{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:e307bb08-9957-5bec-974f-7201ba27c832",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.122.Final-tuxcare.2",
      "type": "library",
      "group": "io.netty",
      "name": "netty-transport-sctp",
      "version": "4.1.122.Final-tuxcare.2",
      "purl": "pkg:maven/io.netty/netty-transport-sctp@4.1.122.Final-tuxcare.2"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:f7c7fe5d-8c90-5854-a231-251cadd1a928",
      "id": "CVE-2025-55163",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55163 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a785f6c1-0549-5628-94dc-41b572d5f136",
      "id": "CVE-2025-58056",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-58056 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c0bb9bfb-b55f-53cb-b5a8-770ec23e0310",
      "id": "CVE-2025-58057",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-58057 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c529384a-b0cb-5ba6-8589-5aa150ca43ec",
      "id": "CVE-2025-59419",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-59419 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e7f12f0c-2edb-5a87-a5bd-63eb4c022732",
      "id": "CVE-2025-67735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-67735 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:acda5cc0-a77b-5738-8221-ba93a5c40587",
      "id": "CVE-2026-33870",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-33870 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:35bb7847-595e-5fff-ae4a-b0a4e327bdca",
      "id": "CVE-2026-33871",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-33871 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:26e559b0-f698-5eb5-b7cb-6cf5074d79e7",
      "id": "CVE-2026-41417",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41417 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d600b4e3-83d1-5f4a-ad0e-17a3b3b9e9cc",
      "id": "CVE-2026-42577",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-42577 does not affect version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport-sctp. CVE-2026-42577 affects Netty 4.2.x only (advisory range >= 4.2.0.Final, < 4.2.13.Final). An fd left registered with an epoll event mask of 0 is woken forever by the unmaskable EPOLLERR/EPOLLHUP after a RST on a half-closed connection. Target 4.1.122.Final is NOT affected due to architectural differences. The patch modifies EpollIoHandler.java and EpollIoOps.java, part of 4.2's IoHandler/IoOps abstraction. Neither file exists in 4.1.x, which registers via EpollEventLoop.modify() off AbstractEpollChannel.flags. That field is seeded Native.EPOLLET, and no read/close/half-close path clears it (only the explicit pre-registration setEpollMode(LEVEL_TRIGGERED) opt-in), so the registration stays edge-triggered and the RST is reported once per edge instead of on every epoll_wait. The chain from INPUT (connection state change) to GOAL (CPU busy-loop via empty event mask) is broken at step (ii): the target cannot produce an empty event mask. Verdict: not_affected. Justification: code_not_reachable (Rule 5 Type A2)."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5a002bdf-7118-5f26-9b35-946a11f119dc",
      "id": "CVE-2026-42578",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42578 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a02d6951-9a22-5e99-bb8f-450fd775f36b",
      "id": "CVE-2026-42579",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42579 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:13d1ebdf-41c6-5d4b-adcd-1bb119235fc2",
      "id": "CVE-2026-42580",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42580 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:36c3ee12-e9d4-5527-ba3d-ad32caac1e77",
      "id": "CVE-2026-42581",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42581 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:09e8aca1-49df-57f1-814f-95c20854d858",
      "id": "CVE-2026-42583",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42583 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b0e7a57f-d981-56ef-bbd2-b986da186b9e",
      "id": "CVE-2026-42584",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42584 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e1a4a0ed-bf5c-51a1-948c-659d4bf5b4c1",
      "id": "CVE-2026-42585",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42585 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0ea48588-8c80-51a3-bed0-21303f9d0c08",
      "id": "CVE-2026-42586",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42586 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7db0e3d8-084a-5e56-9645-02e8d9d81d98",
      "id": "CVE-2026-42587",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42587 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9b5f6ea0-9ebf-55de-bb85-3a80f7dafb56",
      "id": "CVE-2026-44248",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44248 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:08e73018-e0b7-5eb5-8abe-530c3abf0f3f",
      "id": "CVE-2026-44249",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44249 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bff1c2c3-1547-5cac-a009-7bb6f5e9c6ae",
      "id": "CVE-2026-44250",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44250 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3bb36924-4d45-5202-b9de-34d50f88a1f7",
      "id": "CVE-2026-44890",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d5591f29-7bd0-5bdd-b46c-78055df0aa7c",
      "id": "CVE-2026-44891",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44891 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:20fe8cdc-39e6-530b-9f47-6747f1308933",
      "id": "CVE-2026-44893",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44893 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:961786df-404d-544a-af58-85b8bc2d4d56",
      "id": "CVE-2026-45416",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-45416 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4bb66e99-d509-546d-843a-2dbac50cf14d",
      "id": "CVE-2026-45536",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-45536 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fa9c5672-c41a-59b1-ba24-64c91a8d2757",
      "id": "CVE-2026-45673",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-45673 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:be0efe1f-40f7-5640-a336-78d8f99a4907",
      "id": "CVE-2026-45674",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-45674 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:88f81f38-354f-55e8-ae24-c929846e7296",
      "id": "CVE-2026-46340",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-46340 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:33f02dcd-9386-5cae-bc61-66dc867c9d9a",
      "id": "CVE-2026-47244",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47244 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ed27b7d0-f3c8-5255-83ad-e1f5d91d66da",
      "id": "CVE-2026-47691",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47691 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:68978d1e-6833-540e-8090-fa089de17246",
      "id": "CVE-2026-48006",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-48006 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5c5ebff6-cc4a-5ab4-8bc1-84764c0535b9",
      "id": "CVE-2026-48043",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-48043 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:472f7792-b3d0-5880-bac8-301a333a6450",
      "id": "CVE-2026-48059",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-48059 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ce92ceae-fd33-5c0b-a7e8-263cbbb324c4",
      "id": "CVE-2026-50010",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50010 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:61274f30-d400-55c7-a965-250f548625d3",
      "id": "CVE-2026-50011",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50011 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f6d31be6-edf2-5f44-9dd1-17d2ad7dd177",
      "id": "CVE-2026-50020",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50020 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ac6cd0eb-44d5-5d6a-8ec8-6b7addf09420",
      "id": "CVE-2026-50560",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:77dd25bc-6641-5fcb-9d8e-94366efcc3f5",
      "id": "CVE-2026-55831",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-55831 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dee554a4-e354-5095-bbc7-3d1b293620df",
      "id": "CVE-2026-55833",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-55833 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f7e670f4-0213-5491-a5ac-9f5926abce80",
      "id": "CVE-2026-55851",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-55851 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:75ab1280-ab22-540e-ac55-a2acf59d0096",
      "id": "CVE-2026-56745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-56745 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4ec0e1a0-3b6b-5b5d-9551-3e22667fb165",
      "id": "CVE-2026-56746",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-56746 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6f11b8f3-32aa-5d3c-94ea-91e04fb542ef",
      "id": "CVE-2026-56817",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-56817 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e0c07b67-2520-576d-979c-afdcbf0fa5c3",
      "id": "CVE-2026-56818",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-56818 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f27fb7d8-9b19-5051-97ec-0f0fc984379f",
      "id": "CVE-2026-56819",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-56819 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a4528af4-f345-5cc1-a0dd-5b8c13dc726b",
      "id": "CVE-2026-56820",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-56820 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8f6b2129-9bb5-5afe-bcf8-f71509842a13",
      "id": "CVE-2026-56821",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-56821 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2f84e79b-04ac-5e67-87de-8c1772d42dda",
      "id": "CVE-2026-56822",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-56822 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:43cb405f-e155-58e9-9076-1a395c322a69",
      "id": "CVE-2026-59898",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59898 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a467c737-4250-5137-aaba-d71239bf452d",
      "id": "CVE-2026-59899",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59899 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fa562331-93b2-54d7-a33e-429c7613db4d",
      "id": "CVE-2026-59900",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59900 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b2b1acaa-8252-5da4-9a66-21f55fa87856",
      "id": "CVE-2026-59901",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59901 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dacfc70a-924c-560e-b82b-e4fbe65015c9",
      "id": "CVE-2026-59902",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59902 affects version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ab9a7d91-4341-51ee-a016-13578a97577c",
      "id": "CVE-2026-59903",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59903 affects version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a60ffb92-94da-52d7-9ba4-35436d7e7e94",
      "id": "CVE-2026-59919",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59919 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:abdac12c-dd9e-50e4-9693-d361f146c8ea",
      "id": "CVE-2026-59920",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59920 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0a083ddf-f225-523b-b224-7f04d6a290f4",
      "id": "CVE-2026-59921",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59921 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:20d3d2d9-4350-57a4-8629-40b0a3b2c5cd",
      "id": "CVE-2026-73507",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-73507 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c2c01939-1efe-51f6-a454-c1c1fa140ed1",
      "id": "CVE-2026-73508",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-73508 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:661d9741-de42-5947-8ec2-52534d584d02",
      "id": "GHSA-mfg7-5gfp-c4w3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.122.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ae3c40ff-264e-549f-ad12-6b6fd518240a",
      "id": "GHSA-v74w-7mr3-4qg3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.122.Final-tuxcare.2"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.122.Final-tuxcare.2"
    }
  ]
}