{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:f6543585-ce14-5cce-80f5-da80065da29a", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/io.netty/netty-transport-native-epoll@4.1.73.Final-tuxcare.4", "type": "library", "group": "io.netty", "name": "netty-transport-native-epoll", "version": "4.1.73.Final-tuxcare.4", "purl": "pkg:maven/io.netty/netty-transport-native-epoll@4.1.73.Final-tuxcare.4" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:a4a48861-781f-552e-8040-195ad39e08ac", "id": "CVE-2022-24823", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-24823 is fixed in version 4.1.73.Final-tuxcare.4 of io.netty:netty-transport-native-epoll." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-native-epoll@4.1.73.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:5556bc54-9086-555c-a843-e27f6a55a77e", "id": "CVE-2022-41881", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-41881 is fixed in version 4.1.73.Final-tuxcare.4 of io.netty:netty-transport-native-epoll." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-native-epoll@4.1.73.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:738a30e7-d934-5271-8173-c2c8fc97dd8f", "id": "CVE-2022-41915", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-41915 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-transport-native-epoll." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-native-epoll@4.1.73.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:27af7023-8886-5a79-bda2-85547c329c7a", "id": "CVE-2023-34462", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-34462 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-transport-native-epoll." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-native-epoll@4.1.73.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:72d86bc9-cd19-5d81-8974-686c2529a2c1", "id": "CVE-2023-44487", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-44487 is fixed in version 4.1.73.Final-tuxcare.4 of io.netty:netty-transport-native-epoll." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-native-epoll@4.1.73.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:0aac2ab2-bcc5-57c6-b619-a55766614406", "id": "CVE-2023-4586", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2023-4586 is a false positive for io.netty:netty-transport-native-epoll 4.1.73.Final-tuxcare.4." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-native-epoll@4.1.73.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:ae1d3a3f-b67d-55e9-a2e8-6d8fab0955a6", "id": "CVE-2024-29025", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-29025 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-transport-native-epoll." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-native-epoll@4.1.73.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:febd43f3-890a-5240-b80a-e55b8b007496", "id": "CVE-2024-47535", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-47535 is fixed in version 4.1.73.Final-tuxcare.4 of io.netty:netty-transport-native-epoll." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-native-epoll@4.1.73.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:acd1bc96-1117-555b-aa81-ceaedea869b9", "id": "CVE-2025-24970", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-24970 is fixed in version 4.1.73.Final-tuxcare.4 of io.netty:netty-transport-native-epoll." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-native-epoll@4.1.73.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:9eff9789-95e6-5a16-9699-43ffe68dfa5d", "id": "CVE-2025-25193", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-25193 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-transport-native-epoll." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-native-epoll@4.1.73.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:99c4a483-d996-5014-8390-dc27b36cf55b", "id": "CVE-2025-55163", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-55163 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-transport-native-epoll." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-native-epoll@4.1.73.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:5890548e-ee56-56de-8a69-13e6c3888e80", "id": "CVE-2025-58056", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-58056 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-transport-native-epoll." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-native-epoll@4.1.73.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:d8448977-ee6f-564b-862c-ae12f5df6488", "id": "CVE-2025-58057", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-58057 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-transport-native-epoll." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-native-epoll@4.1.73.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:5b5f7cdc-27cf-5766-b8c5-7e03b640b9db", "id": "CVE-2025-59419", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59419 is fixed in version 4.1.73.Final-tuxcare.4 of io.netty:netty-transport-native-epoll." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-native-epoll@4.1.73.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:60d186fa-6fb7-55d1-8ab2-db4b00e4fd39", "id": "CVE-2025-67735", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-67735 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-transport-native-epoll." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-native-epoll@4.1.73.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:00ffcf61-1d4b-59f6-8111-48f838293e7c", "id": "CVE-2026-33870", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33870 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-transport-native-epoll." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-native-epoll@4.1.73.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:1d18478e-485d-5228-b576-b206b34bf444", "id": "CVE-2026-33871", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33871 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-transport-native-epoll." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-native-epoll@4.1.73.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:9031297f-3c88-5aac-81e0-1d7407df5bf5", "id": "CVE-2026-41417", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41417 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-transport-native-epoll." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-native-epoll@4.1.73.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:62d45db1-4379-5fa4-8515-1fcd9e55cfa8", "id": "CVE-2026-42577", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42577 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-transport-native-epoll." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-native-epoll@4.1.73.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:005ac58f-b21b-5a25-a69b-7eb3c63e9069", "id": "CVE-2026-42578", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42578 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-transport-native-epoll." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-native-epoll@4.1.73.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:eb7ce073-7a56-51f2-9cee-03e084957010", "id": "CVE-2026-42579", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42579 is fixed in version 4.1.73.Final-tuxcare.4 of io.netty:netty-transport-native-epoll." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-native-epoll@4.1.73.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:b52057d0-9268-5e38-ae23-9454278a736d", "id": "CVE-2026-42580", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42580 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-transport-native-epoll." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-native-epoll@4.1.73.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:3386aaf4-a3d2-5351-a4f5-d79b34a7a5b2", "id": "CVE-2026-42581", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42581 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-transport-native-epoll." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-native-epoll@4.1.73.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:9d089b34-ece1-5925-a652-d8628be92416", "id": "CVE-2026-42583", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42583 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-transport-native-epoll." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-native-epoll@4.1.73.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:04ab3f98-4568-50ca-99c0-b0ba388af11b", "id": "CVE-2026-42584", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42584 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-transport-native-epoll." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-native-epoll@4.1.73.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:aca03ce1-f014-5311-9933-d705cfff9d31", "id": "CVE-2026-42585", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42585 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-transport-native-epoll." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-native-epoll@4.1.73.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:c1b725df-f0ad-548e-8a23-f226fd778a73", "id": "CVE-2026-42586", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42586 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-transport-native-epoll." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-native-epoll@4.1.73.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:2f4862a5-94e5-54fc-9e89-02ff02e111bd", "id": "CVE-2026-42587", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42587 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-transport-native-epoll." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-native-epoll@4.1.73.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:bd2eb412-d498-5116-aa40-3612a9c1afe8", "id": "CVE-2026-44248", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44248 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-transport-native-epoll." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-native-epoll@4.1.73.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:850e5735-c642-5129-b132-d79f734a2b1d", "id": "CVE-2026-44249", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44249 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-transport-native-epoll." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-native-epoll@4.1.73.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:23ff5e0a-562d-5bf3-a3ff-d78f5b99b8aa", "id": "CVE-2026-44250", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44250 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-transport-native-epoll." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-native-epoll@4.1.73.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:64a96a7b-0629-50f4-9e11-423d16f2ac08", "id": "CVE-2026-44890", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.73.Final-tuxcare.4 of io.netty:netty-transport-native-epoll." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-native-epoll@4.1.73.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:fb0e5754-46bc-5121-90c4-ac6c376a20e6", "id": "CVE-2026-44891", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44891 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-transport-native-epoll." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-native-epoll@4.1.73.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:d660de3c-73a8-51bb-aa9e-bc634d99030c", "id": "CVE-2026-44893", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44893 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-transport-native-epoll." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-native-epoll@4.1.73.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:0aafb5f9-2855-5345-9bdd-8b0e4a4d901e", "id": "CVE-2026-45416", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45416 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-transport-native-epoll." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-native-epoll@4.1.73.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:042c904d-2247-573b-8faf-80105db0d9e5", "id": "CVE-2026-45536", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45536 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-transport-native-epoll." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-native-epoll@4.1.73.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:edf7d181-e9f1-545c-a3c1-8091824c31cd", "id": "CVE-2026-45673", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45673 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-transport-native-epoll." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-native-epoll@4.1.73.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:455702d6-be20-5136-946c-5550e87c2ec3", "id": "CVE-2026-45674", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-45674 is fixed in version 4.1.73.Final-tuxcare.4 of io.netty:netty-transport-native-epoll." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-native-epoll@4.1.73.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:2e6741db-7fa5-5e18-a399-661556d73108", "id": "CVE-2026-46340", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46340 is fixed in version 4.1.73.Final-tuxcare.4 of io.netty:netty-transport-native-epoll." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-native-epoll@4.1.73.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:f1a2d916-cbc6-50ac-ae95-b175adb33793", "id": "CVE-2026-47244", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47244 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-transport-native-epoll." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-native-epoll@4.1.73.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:b4b57866-0219-5aa6-ae6c-9cbd7b7538ae", "id": "CVE-2026-47691", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47691 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-transport-native-epoll." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-native-epoll@4.1.73.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:49483c71-8581-5fe4-9665-519826aa32c7", "id": "CVE-2026-48006", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-48006 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-transport-native-epoll." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-native-epoll@4.1.73.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:553a8a30-2e49-599b-b3c6-dd7f66e3ce80", "id": "CVE-2026-48043", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-48043 does not affect version 4.1.73.Final-tuxcare.4 of io.netty:netty-transport-native-epoll. not_affected \u2014 Version 4.1.73 is not affected by CVE-2026-48043. The target uses a loop-based architecture with try-finally protection (introduced in 2016) that prevents the buffer leak described in the CVE. The vulnerable ChannelInboundHandlerAdapter pattern that the upstream patch fixes does not exist in this version." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-native-epoll@4.1.73.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:b016b065-62f3-5387-9c9c-565c95e5f21c", "id": "CVE-2026-48059", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-48059 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-transport-native-epoll." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-native-epoll@4.1.73.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:e0e15e47-87ea-5cee-ad7e-34f499933e5b", "id": "CVE-2026-50010", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50010 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-transport-native-epoll." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-native-epoll@4.1.73.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:8af8b856-bdbb-5a93-bc34-b73c6ecc4a13", "id": "CVE-2026-50011", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50011 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-transport-native-epoll." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-native-epoll@4.1.73.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:4b272209-064d-5594-ae92-d147efec3872", "id": "CVE-2026-50020", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50020 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-transport-native-epoll." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-native-epoll@4.1.73.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:5db98896-efd2-58a8-9410-9aa4cf7886fc", "id": "CVE-2026-50560", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.73.Final-tuxcare.4 of io.netty:netty-transport-native-epoll." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-native-epoll@4.1.73.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:3fe05404-124e-59a3-bc1b-87ca784f3fc5", "id": "CVE-2026-55831", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55831 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-transport-native-epoll." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-native-epoll@4.1.73.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:222879c2-585a-57fd-8a20-769b13ed557d", "id": "CVE-2026-55833", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55833 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-transport-native-epoll." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-native-epoll@4.1.73.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:19b785a3-5dd5-5dba-b9c0-d7c15c556534", "id": "CVE-2026-55851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55851 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-transport-native-epoll." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-native-epoll@4.1.73.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:c9fd5f0a-a2f7-574c-b901-cc20eb941363", "id": "CVE-2026-56745", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56745 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-transport-native-epoll." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-native-epoll@4.1.73.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:2e1152bb-fbc6-5e50-8aac-90767240e4d9", "id": "CVE-2026-56746", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56746 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-transport-native-epoll." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-native-epoll@4.1.73.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:c032b541-ea5b-5967-9720-a0d47ac9732a", "id": "CVE-2026-56817", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56817 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-transport-native-epoll." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-native-epoll@4.1.73.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:3ffb4bb0-797f-5eb6-b7af-3e299db20d0a", "id": "CVE-2026-56818", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-56818 does not affect version 4.1.73.Final-tuxcare.4 of io.netty:netty-transport-native-epoll. not_affected \u2014 The target version 4.1.73.Final-tuxcare.2 is NOT AFFECTED by CVE-2026-56818. The vulnerable code pattern (configurable `maxElements` limit check without cleanup, contrasting with `maxNestedArrayDepth` limit check WITH cleanup) was introduced in version 4.1.135.Final through commits e51c64c964 and 728c98b8ec (dated 2026-06-01/02). The target version predates these features entirely and does not ..." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-native-epoll@4.1.73.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:67a576bc-d82d-524a-b6e9-b5ccefdbfc0b", "id": "CVE-2026-56819", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56819 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-transport-native-epoll." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-native-epoll@4.1.73.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:ac35a30d-d4bd-5406-9f71-e6d588833ac4", "id": "CVE-2026-59898", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59898 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-transport-native-epoll." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-native-epoll@4.1.73.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:da2f22ad-0e5c-5f42-a1a6-574392dd0e18", "id": "CVE-2026-59899", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59899 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-transport-native-epoll." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-native-epoll@4.1.73.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:660c5ba6-ecb9-56fe-8d7a-28bf8fb16905", "id": "CVE-2026-59900", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59900 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-transport-native-epoll." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-native-epoll@4.1.73.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:21d73454-7ac0-523a-8b0b-24e779c789e2", "id": "CVE-2026-59901", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59901 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-transport-native-epoll." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-native-epoll@4.1.73.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:30334918-7cac-53fe-a4d1-7dedd76a18ac", "id": "CVE-2026-59902", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59902 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-transport-native-epoll." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-native-epoll@4.1.73.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:ff8a35c2-cdeb-5bd1-96bf-8c96b12fecf9", "id": "CVE-2026-59903", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59903 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-transport-native-epoll." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-native-epoll@4.1.73.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:2108ff78-e572-5625-82a0-1c315abc04af", "id": "CVE-2026-59919", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59919 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-transport-native-epoll." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-native-epoll@4.1.73.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:3d47a115-c837-57ea-9d39-9a8066fa773a", "id": "CVE-2026-59920", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59920 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-transport-native-epoll." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-native-epoll@4.1.73.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:2644b86b-6170-555a-8e2d-e3eb50aa3f80", "id": "CVE-2026-59921", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59921 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-transport-native-epoll." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-native-epoll@4.1.73.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:c03981cd-1c4e-5490-ae38-be0d67c108e0", "id": "CVE-2026-73507", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-73507 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-transport-native-epoll." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-native-epoll@4.1.73.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:95a134f4-6d98-55ca-8853-5146ac9e05d1", "id": "CVE-2026-73508", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-73508 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-transport-native-epoll." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-native-epoll@4.1.73.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:ec01a040-bb84-5c57-9f77-08d99bff3b5f", "id": "GHSA-mfg7-5gfp-c4w3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-transport-native-epoll." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-native-epoll@4.1.73.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:61bdaf84-eaab-5c38-ac2a-07092de2589e", "id": "GHSA-v74w-7mr3-4qg3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-transport-native-epoll." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-native-epoll@4.1.73.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:02cdb870-359f-53c8-9f97-83c8c269dbc1", "id": "GHSA-xpw8-rcwv-8f8p", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-xpw8-rcwv-8f8p affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-transport-native-epoll." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-native-epoll@4.1.73.Final-tuxcare.4" } ] } ], "dependencies": [ { "ref": "pkg:maven/io.netty/netty-transport-native-epoll@4.1.73.Final-tuxcare.4" } ] }