{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:3700001c-56f0-5b4d-a8ac-18c79eead17e",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/io.netty/netty-testsuite-shading@4.1.73.Final-tuxcare.4",
      "type": "library",
      "group": "io.netty",
      "name": "netty-testsuite-shading",
      "version": "4.1.73.Final-tuxcare.4",
      "purl": "pkg:maven/io.netty/netty-testsuite-shading@4.1.73.Final-tuxcare.4"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:5001eb29-c333-591f-85a2-f743496d8ddd",
      "id": "CVE-2022-24823",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-24823 is fixed in version 4.1.73.Final-tuxcare.4 of io.netty:netty-testsuite-shading."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-shading@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:18b1d2de-9eb7-5d33-94b4-0169e651e821",
      "id": "CVE-2022-41881",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-41881 is fixed in version 4.1.73.Final-tuxcare.4 of io.netty:netty-testsuite-shading."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-shading@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:21e68829-a65b-503b-a6e4-ef666a82e762",
      "id": "CVE-2022-41915",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-41915 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-testsuite-shading."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-shading@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:33eca25f-e281-5b05-b2e6-772dff0ecd6e",
      "id": "CVE-2023-34462",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-34462 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-testsuite-shading."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-shading@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6767184a-fbbf-5efb-a3fd-1dd35887c46b",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-44487 is fixed in version 4.1.73.Final-tuxcare.4 of io.netty:netty-testsuite-shading."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-shading@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:11cb82d2-3319-55d5-8b8e-35361a1018a9",
      "id": "CVE-2023-4586",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2023-4586 is a false positive for io.netty:netty-testsuite-shading 4.1.73.Final-tuxcare.4."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-shading@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b6361e81-5791-56bf-b5c5-65b80488c208",
      "id": "CVE-2024-29025",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-29025 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-testsuite-shading."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-shading@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5a15e6b8-858f-5751-b8f2-253c68347ed5",
      "id": "CVE-2024-47535",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-47535 is fixed in version 4.1.73.Final-tuxcare.4 of io.netty:netty-testsuite-shading."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-shading@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:175f4521-639c-51b5-8a37-ab6b892e6f52",
      "id": "CVE-2025-24970",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-24970 is fixed in version 4.1.73.Final-tuxcare.4 of io.netty:netty-testsuite-shading."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-shading@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fce49032-a2bb-53e9-84bd-174e4409506d",
      "id": "CVE-2025-25193",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-25193 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-testsuite-shading."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-shading@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7f1eeb7a-5ae8-5615-8c2b-c31444da7b20",
      "id": "CVE-2025-55163",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-55163 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-testsuite-shading."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-shading@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:47de1341-9fed-531e-a591-e08e733d1399",
      "id": "CVE-2025-58056",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58056 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-testsuite-shading."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-shading@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:102cc1f4-ecf3-5928-9e6d-f7f944755666",
      "id": "CVE-2025-58057",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58057 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-testsuite-shading."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-shading@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6a66ac1f-08be-5d39-82b5-e3bc4ba67795",
      "id": "CVE-2025-59419",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-59419 is fixed in version 4.1.73.Final-tuxcare.4 of io.netty:netty-testsuite-shading."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-shading@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:56739735-8f09-54f2-8828-08a36f4ff897",
      "id": "CVE-2025-67735",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-67735 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-testsuite-shading."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-shading@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1f2cbbb9-bff7-5ca1-9e7e-ec38579fbb4d",
      "id": "CVE-2026-33870",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33870 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-testsuite-shading."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-shading@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:be17d03b-573d-5b13-953c-323e83eb72fc",
      "id": "CVE-2026-33871",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33871 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-testsuite-shading."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-shading@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0e8e51ce-7aa8-5256-9dd9-27709f9996ff",
      "id": "CVE-2026-41417",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41417 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-testsuite-shading."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-shading@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0a6bd2b1-1341-5886-b824-beb1f0890dde",
      "id": "CVE-2026-42577",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42577 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-testsuite-shading."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-shading@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d8b02dea-1c96-5abc-86b1-b4b7ac41f673",
      "id": "CVE-2026-42578",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42578 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-testsuite-shading."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-shading@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:23f7a180-64bc-5122-9c84-2eee1475c3c7",
      "id": "CVE-2026-42579",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42579 is fixed in version 4.1.73.Final-tuxcare.4 of io.netty:netty-testsuite-shading."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-shading@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a2d93b72-fd00-536c-b255-0070bc6ed5d8",
      "id": "CVE-2026-42580",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42580 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-testsuite-shading."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-shading@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:16364430-550c-5cb5-8fc9-b43b12a47e26",
      "id": "CVE-2026-42581",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42581 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-testsuite-shading."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-shading@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:34c46b08-cf43-5cec-9db4-cf0276c96acd",
      "id": "CVE-2026-42583",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42583 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-testsuite-shading."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-shading@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:eb06800b-acd4-540b-8629-6e25455aaea2",
      "id": "CVE-2026-42584",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42584 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-testsuite-shading."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-shading@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f99687e2-36ba-5fdb-a9e5-2873bc023bd8",
      "id": "CVE-2026-42585",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42585 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-testsuite-shading."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-shading@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:efe1beca-67e5-51eb-addb-ec018445dee9",
      "id": "CVE-2026-42586",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42586 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-testsuite-shading."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-shading@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:822de605-246d-578a-b16f-5b0861de736b",
      "id": "CVE-2026-42587",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42587 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-testsuite-shading."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-shading@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:53fcb178-a28a-56e5-b2ea-7be941825732",
      "id": "CVE-2026-44248",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44248 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-testsuite-shading."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-shading@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3c4ae6aa-cf80-5cf5-97f1-732156f2e3c5",
      "id": "CVE-2026-44249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44249 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-testsuite-shading."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-shading@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a4152942-7f0e-539a-a0e9-1a6a93d40ee2",
      "id": "CVE-2026-44250",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44250 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-testsuite-shading."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-shading@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b08ecdde-7bb9-562b-83b6-085ffdfa0989",
      "id": "CVE-2026-44890",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.73.Final-tuxcare.4 of io.netty:netty-testsuite-shading."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-shading@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e64aa28e-4336-5cf2-ac05-fae583bcb327",
      "id": "CVE-2026-44891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44891 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-testsuite-shading."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-shading@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:16ed395c-6a47-543e-9d41-73b17d253350",
      "id": "CVE-2026-44893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44893 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-testsuite-shading."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-shading@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a4102e18-67b3-5ea2-99a4-dd9d3f77c08f",
      "id": "CVE-2026-45416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45416 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-testsuite-shading."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-shading@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:28f7e730-8ebd-579b-9817-ad7c5cf5d093",
      "id": "CVE-2026-45536",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45536 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-testsuite-shading."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-shading@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f518ed8e-ff7e-57ab-9e12-f7dd77ed89e6",
      "id": "CVE-2026-45673",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45673 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-testsuite-shading."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-shading@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dd3cd3b6-2774-5448-9c34-a689e65d8c8e",
      "id": "CVE-2026-45674",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-45674 is fixed in version 4.1.73.Final-tuxcare.4 of io.netty:netty-testsuite-shading."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-shading@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3695150e-46ca-5c2c-9686-c817378b64cb",
      "id": "CVE-2026-46340",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-46340 is fixed in version 4.1.73.Final-tuxcare.4 of io.netty:netty-testsuite-shading."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-shading@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:397fba31-c721-5c8d-806b-952c74221878",
      "id": "CVE-2026-47244",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47244 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-testsuite-shading."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-shading@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0170d52f-cc7f-552c-9b95-366f1e850f94",
      "id": "CVE-2026-47691",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47691 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-testsuite-shading."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-shading@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9446d5d1-a1e1-5417-8a91-2e444df0b0f7",
      "id": "CVE-2026-48006",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48006 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-testsuite-shading."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-shading@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d5bce037-4b54-5432-a119-3dfebd0a36e0",
      "id": "CVE-2026-48043",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-48043 does not affect version 4.1.73.Final-tuxcare.4 of io.netty:netty-testsuite-shading. not_affected \u2014 Version 4.1.73 is not affected by CVE-2026-48043. The target uses a loop-based architecture with try-finally protection (introduced in 2016) that prevents the buffer leak described in the CVE. The vulnerable ChannelInboundHandlerAdapter pattern that the upstream patch fixes does not exist in this version."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-shading@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c31aa720-d0b2-5096-9bec-6adb4bf6c3d6",
      "id": "CVE-2026-48059",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48059 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-testsuite-shading."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-shading@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a51df4e3-bba8-504c-a4c0-740b2848a6cd",
      "id": "CVE-2026-50010",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50010 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-testsuite-shading."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-shading@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cf9e8762-f70c-5f1e-8bda-4093220a1223",
      "id": "CVE-2026-50011",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50011 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-testsuite-shading."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-shading@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5b42c632-51ac-5932-a0df-e7696bb06b17",
      "id": "CVE-2026-50020",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50020 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-testsuite-shading."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-shading@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:db24db38-ffb5-5fad-8e64-c79aa1c1b1ec",
      "id": "CVE-2026-50560",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.73.Final-tuxcare.4 of io.netty:netty-testsuite-shading."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-shading@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1efd5896-419b-5800-bb62-a89036cd70f6",
      "id": "CVE-2026-55831",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55831 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-testsuite-shading."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-shading@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:49c0efeb-4428-5e2f-80f7-f7f7d80861f1",
      "id": "CVE-2026-55833",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55833 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-testsuite-shading."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-shading@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0e0041ea-c72a-5537-99e5-daca50586920",
      "id": "CVE-2026-55851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55851 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-testsuite-shading."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-shading@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2ccc4263-e782-5a93-8779-3eb333843856",
      "id": "CVE-2026-56745",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56745 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-testsuite-shading."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-shading@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dc0677ab-75ef-5cad-9959-1c2dd7443996",
      "id": "CVE-2026-56746",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56746 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-testsuite-shading."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-shading@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b674403d-b0fa-53bf-aed6-c2fdff0c9b2e",
      "id": "CVE-2026-56817",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56817 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-testsuite-shading."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-shading@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cca14591-66dc-52ef-83f2-758fe819279b",
      "id": "CVE-2026-56818",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-56818 does not affect version 4.1.73.Final-tuxcare.4 of io.netty:netty-testsuite-shading. not_affected \u2014 The target version 4.1.73.Final-tuxcare.2 is NOT AFFECTED by CVE-2026-56818. The vulnerable code pattern (configurable `maxElements` limit check without cleanup, contrasting with `maxNestedArrayDepth` limit check WITH cleanup) was introduced in version 4.1.135.Final through commits e51c64c964 and 728c98b8ec (dated 2026-06-01/02). The target version predates these features entirely and does not ..."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-shading@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:aa754caa-9a78-58eb-b51c-5c4ee8588b81",
      "id": "CVE-2026-56819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56819 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-testsuite-shading."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-shading@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fa4cab1b-5207-5cb5-b086-be5101bd01d2",
      "id": "CVE-2026-59898",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59898 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-testsuite-shading."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-shading@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c2ecdccb-bc36-5aa6-aded-d42149ca803f",
      "id": "CVE-2026-59899",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59899 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-testsuite-shading."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-shading@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2867025f-3b5e-5189-97f2-9d3ba7e4c5ed",
      "id": "CVE-2026-59900",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59900 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-testsuite-shading."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-shading@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:89bde9e8-ed06-554d-a8c2-50f4a6bca87a",
      "id": "CVE-2026-59901",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59901 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-testsuite-shading."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-shading@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4e4d6e08-d7b0-5545-b79a-91ffab955b6b",
      "id": "CVE-2026-59902",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59902 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-testsuite-shading."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-shading@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:602941ca-2d2b-5219-9a70-1118f330f7b7",
      "id": "CVE-2026-59903",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59903 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-testsuite-shading."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-shading@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e7fb3761-4b1d-5e81-a72f-dcf148d37b69",
      "id": "CVE-2026-59919",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59919 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-testsuite-shading."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-shading@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6a2e83ff-6fb1-5bd9-bd4c-15ec6af115f7",
      "id": "CVE-2026-59920",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59920 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-testsuite-shading."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-shading@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:04b9599d-da4f-52b7-8f20-4f14de08e989",
      "id": "CVE-2026-59921",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59921 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-testsuite-shading."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-shading@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6dc3cd39-4a8c-5f02-b6cb-b5aa833c49e3",
      "id": "CVE-2026-73507",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-73507 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-testsuite-shading."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-shading@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e8e9d3cf-5ab2-51b2-9406-95e112c497a2",
      "id": "CVE-2026-73508",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-73508 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-testsuite-shading."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-shading@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1f30db59-3ecf-58ca-b713-252a654e7c92",
      "id": "GHSA-mfg7-5gfp-c4w3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-testsuite-shading."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-shading@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:faec84d1-18a2-5bae-a539-2d0bcb6a1183",
      "id": "GHSA-v74w-7mr3-4qg3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-testsuite-shading."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-shading@4.1.73.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c6524d0f-56e5-5791-9884-d8ef345fdd29",
      "id": "GHSA-xpw8-rcwv-8f8p",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-xpw8-rcwv-8f8p affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-testsuite-shading."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-testsuite-shading@4.1.73.Final-tuxcare.4"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.netty/netty-testsuite-shading@4.1.73.Final-tuxcare.4"
    }
  ]
}