{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:fb6321fb-84c7-546b-a1bb-9f513874366f",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.63.Final-tuxcare.5",
      "type": "library",
      "group": "io.netty",
      "name": "netty-transport-native-kqueue",
      "version": "4.1.63.Final-tuxcare.5",
      "purl": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.63.Final-tuxcare.5"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:bccb87ec-60a4-54fe-9adb-043de7309329",
      "id": "CVE-2021-37136",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-37136 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0d107dc4-20c2-5179-a359-9f93624b29fb",
      "id": "CVE-2021-37137",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-37137 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2632cfe4-1777-5477-80fb-7da85a7f3e95",
      "id": "CVE-2021-43797",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-43797 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:caa38347-6d1c-5e94-b9e8-1df41fe6db71",
      "id": "CVE-2022-24823",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-24823 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1ade789e-ae8b-5590-a6cc-3ead69afa197",
      "id": "CVE-2022-41881",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-41881 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6ce89d42-5be0-599f-9784-8e88d79b1280",
      "id": "CVE-2022-41915",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-41915 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b0808f72-fa46-5369-87e7-ebac630a4814",
      "id": "CVE-2023-34462",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-34462 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e2d78846-f047-5948-9c20-dc4da802de74",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-44487 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5e89d1d6-3d14-5ada-8bd3-b8d316346a63",
      "id": "CVE-2023-4586",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2023-4586 is a false positive for io.netty:netty-transport-native-kqueue 4.1.63.Final-tuxcare.5."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cdd203c8-7fad-5e27-aada-07d2d2ba29d5",
      "id": "CVE-2024-29025",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-29025 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6d65eb74-6220-5fab-ad3f-c3386167e210",
      "id": "CVE-2024-47535",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-47535 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:38847442-0740-5ed6-be8b-4b26232c3623",
      "id": "CVE-2025-24970",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-24970 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f523c7ca-879f-55a7-a558-bd296a4c7137",
      "id": "CVE-2025-25193",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-25193 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f40a4374-be80-5e15-8667-e66dc599d6ff",
      "id": "CVE-2025-55163",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55163 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:faf6f33c-08a5-52d1-8e74-4d6262cca890",
      "id": "CVE-2025-58056",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58056 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4a16dd4f-208b-5ee2-9d87-4c13cd51c7c9",
      "id": "CVE-2025-58057",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-58057 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:29095437-96a2-5e3c-8779-b68058b2e567",
      "id": "CVE-2025-59419",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-59419 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f4671ae1-3a26-5183-8c58-434812ece3fc",
      "id": "CVE-2025-67735",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-67735 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9ff56b8d-dfc1-5d44-9e84-eaab8e8973bf",
      "id": "CVE-2026-33870",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33870 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:37b6901f-ecfc-5319-9834-c3541c733c52",
      "id": "CVE-2026-33871",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33871 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:43c350c2-ea4f-5356-a899-e5482f1fb8e7",
      "id": "CVE-2026-41417",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41417 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e851f52c-7eb3-532d-b23e-979b9bca0a15",
      "id": "CVE-2026-42577",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42577 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1360e71f-94b7-50be-9d60-cb764caf5c46",
      "id": "CVE-2026-42578",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42578 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0e5d5f3a-24c5-5125-b5fd-4a44a2a6cb3f",
      "id": "CVE-2026-42579",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42579 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:253ebf6e-7a08-5347-8bc1-5a7700d0de9d",
      "id": "CVE-2026-42580",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42580 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f0609e5d-0d70-565c-ad5f-88fbdde5b2dc",
      "id": "CVE-2026-42581",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42581 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:35a7834f-8dc9-595a-ab73-ff4ec9dfaf60",
      "id": "CVE-2026-42583",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42583 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:332219c3-5a80-5add-8dd7-a897418750cc",
      "id": "CVE-2026-42584",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42584 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7ccb495c-b6b8-5d3c-8726-0f2fade2dda3",
      "id": "CVE-2026-42585",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42585 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bb209bbe-ed1e-5d7d-94e3-3a86ddf13f66",
      "id": "CVE-2026-42586",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42586 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a0d29082-6520-55b1-b879-7ac89ba0690e",
      "id": "CVE-2026-42587",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42587 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b436b1e0-e665-5057-a76d-9e9cf53e721a",
      "id": "CVE-2026-44248",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44248 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1fe3f88d-c074-5315-bcd0-38215be1fe68",
      "id": "CVE-2026-44249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44249 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c579b13f-93f1-56cb-94d7-7c9e899bf8bb",
      "id": "CVE-2026-44250",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44250 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7a04e307-6966-5686-8a30-59937eb09b47",
      "id": "CVE-2026-44890",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9588511c-ef54-55f6-95b7-347e53ccc39d",
      "id": "CVE-2026-44891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44891 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:71af4082-05c4-51b4-b84b-389f0103dc92",
      "id": "CVE-2026-44893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44893 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d5e8e165-3f6a-5c65-a61d-6a67fd3dd337",
      "id": "CVE-2026-45416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45416 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:020bf968-1f2d-5f8c-816a-6c2f4d43c19b",
      "id": "CVE-2026-45536",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45536 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:05663d14-d07d-5a03-a2bc-07b1b1a43c7d",
      "id": "CVE-2026-45673",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45673 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ed2bf91f-b3b1-526b-ac43-469e981b6eed",
      "id": "CVE-2026-45674",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-45674 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:20f92e4e-0fb4-550f-aa0a-db3e499eac32",
      "id": "CVE-2026-46340",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-46340 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:56fbee0f-a052-5349-940e-44a6273fe4df",
      "id": "CVE-2026-47244",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47244 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7117ad5c-8652-5e3e-b5c5-201d8dd29879",
      "id": "CVE-2026-47691",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47691 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2250956d-c33b-5a46-9ee3-0d5a2efbb214",
      "id": "CVE-2026-48006",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48006 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:69a7032b-adf4-5ec3-abb1-ab8a1bcd5888",
      "id": "CVE-2026-48043",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-48043 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:56aba199-62f9-5876-9e28-3f8efb6dc5b0",
      "id": "CVE-2026-48059",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48059 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:348145b9-b2ec-5b8d-a3c6-6a26ee1aac40",
      "id": "CVE-2026-50010",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50010 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4c036b96-fe4a-519d-864f-05f4bc4e7b1f",
      "id": "CVE-2026-50011",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50011 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cbf0291f-8904-5a3d-8647-12a3a235c06f",
      "id": "CVE-2026-50020",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50020 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2f038d72-b2cc-587e-a241-dbfaf4b10754",
      "id": "CVE-2026-50560",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ea3823a5-5d11-5fc0-9264-555b11ccec02",
      "id": "CVE-2026-55831",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55831 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a8c04ae3-57f9-5cb9-acb4-7d27bf187b4a",
      "id": "CVE-2026-55833",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55833 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2981d660-112e-5714-b5b0-d3fe5a1874e4",
      "id": "CVE-2026-55851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55851 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b49c52b9-d243-5b39-a86b-b18ad2ead009",
      "id": "CVE-2026-56745",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56745 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ee1e03d6-7b6d-55de-84ed-de11042880d1",
      "id": "CVE-2026-56746",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56746 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6c06d4a5-2e31-5c72-9be3-214c38991b75",
      "id": "CVE-2026-56817",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-56817 does not affect version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport-native-kqueue. not_affected \u2014 The Netty codec-xml module contains XmlDecoder, which instantiates an Aalto XML parser without security configuration (line 38: new InputFactoryImpl() with no XXE protection). However, this is a library component that Netty itself does not use in its own production code. The vulnerability only manifests when downstream applications explicitly add XmlDecoder to their Netty channel pipelines. Per..."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bacdf357-320e-513a-bb7e-1d4293b52f03",
      "id": "CVE-2026-56818",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56818 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2a8e0995-9ac2-55f0-a0fe-784ce1c755b8",
      "id": "CVE-2026-56819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56819 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5c839b4f-7ce9-5c13-9588-79081c64ccb6",
      "id": "CVE-2026-59898",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59898 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:398d6151-a0d1-52f9-8f1b-942d4aaa69ce",
      "id": "CVE-2026-59899",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59899 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:348a998e-2207-5172-a13d-1f6aae34e10d",
      "id": "CVE-2026-59900",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59900 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1307b4a2-1a3f-52e0-8467-0d8748674e04",
      "id": "CVE-2026-59901",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59901 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:15022fb5-7eb9-56f8-9c2c-c37b8200dd8e",
      "id": "CVE-2026-59902",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59902 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4eb6bdc6-1f1e-5322-983e-9c3b9bb991c5",
      "id": "CVE-2026-59903",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59903 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:15991cdf-d4fe-56cc-b7f4-bdbff6b48f2b",
      "id": "CVE-2026-59919",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59919 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8d114345-c290-5339-b0c0-b7014a0521a1",
      "id": "CVE-2026-59920",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59920 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:81c4b6ad-266e-51dc-b3be-3ebf86790e2b",
      "id": "CVE-2026-59921",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59921 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1bb2fb0d-d54e-5798-8207-47516919d5ec",
      "id": "CVE-2026-73507",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-73507 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:18ed7ec1-1012-5034-ad5e-679ef8d54894",
      "id": "CVE-2026-73508",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-73508 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:33a55f83-a50b-51a1-b875-22808a8b8858",
      "id": "GHSA-mfg7-5gfp-c4w3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:afef7787-8646-5e2e-85a2-4e8e010f9aec",
      "id": "GHSA-v74w-7mr3-4qg3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1aa04eb8-c601-5e4d-a00f-57009030b29f",
      "id": "GHSA-xpw8-rcwv-8f8p",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-xpw8-rcwv-8f8p affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport-native-kqueue."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.63.Final-tuxcare.5"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.63.Final-tuxcare.5"
    }
  ]
}