{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:6b62b82f-4e49-5b78-abeb-65e34d6bfa46", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.122.Final-tuxcare.1", "type": "library", "group": "io.netty", "name": "netty-transport-sctp", "version": "4.1.122.Final-tuxcare.1", "purl": "pkg:maven/io.netty/netty-transport-sctp@4.1.122.Final-tuxcare.1" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:4a130ed7-1682-5670-a203-66e0f899d689", "id": "CVE-2025-55163", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-55163 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport-sctp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:e367167c-2b24-5cda-8c62-8f1a8eac6894", "id": "CVE-2025-58056", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-58056 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport-sctp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:c4a95ca6-6e00-535a-a45e-a0cb82defcf0", "id": "CVE-2025-58057", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-58057 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport-sctp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:103edeb7-b7d0-59dd-a3d9-63a714c3c1d8", "id": "CVE-2025-59419", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-59419 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport-sctp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:95f54d6a-255d-5123-9889-5a37f0a5ff12", "id": "CVE-2025-67735", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-67735 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport-sctp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:0f300385-5cb7-5213-8c13-dfcf97b6e3d6", "id": "CVE-2026-33870", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33870 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport-sctp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:89d59bd5-7ca0-5087-8602-3aeb18493710", "id": "CVE-2026-33871", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33871 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport-sctp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:8cbb4dd3-80d4-5434-83e2-20ad2b0454bd", "id": "CVE-2026-41417", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41417 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport-sctp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:19cdaba9-d295-50c9-94b3-f201ee526b9f", "id": "CVE-2026-42577", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-42577 does not affect version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport-sctp. CVE-2026-42577 affects Netty 4.2.x only (advisory range >= 4.2.0.Final, < 4.2.13.Final). An fd left registered with an epoll event mask of 0 is woken forever by the unmaskable EPOLLERR/EPOLLHUP after a RST on a half-closed connection. Target 4.1.122.Final is NOT affected due to architectural differences. The patch modifies EpollIoHandler.java and EpollIoOps.java, part of 4.2's IoHandler/IoOps abstraction. Neither file exists in 4.1.x, which registers via EpollEventLoop.modify() off AbstractEpollChannel.flags. That field is seeded Native.EPOLLET, and no read/close/half-close path clears it (only the explicit pre-registration setEpollMode(LEVEL_TRIGGERED) opt-in), so the registration stays edge-triggered and the RST is reported once per edge instead of on every epoll_wait. The chain from INPUT (connection state change) to GOAL (CPU busy-loop via empty event mask) is broken at step (ii): the target cannot produce an empty event mask. Verdict: not_affected. Justification: code_not_reachable (Rule 5 Type A2)." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:b018bf8c-a442-58bf-a2c2-94e06a64bc39", "id": "CVE-2026-42578", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42578 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport-sctp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:c9f89b9b-b5a5-5212-9dcd-3ffe278f1e20", "id": "CVE-2026-42579", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42579 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport-sctp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:a888dffe-6251-59f4-af5e-a4e92a4a1c9b", "id": "CVE-2026-42580", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42580 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport-sctp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:269694df-37b2-5ef1-aa55-c83b5b0139d5", "id": "CVE-2026-42581", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42581 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport-sctp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:66eebd2f-1504-534a-9a22-1f3c9f913139", "id": "CVE-2026-42583", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42583 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport-sctp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:68985ee0-e940-5ea8-8061-a779c7377f50", "id": "CVE-2026-42584", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42584 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport-sctp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:bdf8adbd-dff5-5287-8a65-d3c86ee93852", "id": "CVE-2026-42585", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42585 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport-sctp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:609c9cc4-f187-57bb-b2c7-ada1bb96ca8a", "id": "CVE-2026-42586", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42586 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport-sctp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:a32353c7-d615-5987-847a-8619ff4f26ff", "id": "CVE-2026-42587", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42587 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport-sctp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:fb0754a9-8918-57ab-b267-0e6d8f8b8066", "id": "CVE-2026-44248", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44248 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport-sctp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:461fab22-20fc-52da-a848-28aae89a3702", "id": "CVE-2026-44249", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44249 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport-sctp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:85e8e3cc-d50d-5775-818f-95540efe570c", "id": "CVE-2026-44250", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44250 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport-sctp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:91ec941e-be9f-5c19-bad3-9fefad5bc6e9", "id": "CVE-2026-44890", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44890 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport-sctp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:e184b876-0f9d-5ea6-beed-771ac7948ea9", "id": "CVE-2026-44891", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44891 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport-sctp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:3ddf610f-87a2-59fa-9e9a-ac9634f6bc73", "id": "CVE-2026-44893", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44893 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport-sctp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:9e829ba3-342b-5ea1-963b-0644adae10e6", "id": "CVE-2026-45416", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45416 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport-sctp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:2a7cde60-c72f-5af5-b2c0-db9891b1e6a1", "id": "CVE-2026-45536", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45536 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport-sctp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:52b3cce4-7b59-5a73-ac91-32314d237b63", "id": "CVE-2026-45673", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45673 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport-sctp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:d6f1a7de-bc42-5071-a560-86eee9c0f968", "id": "CVE-2026-45674", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45674 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport-sctp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:41c3250b-6393-55c2-a8f7-953235c0922f", "id": "CVE-2026-46340", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-46340 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport-sctp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:28916655-4cbb-59c1-980d-b90dd62a9564", "id": "CVE-2026-47244", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47244 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport-sctp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:068d7842-e3ae-59f6-b17d-603e98b079cf", "id": "CVE-2026-47691", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47691 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport-sctp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:1bb3388c-c46c-5b33-a8f0-06af32a22f9f", "id": "CVE-2026-48006", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-48006 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport-sctp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:3fccfe10-26b4-5d0d-abe3-93cc50c490d3", "id": "CVE-2026-48043", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-48043 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport-sctp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:17af0808-4ccd-59bc-958b-501af0ce1fbc", "id": "CVE-2026-48059", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-48059 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport-sctp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:b7f2c32c-4209-5503-a874-7aabb4ea29db", "id": "CVE-2026-50010", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50010 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport-sctp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:18297fce-a8ef-5795-a9bb-463c167e7a86", "id": "CVE-2026-50011", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50011 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport-sctp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:98d61094-2ee5-5423-b2d6-2585b6c38d47", "id": "CVE-2026-50020", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50020 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport-sctp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:f3218d66-e266-57b5-a11e-8181eb04779f", "id": "CVE-2026-50560", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50560 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport-sctp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:3f7dc9bf-935c-5a11-98e6-6f6be80f3e3a", "id": "CVE-2026-55831", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55831 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport-sctp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:48b76d39-7ec5-5314-adce-df14a5b5336e", "id": "CVE-2026-55833", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55833 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport-sctp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:61b79c63-accc-5bf9-9f28-4acac832c8de", "id": "CVE-2026-55851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55851 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport-sctp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:afd826a9-fb5f-59e1-96ef-1b7ce2e2d50c", "id": "CVE-2026-56745", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56745 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport-sctp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:bf1f1dc4-eec6-5f7d-b718-99de109be2f9", "id": "CVE-2026-56746", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56746 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport-sctp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:dcac2553-13a1-5e36-9fd9-1cefcbed1fed", "id": "CVE-2026-56817", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56817 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport-sctp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:2d56808a-1fc4-546a-90f6-32111f788069", "id": "CVE-2026-56818", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56818 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport-sctp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:ffaea53b-a8f4-556b-8b81-d1fd710eac2d", "id": "CVE-2026-56819", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56819 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport-sctp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:783e0a07-8c34-5b3c-9bc9-04ec97adee22", "id": "CVE-2026-56820", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56820 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport-sctp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:64611c56-f8df-5a6c-9360-36b944dcaa8e", "id": "CVE-2026-56821", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56821 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport-sctp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:1567ef6f-62fd-504e-a97e-eaec7e32d70c", "id": "CVE-2026-56822", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56822 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport-sctp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:cfa8b325-4054-5337-bdc9-75e60cd9c219", "id": "CVE-2026-59898", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59898 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport-sctp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:251baf40-2a5c-5701-8562-bd596f3e2109", "id": "CVE-2026-59899", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59899 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport-sctp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:05f51f3a-1fb8-506c-abf4-a113ee05336e", "id": "CVE-2026-59900", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59900 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport-sctp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:48c8144d-de88-5c9e-9f18-3ff3bfbcd847", "id": "CVE-2026-59901", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59901 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport-sctp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:22267a4d-eada-5fa0-a8f0-dcd394eefe39", "id": "CVE-2026-59902", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59902 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport-sctp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:7e64e2c0-b737-5d79-b597-23489e6d2909", "id": "CVE-2026-59903", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59903 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport-sctp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:62dc3880-acaf-53ea-b973-60e3ed62e263", "id": "CVE-2026-59919", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59919 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport-sctp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:c0a1e3c5-1ae3-5f1d-a83b-39443c368f42", "id": "CVE-2026-59920", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59920 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport-sctp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:994f4f33-dde1-5ef6-953a-4adebe0be5a0", "id": "CVE-2026-59921", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59921 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport-sctp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:e7f4701b-1f56-56e3-93c2-072699553bb1", "id": "CVE-2026-73507", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-73507 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport-sctp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:6d1be2df-3e80-5db0-b9a2-c9897e0371d4", "id": "CVE-2026-73508", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-73508 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport-sctp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:e4d1ea8b-f48e-533e-b965-3997e869253b", "id": "GHSA-mfg7-5gfp-c4w3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport-sctp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:ae3ba9a5-4bf7-566f-860d-d530ba1ed6b2", "id": "GHSA-v74w-7mr3-4qg3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport-sctp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.122.Final-tuxcare.1" } ] } ], "dependencies": [ { "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.122.Final-tuxcare.1" } ] }