{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:c70a930d-ccf7-5fef-acbd-7aea72247bfb",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.122.Final-tuxcare.2",
      "type": "library",
      "group": "io.netty",
      "name": "netty-transport-rxtx",
      "version": "4.1.122.Final-tuxcare.2",
      "purl": "pkg:maven/io.netty/netty-transport-rxtx@4.1.122.Final-tuxcare.2"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:a601c318-8265-5081-af41-b7821ef80ab5",
      "id": "CVE-2025-55163",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55163 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:85a75c99-9ee8-5c7e-a8cf-d5bbd86ffe6f",
      "id": "CVE-2025-58056",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-58056 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:40d279fa-9997-569a-b717-57f814edb146",
      "id": "CVE-2025-58057",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-58057 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a2e84f5a-cea8-5e7f-8ec3-15c45d446682",
      "id": "CVE-2025-59419",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-59419 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:19e5efa0-b34d-5008-88eb-e9369ee3047d",
      "id": "CVE-2025-67735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-67735 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d0287438-646b-5a71-9cdf-5154ee834a18",
      "id": "CVE-2026-33870",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-33870 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5ba41c5e-95ea-5416-98bd-e01300385809",
      "id": "CVE-2026-33871",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-33871 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7bc4e89f-df26-5416-a8e9-372e954788bb",
      "id": "CVE-2026-41417",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41417 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8a1c889e-e035-5650-b86a-bec4ebf9ea40",
      "id": "CVE-2026-42577",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-42577 does not affect version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport-rxtx. CVE-2026-42577 affects Netty 4.2.x only (advisory range >= 4.2.0.Final, < 4.2.13.Final). An fd left registered with an epoll event mask of 0 is woken forever by the unmaskable EPOLLERR/EPOLLHUP after a RST on a half-closed connection. Target 4.1.122.Final is NOT affected due to architectural differences. The patch modifies EpollIoHandler.java and EpollIoOps.java, part of 4.2's IoHandler/IoOps abstraction. Neither file exists in 4.1.x, which registers via EpollEventLoop.modify() off AbstractEpollChannel.flags. That field is seeded Native.EPOLLET, and no read/close/half-close path clears it (only the explicit pre-registration setEpollMode(LEVEL_TRIGGERED) opt-in), so the registration stays edge-triggered and the RST is reported once per edge instead of on every epoll_wait. The chain from INPUT (connection state change) to GOAL (CPU busy-loop via empty event mask) is broken at step (ii): the target cannot produce an empty event mask. Verdict: not_affected. Justification: code_not_reachable (Rule 5 Type A2)."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5acf549b-07fc-5051-9276-48d76bdababd",
      "id": "CVE-2026-42578",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42578 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6113aebc-1a96-5587-a3c8-075365fe242c",
      "id": "CVE-2026-42579",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42579 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5ed9093f-550a-582b-8492-419bbe9562c8",
      "id": "CVE-2026-42580",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42580 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:10b262d9-5720-5dae-98d1-4608a93d1ffe",
      "id": "CVE-2026-42581",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42581 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0c83d18f-1fc0-5e45-bcb2-0379667fae7b",
      "id": "CVE-2026-42583",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42583 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:44c782c2-5298-54db-b276-d2edcc7edcf3",
      "id": "CVE-2026-42584",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42584 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:11b34230-b4b4-573a-b0dd-ae01ea1a5fd9",
      "id": "CVE-2026-42585",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42585 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:22ec9981-0350-50eb-a138-390e94990278",
      "id": "CVE-2026-42586",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42586 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b24c829e-edd9-5dc7-a846-b95b73cd70df",
      "id": "CVE-2026-42587",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42587 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:82420db3-58a7-5bfc-a82f-f22d97b87ddc",
      "id": "CVE-2026-44248",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44248 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:31a01fc4-aeb8-5d44-b791-de7fa5e1bc0a",
      "id": "CVE-2026-44249",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44249 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d14652e0-9d7f-5dba-bef6-af3bc48fc038",
      "id": "CVE-2026-44250",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44250 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2e026288-8c69-5be3-b29d-edee2ce1adf9",
      "id": "CVE-2026-44890",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:30cfaceb-4d45-53c5-9e42-8b2570a7435c",
      "id": "CVE-2026-44891",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44891 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e4b415e3-e52e-5802-ba0e-01ebd2db936b",
      "id": "CVE-2026-44893",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44893 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c082ac73-f241-5dc8-b962-76ed2f14739b",
      "id": "CVE-2026-45416",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-45416 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a4dc1d8b-3d1d-5484-b6cb-d7216ed0ab16",
      "id": "CVE-2026-45536",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-45536 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4b745239-18fb-51e3-8265-b712a80d42b4",
      "id": "CVE-2026-45673",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-45673 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b82f0d47-e94d-5786-a665-8954ccbf72b3",
      "id": "CVE-2026-45674",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-45674 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6bb91966-86f3-5b09-9b86-4450dd51711d",
      "id": "CVE-2026-46340",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-46340 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2a8a139c-3c13-53ac-9278-e05dfd894a23",
      "id": "CVE-2026-47244",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47244 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fb0d1f15-f192-5d38-8fa3-0877f9ab6d33",
      "id": "CVE-2026-47691",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47691 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b86075e8-c616-5c9f-831d-53cbf431dc23",
      "id": "CVE-2026-48006",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-48006 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:741524e6-c8c1-5e14-a8bd-989d7311ad09",
      "id": "CVE-2026-48043",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-48043 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b04f9c5a-60f1-5bda-bb9d-99cc59b0a1ee",
      "id": "CVE-2026-48059",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-48059 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d9760416-3630-583e-a810-c2c40b50567d",
      "id": "CVE-2026-50010",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50010 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6cf2de29-5ed6-5732-8a5e-534b4e07f306",
      "id": "CVE-2026-50011",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50011 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1dc7e216-783d-510f-84f5-41c863fbaa97",
      "id": "CVE-2026-50020",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50020 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:49d4bc1a-a235-5b14-a72b-8338b8ec7ace",
      "id": "CVE-2026-50560",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:98fb29b8-ea8e-5bc2-999b-7d94f87472c5",
      "id": "CVE-2026-55831",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-55831 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:72183941-ad51-5a2e-b463-9071fb3f0d02",
      "id": "CVE-2026-55833",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-55833 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fef57ad7-6f5b-56b0-9b42-21121ef441e8",
      "id": "CVE-2026-55851",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-55851 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f02c1c91-ca41-52ce-810b-574dc3663c3b",
      "id": "CVE-2026-56745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-56745 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:59c0edf4-2d42-572a-8f96-9d475f3bc1f5",
      "id": "CVE-2026-56746",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-56746 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:da38996d-d6a6-5b64-8768-f6ed316ca880",
      "id": "CVE-2026-56817",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-56817 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e616b31f-6e6c-54f9-91ee-a5e9c70ff484",
      "id": "CVE-2026-56818",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-56818 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2d9e5443-0d62-58d3-a358-9af4d60ba9d8",
      "id": "CVE-2026-56819",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-56819 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:aae02149-e1ae-502e-a8ae-726319b4b78b",
      "id": "CVE-2026-56820",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-56820 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2b209953-1315-5970-b276-0e617d84b93e",
      "id": "CVE-2026-56821",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-56821 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:daf5a9b9-860c-563e-ba3d-0c1ff2ca1b99",
      "id": "CVE-2026-56822",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-56822 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b247ccde-5425-5966-b180-87cd4a9be68d",
      "id": "CVE-2026-59898",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59898 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9b1ae628-602d-50d0-b7df-1c7f82cb6b45",
      "id": "CVE-2026-59899",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59899 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:07d18049-26ea-5bbd-b143-668bb6995f9b",
      "id": "CVE-2026-59900",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59900 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5e4e0f68-4ab0-5008-9289-f3ce581b955c",
      "id": "CVE-2026-59901",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59901 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:617e6db5-bea1-537e-a5f3-bb0abc5e1371",
      "id": "CVE-2026-59902",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59902 affects version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3c7bb8db-e22a-59d2-9825-633fd8a4d970",
      "id": "CVE-2026-59903",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59903 affects version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:db350a5f-c04a-567e-899e-4b4f4610fd03",
      "id": "CVE-2026-59919",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59919 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c578699c-1282-5c3a-b6df-a150a8a39385",
      "id": "CVE-2026-59920",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59920 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3532a93e-3780-53c1-a92f-3605a9bc3cd5",
      "id": "CVE-2026-59921",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59921 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:142366cb-8dce-5f01-a1d6-916a98b233d9",
      "id": "CVE-2026-73507",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-73507 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b14dbde1-81aa-55d5-9470-f53996dda603",
      "id": "CVE-2026-73508",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-73508 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2ff887c8-43cc-506d-88e4-53941989da64",
      "id": "GHSA-mfg7-5gfp-c4w3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:154dd010-e778-55f7-8dc1-29b240aba225",
      "id": "GHSA-v74w-7mr3-4qg3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport-rxtx."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.122.Final-tuxcare.2"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.122.Final-tuxcare.2"
    }
  ]
}