{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:c4c4350f-00f8-584d-b0d7-41244bf551f6", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.1", "type": "library", "group": "io.netty", "name": "netty-transport-sctp", "version": "4.1.130.Final-tuxcare.1", "purl": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.1" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:bbb3178c-7927-50c1-a6aa-4dfc2bbfccdb", "id": "CVE-2025-55163", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-55163 does not affect version 4.1.130.Final-tuxcare.1 of io.netty:netty-transport-sctp. already_fixed \u2014 The target Netty 4.1.130.Final repository already contains the complete MadeYouReset (CVE-2025-55163) mitigation. The Http2MaxRstFrameLimitEncoder defense class is present, integrated into the HTTP/2 connection handler builder, and enabled by default for servers with a threshold of 200 RST_STREAM frames per 30-second window. All protocol-error-triggered RST writes route through the protected en..." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:63d3e7cb-3217-5967-97b1-59f2ec71f8bf", "id": "CVE-2026-33870", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33870 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-transport-sctp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:8388a0e1-e86a-5329-8918-2d475f08ca96", "id": "CVE-2026-33871", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33871 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-transport-sctp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:830ba8ac-33a3-557e-a98e-d09b1182eb3b", "id": "CVE-2026-41417", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41417 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-transport-sctp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:3ad9a8ab-d8e3-5f47-9a59-bd0b05117998", "id": "CVE-2026-42578", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42578 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-transport-sctp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:227d919e-76d3-5a4b-ba11-192bc8ffa241", "id": "CVE-2026-42579", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42579 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-transport-sctp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:8812b3c5-3030-5e9d-852f-ca7470ee3f1b", "id": "CVE-2026-42580", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42580 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-transport-sctp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:82d2bc3a-cf36-5706-ba47-33b5a8ac48b2", "id": "CVE-2026-42581", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42581 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-transport-sctp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:bf9c7bb6-d701-5d2c-ab05-ca6aa8c9d225", "id": "CVE-2026-42583", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42583 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-transport-sctp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:d1185316-7eea-5c72-8929-902b5fef25b3", "id": "CVE-2026-42584", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42584 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-transport-sctp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:56f36038-6525-5dd3-8cb6-1fb352ee0f35", "id": "CVE-2026-42585", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42585 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-transport-sctp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:935660ca-aebd-5a02-88dc-da70555efb45", "id": "CVE-2026-42586", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42586 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-transport-sctp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:0992ad22-67c1-5552-8f2f-1077cea3a193", "id": "CVE-2026-42587", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42587 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-transport-sctp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:98089764-94fd-5213-8a72-07eedd86aa29", "id": "CVE-2026-44248", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44248 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-transport-sctp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:db0d66cb-4ade-5f70-9881-61708ff2dc83", "id": "CVE-2026-44249", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44249 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-transport-sctp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:ccccef7e-3a4a-56f8-a457-3e44b7b5b7af", "id": "CVE-2026-44250", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44250 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-transport-sctp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:f95dc017-23d5-5dc3-9855-04d2eb2c8d41", "id": "CVE-2026-44890", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-transport-sctp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:50dc6604-6484-5dae-9004-33e36a5ad6e1", "id": "CVE-2026-44891", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44891 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-transport-sctp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:3cc6b05d-c7b7-59cc-b2ec-05e11e38cdef", "id": "CVE-2026-44893", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44893 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-transport-sctp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:bcbb19b4-a6a4-54df-b752-2d946f8cdf96", "id": "CVE-2026-45416", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45416 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-transport-sctp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:4619549f-5d3e-58ee-ba45-6629e952c452", "id": "CVE-2026-45536", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45536 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-transport-sctp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:da8be18d-5ba7-59d4-83bf-10830070d835", "id": "CVE-2026-45673", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45673 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-transport-sctp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:36aee3f8-1b57-5e51-8e5c-b3b0bc536ca8", "id": "CVE-2026-45674", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45674 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-transport-sctp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:d4cd62be-4367-5ba9-893f-7d728d38afed", "id": "CVE-2026-46340", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-46340 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-transport-sctp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:07ea26f8-d117-5607-9287-578e7ddd2968", "id": "CVE-2026-47244", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47244 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-transport-sctp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:427d3065-9303-5a75-b52c-a1c4659b63ba", "id": "CVE-2026-47691", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47691 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-transport-sctp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:aa145f11-17de-5305-a113-e4d75a168e36", "id": "CVE-2026-48006", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-48006 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-transport-sctp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:7200376b-f4d4-5eaf-860c-dfea961f8b96", "id": "CVE-2026-48043", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48043 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-transport-sctp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:f506de82-09df-5643-80cf-594f25522261", "id": "CVE-2026-48059", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48059 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-transport-sctp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:c3dd531c-ab37-5df2-8269-77c33db07286", "id": "CVE-2026-50010", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50010 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-transport-sctp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:a4717c87-286e-5ee5-ad20-bc73c4f5b0af", "id": "CVE-2026-50011", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-50011 does not affect version 4.1.130.Final-tuxcare.1 of io.netty:netty-transport-sctp. Patches already applied: bff98ee51b5d0b7ee25fd5005f2169f2a0467efa (already in target via d5b4e38845f5 'Backport CVE-2026-44890 to 4.1.130.Final')" }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:7ae53c6c-a0f4-5e94-a6dd-96f2e5fbf44f", "id": "CVE-2026-50020", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50020 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-transport-sctp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:f12bc39e-6e7f-5027-8f72-81877357886c", "id": "CVE-2026-50560", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.130.Final-tuxcare.1 of io.netty:netty-transport-sctp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:d521a7ad-c527-5bf5-9123-13cf0b15f611", "id": "CVE-2026-55831", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55831 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-transport-sctp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:a9ab5a74-85aa-5117-b829-6ab37489f5f6", "id": "CVE-2026-55833", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55833 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-transport-sctp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:fd299b4b-3776-55c5-8678-da9f9410bd39", "id": "CVE-2026-55851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55851 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-transport-sctp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:0ef5e3a5-e755-5b10-9056-cc92ff28fbd6", "id": "CVE-2026-56745", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56745 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-transport-sctp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:41dfe23d-12eb-53a9-bae7-58e51720adcf", "id": "CVE-2026-56746", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56746 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-transport-sctp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:baccdd33-6500-5dbe-a906-dea02e135e19", "id": "CVE-2026-56817", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56817 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-transport-sctp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:6de41d04-74d2-5ad4-a185-6c75061d4ebe", "id": "CVE-2026-56818", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56818 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-transport-sctp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:607abe58-bb15-5aea-8005-15c65d4dcdd0", "id": "CVE-2026-56819", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56819 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-transport-sctp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:af2d4cc2-b4b0-5a47-9510-f46b7e36080d", "id": "CVE-2026-56820", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56820 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-transport-sctp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:05a0ab5d-506b-5085-ac1b-a755cf12e0cb", "id": "CVE-2026-56821", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56821 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-transport-sctp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:01669a8e-6c81-5c15-924c-dcf781fe682f", "id": "CVE-2026-56822", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56822 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-transport-sctp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:229119e5-3dd7-5700-961e-b58392d776ac", "id": "CVE-2026-59898", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59898 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-transport-sctp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:2d993a8a-b837-5feb-9fd7-dc712fe6798f", "id": "CVE-2026-59899", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59899 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-transport-sctp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:44f12d39-4d0a-5b21-91a1-dc0484cfe8c8", "id": "CVE-2026-59900", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59900 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-transport-sctp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:c70083b4-e59b-50d7-ad75-ada60c6c6174", "id": "CVE-2026-59901", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59901 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-transport-sctp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:e034834c-4b62-5322-989a-9910630981b6", "id": "CVE-2026-59902", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59902 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-transport-sctp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:9b467d9f-72d4-5f5a-b5e2-bd879bca8015", "id": "CVE-2026-59903", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59903 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-transport-sctp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:b19a573b-514f-53e4-b472-fa3c13b7f744", "id": "CVE-2026-59919", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59919 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-transport-sctp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:90b7a678-567f-59cb-9f92-3a7faba153b0", "id": "CVE-2026-59920", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59920 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-transport-sctp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:bbc66852-57e8-5e1a-85b9-aec099ec41ab", "id": "CVE-2026-59921", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59921 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-transport-sctp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:f7bdaff6-6473-5c61-8911-8f8a0e831427", "id": "CVE-2026-73507", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-73507 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-transport-sctp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:a73ea630-357f-5123-8c65-b442f8451317", "id": "CVE-2026-73508", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-73508 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-transport-sctp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:04ea6647-3350-5eba-8f33-cb29476e8d77", "id": "GHSA-mfg7-5gfp-c4w3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-transport-sctp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:b4629cfd-b56f-5f0d-a34d-93322f943c1e", "id": "GHSA-v74w-7mr3-4qg3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.130.Final-tuxcare.1 of io.netty:netty-transport-sctp." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.1" } ] } ], "dependencies": [ { "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.1" } ] }