{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:d7e5c7e7-acad-5067-8350-0a6b9cbe76b9", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.5", "type": "library", "group": "io.netty", "name": "netty-transport-rxtx", "version": "4.1.63.Final-tuxcare.5", "purl": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.5" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:7c539dde-0edc-57ae-bb34-8d6cf48ab6a1", "id": "CVE-2021-37136", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-37136 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport-rxtx." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:2f2131d3-31bf-5551-b7f9-ff4baff9a5e2", "id": "CVE-2021-37137", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-37137 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport-rxtx." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:1d2e109a-280e-5c17-9e99-478bd2fd531c", "id": "CVE-2021-43797", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-43797 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport-rxtx." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:6bb2cf2e-fea6-5317-b85a-e6b2a6d24bfc", "id": "CVE-2022-24823", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-24823 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport-rxtx." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:39779da2-f628-57a0-b3e0-8fba9797fb6e", "id": "CVE-2022-41881", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-41881 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport-rxtx." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:fc998709-1a6c-5414-959e-0a1aaa0aab60", "id": "CVE-2022-41915", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-41915 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport-rxtx." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:25b82227-a321-5708-a6db-9c3b1587be69", "id": "CVE-2023-34462", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-34462 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport-rxtx." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:c975474c-0ec3-5d5a-b43d-63ff27a0b145", "id": "CVE-2023-44487", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-44487 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport-rxtx." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:09279f58-d3b2-5622-8f5d-cb109c4343c8", "id": "CVE-2023-4586", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2023-4586 is a false positive for io.netty:netty-transport-rxtx 4.1.63.Final-tuxcare.5." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:576b559f-7c33-5f42-8c5b-f2b5ab918839", "id": "CVE-2024-29025", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-29025 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport-rxtx." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:504a7394-808b-5665-9fc8-fb81cb1bab26", "id": "CVE-2024-47535", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-47535 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport-rxtx." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:37677c62-5afd-5da1-863a-f71b4693f0c7", "id": "CVE-2025-24970", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-24970 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport-rxtx." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:8a33e5b2-fd93-554f-ae6c-099fb0ad88da", "id": "CVE-2025-25193", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-25193 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport-rxtx." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:e60ca64e-b07d-59a7-9d36-836055e61a33", "id": "CVE-2025-55163", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55163 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport-rxtx." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:da0124ee-2541-5bcd-b686-9f6d38f6d9f3", "id": "CVE-2025-58056", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-58056 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport-rxtx." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:9ee67d59-3a32-551e-9414-f26c152494f6", "id": "CVE-2025-58057", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-58057 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport-rxtx." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:de6a4062-fe92-5e8a-b74b-efc74baf5c5e", "id": "CVE-2025-59419", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59419 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport-rxtx." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:362fa6f1-0138-5969-a560-9acd1ee0350d", "id": "CVE-2025-67735", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-67735 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport-rxtx." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:594891e5-cf0b-5ce6-a374-82dc43818295", "id": "CVE-2026-33870", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33870 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport-rxtx." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:e584b663-ff31-57f7-ac2e-3f26d57892c2", "id": "CVE-2026-33871", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33871 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport-rxtx." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:66b61a81-a1db-5398-a2d3-786423852bde", "id": "CVE-2026-41417", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41417 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport-rxtx." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:fa6aae53-2fe4-5fc4-a47f-5443d1054b67", "id": "CVE-2026-42577", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42577 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport-rxtx." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:b3fd6eb4-5925-575b-8f1b-117e1fc2ba05", "id": "CVE-2026-42578", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42578 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport-rxtx." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:7b50686b-e412-5860-a6d7-0b960ed513a0", "id": "CVE-2026-42579", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42579 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport-rxtx." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:e09771d5-eb03-56d8-b6ce-2c716d8d29fe", "id": "CVE-2026-42580", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42580 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport-rxtx." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:d1ed2590-42f0-5600-b8cd-caa9f0083cb6", "id": "CVE-2026-42581", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42581 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport-rxtx." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:0fe56203-f413-572a-9b46-89dfd636c45a", "id": "CVE-2026-42583", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42583 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport-rxtx." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:c8351291-8dfc-5291-94eb-2ad6c9eaf16b", "id": "CVE-2026-42584", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42584 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport-rxtx." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:8102208e-4c4b-5a0e-aaa2-fc4a78a0c632", "id": "CVE-2026-42585", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42585 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport-rxtx." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:2346ce02-3be1-5676-acfd-b1c48d05d7f6", "id": "CVE-2026-42586", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42586 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport-rxtx." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:1702c6c4-5576-5f4a-96e4-b8655301998b", "id": "CVE-2026-42587", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42587 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport-rxtx." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:0311f7c3-2d50-5d78-9142-f4565ad8c05a", "id": "CVE-2026-44248", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44248 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport-rxtx." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:8d1522ab-f2c2-57ba-b2bd-52f3e18f0231", "id": "CVE-2026-44249", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44249 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport-rxtx." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:4fbf63cc-34e4-547f-945f-ec9d1d41e09e", "id": "CVE-2026-44250", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44250 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport-rxtx." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:57967d26-0034-5670-94e0-63ed44c19eed", "id": "CVE-2026-44890", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport-rxtx." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:44e41d30-230c-5124-a0c6-f6d512322491", "id": "CVE-2026-44891", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44891 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport-rxtx." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:539ef9fc-172b-5703-acf2-8e1ac1b59198", "id": "CVE-2026-44893", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44893 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport-rxtx." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:b55166d3-1c43-5e5e-8552-fd8d721a1582", "id": "CVE-2026-45416", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45416 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport-rxtx." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:91f13ca6-afb0-5b70-bd3b-a405192a1c39", "id": "CVE-2026-45536", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45536 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport-rxtx." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:68c80ca3-2316-50a6-af06-8975517cdc8a", "id": "CVE-2026-45673", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45673 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport-rxtx." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:2ada908d-0a3e-5815-a53c-0a8267751252", "id": "CVE-2026-45674", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-45674 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport-rxtx." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:6f294ecc-f77e-5291-a5ce-33430895f375", "id": "CVE-2026-46340", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-46340 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport-rxtx." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:9eb310ab-a87a-563e-a716-08db6a841045", "id": "CVE-2026-47244", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47244 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport-rxtx." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:afc455b5-6aea-5cfd-99cf-5954e3fb49fc", "id": "CVE-2026-47691", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47691 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport-rxtx." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:dd6db66a-3244-53d2-b33d-c92bebfa9a24", "id": "CVE-2026-48006", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-48006 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport-rxtx." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:c8867954-9d6d-54a6-8faf-ecb12c951dbb", "id": "CVE-2026-48043", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48043 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport-rxtx." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:cb2b5f08-fced-5d85-aaaa-fac127140402", "id": "CVE-2026-48059", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-48059 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport-rxtx." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:e598527e-f5c4-5043-9683-7246260f5af2", "id": "CVE-2026-50010", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50010 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport-rxtx." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:b34fc8c4-ef63-5878-824c-676b70165854", "id": "CVE-2026-50011", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50011 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport-rxtx." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:c6b5b099-edf6-5079-a0aa-b3fc4c8ed170", "id": "CVE-2026-50020", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50020 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport-rxtx." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:bad4707e-33d6-5c32-8981-1a2e5ede0dde", "id": "CVE-2026-50560", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport-rxtx." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:c0e5f277-c5a7-57b3-bed7-43a56ec8332d", "id": "CVE-2026-55831", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55831 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport-rxtx." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:9c8681ec-d191-55b6-b75d-883ed0cdb6df", "id": "CVE-2026-55833", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55833 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport-rxtx." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:00a701d2-ead0-5251-93b9-f895abfe898d", "id": "CVE-2026-55851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55851 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport-rxtx." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:090d768a-12b1-5785-bcf3-59ad1b4fe4a7", "id": "CVE-2026-56745", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56745 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport-rxtx." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:d57f9923-7398-5834-882a-155f1ba3662e", "id": "CVE-2026-56746", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56746 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport-rxtx." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:8ca25574-249b-51c0-a08f-4eab8870fa59", "id": "CVE-2026-56817", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-56817 does not affect version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport-rxtx. not_affected \u2014 The Netty codec-xml module contains XmlDecoder, which instantiates an Aalto XML parser without security configuration (line 38: new InputFactoryImpl() with no XXE protection). However, this is a library component that Netty itself does not use in its own production code. The vulnerability only manifests when downstream applications explicitly add XmlDecoder to their Netty channel pipelines. Per..." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:da6a290a-f1a9-5f64-8855-98cec4b4c3be", "id": "CVE-2026-56818", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56818 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport-rxtx." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:67ab0b50-fe99-57f8-b311-adf6b48b2b6c", "id": "CVE-2026-56819", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56819 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport-rxtx." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:8615385d-2f31-524f-a325-4616d51fb182", "id": "CVE-2026-59898", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59898 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport-rxtx." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:b7eb87c2-bb6d-55f5-8eac-dfd7d2f3709b", "id": "CVE-2026-59899", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59899 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport-rxtx." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:49932673-be12-56bc-972e-58e2da1f5a55", "id": "CVE-2026-59900", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59900 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport-rxtx." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:31d8891c-e69d-5150-906e-f0c180eefac8", "id": "CVE-2026-59901", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59901 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport-rxtx." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:f416a1f1-8f2a-5ba3-a82c-ebee0b0b2b5a", "id": "CVE-2026-59902", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59902 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport-rxtx." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:b65238ee-53d6-5e6a-9637-8880325bf23c", "id": "CVE-2026-59903", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59903 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport-rxtx." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:b78bf560-5964-5c18-af3d-8ce755b0edd8", "id": "CVE-2026-59919", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59919 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport-rxtx." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:d0a968b7-a35d-5b46-aee3-4315910d0332", "id": "CVE-2026-59920", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59920 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport-rxtx." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:cfdd8e7b-70fd-5ee9-8a95-89d63027fea3", "id": "CVE-2026-59921", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59921 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport-rxtx." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:cd80ff6f-8b43-51ce-86fd-966c7dc45f94", "id": "CVE-2026-73507", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-73507 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport-rxtx." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:94c5965b-9920-580c-bc4b-844e08877e54", "id": "CVE-2026-73508", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-73508 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport-rxtx." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:cf7d4e0c-073f-555d-8177-4c92e1579acb", "id": "GHSA-mfg7-5gfp-c4w3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport-rxtx." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:11b7c928-c3d1-513b-a79d-356e9bdac067", "id": "GHSA-v74w-7mr3-4qg3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport-rxtx." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:6823e8c0-e0d0-55ef-9b6e-d24ef0a17a91", "id": "GHSA-xpw8-rcwv-8f8p", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-xpw8-rcwv-8f8p affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport-rxtx." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.5" } ] } ], "dependencies": [ { "ref": "pkg:maven/io.netty/netty-transport-rxtx@4.1.63.Final-tuxcare.5" } ] }