5-608c54dfadb3",
      "id": "CVE-2026-56746",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56746 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-testsuite-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-osgi@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:14888831-08e7-5585-b89b-21728a4a7376",
      "id": "CVE-2026-56817",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56817 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-testsuite-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-osgi@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c56a5016-09cf-5e14-bf29-690bf0539333",
      "id": "CVE-2026-56818",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-56818 does not affect version 4.1.73.Final-tuxcare.4 of io.netty:netty-testsuite-osgi. not_affected \u2014 The target version 4.1.73.Final-tuxcare.2 is NOT AFFECTED by CVE-2026-56818. The vulnerable code pattern (configurable `maxElements` limit check without cleanup, contrasting with `maxNestedArrayDepth` limit check WITH cleanup) was introduced in version 4.1.135.Final through commits e51c64c964 and 728c98b8ec (dated 2026-06-01/02). The target version predates these features entirely and does not ..."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-osgi@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0b371348-4d42-55a1-bc98-a634df989c8f",
      "id": "CVE-2026-56819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56819 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-testsuite-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-osgi@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:404ede42-5b48-54b3-8ee6-544c4a8f808a",
      "id": "CVE-2026-59898",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59898 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-testsuite-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-osgi@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b30bf105-602d-58b0-b9f4-d3526d4c3c1a",
      "id": "CVE-2026-59899",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59899 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-testsuite-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-osgi@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d7dace24-65f6-5ebf-91cc-376198f9b1f5",
      "id": "CVE-2026-59900",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59900 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-testsuite-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-osgi@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b7f96b40-c2d1-5d37-9f70-191fda28c32b",
      "id": "CVE-2026-59901",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59901 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-testsuite-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-osgi@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b8728448-ec30-558f-a261-b8e2b5b5bec6",
      "id": "CVE-2026-59902",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59902 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-testsuite-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-osgi@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:23dd4404-369f-513c-b249-edca86bc303c",
      "id": "CVE-2026-59903",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59903 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-testsuite-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-osgi@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d8236ea1-7a4b-5d07-a832-6260d028a1c2",
      "id": "CVE-2026-59919",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59919 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-testsuite-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-osgi@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4019ecbc-ebd9-5932-baee-9ea91499290e",
      "id": "CVE-2026-59920",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59920 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-testsuite-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-osgi@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e1dfc026-e9b8-5f4e-97f4-005a969e45fc",
      "id": "CVE-2026-59921",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59921 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-testsuite-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-osgi@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:00a91b24-94ff-5d26-b402-23e784ea61cd",
      "id": "CVE-2026-73507",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-73507 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-testsuite-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-osgi@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:232eb8a1-64d4-53bc-bfef-27870586ac55",
      "id": "CVE-2026-73508",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-73508 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-testsuite-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-osgi@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4f5c4f0a-e77b-5d5b-b8ea-0f2e86518d37",
      "id": "GHSA-mfg7-5gfp-c4w3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-testsuite-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-osgi@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:db7a98bf-a480-5eab-8bd7-0704dd5275da",
      "id": "GHSA-v74w-7mr3-4qg3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-testsuite-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-osgi@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:25c1708c-2c29-561d-bfa6-298e24002e35",
      "id": "GHSA-xpw8-rcwv-8f8p",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-xpw8-rcwv-8f8p affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-testsuite-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-osgi@4.1.73.Final-tuxcare.4"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.netty/netty-testsuite-osgi@4.1.73.Final-tuxcare.4"
    }
  ]
}