{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:2e418222-1e0f-56b6-ba9d-ee4581d4f938",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.2",
      "type": "library",
      "group": "io.netty",
      "name": "netty-transport-sctp",
      "version": "4.1.130.Final-tuxcare.2",
      "purl": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.2"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:9ab95098-c228-5f16-b5c0-db45ab733961",
      "id": "CVE-2025-55163",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2025-55163 does not affect version 4.1.130.Final-tuxcare.2 of io.netty:netty-transport-sctp. already_fixed \u2014 The target Netty 4.1.130.Final repository already contains the complete MadeYouReset (CVE-2025-55163) mitigation. The Http2MaxRstFrameLimitEncoder defense class is present, integrated into the HTTP/2 connection handler builder, and enabled by default for servers with a threshold of 200 RST_STREAM frames per 30-second window. All protocol-error-triggered RST writes route through the protected en..."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3f55b71e-a399-5a20-8225-9f406ced8d20",
      "id": "CVE-2026-33870",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33870 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b4183919-262f-5331-98ce-55cb5f9aed90",
      "id": "CVE-2026-33871",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-33871 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:06d0d390-62aa-5a3f-a548-eaf81c6d61d7",
      "id": "CVE-2026-41417",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41417 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:62678dc6-cbf5-5f53-aa6a-0cf29b8055c6",
      "id": "CVE-2026-42578",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42578 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0c286b87-f7b0-5654-b3dc-8df33b6d7219",
      "id": "CVE-2026-42579",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42579 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:81441aff-badb-572f-9ccb-07558c29749d",
      "id": "CVE-2026-42580",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42580 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:10f3c71e-98c4-56b3-a70f-81a5a187ee86",
      "id": "CVE-2026-42581",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42581 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:76d5c048-7f47-5097-a850-345637a7866f",
      "id": "CVE-2026-42583",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42583 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1eb15030-986c-5fd5-8bcb-adfaf772fb1b",
      "id": "CVE-2026-42584",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42584 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:24dc0555-38d1-54f5-8249-1354b39e1a8c",
      "id": "CVE-2026-42585",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42585 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b8a142ed-c74b-5051-b2e9-f67af14c74e4",
      "id": "CVE-2026-42586",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42586 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1340ca3d-8c2b-55a8-bdc2-152abc6e7ec6",
      "id": "CVE-2026-42587",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42587 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a2c140e1-1cf0-5d00-a561-5961589e9a4e",
      "id": "CVE-2026-44248",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44248 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:59fd6c22-ea1e-5e91-9a6c-4f7b0eec9729",
      "id": "CVE-2026-44249",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44249 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c377ff4a-9fb1-59dc-8e40-a84db16fde1d",
      "id": "CVE-2026-44250",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44250 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fa9319cf-7cc4-5501-ac77-7b33f7a483b1",
      "id": "CVE-2026-44890",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4f40b760-d28a-54c9-9982-ec0ec559a4e1",
      "id": "CVE-2026-44891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44891 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1a9b1d00-6df8-57b0-9b88-882b24a1195f",
      "id": "CVE-2026-44893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44893 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9a6d08fa-3330-534e-97fd-635fc28cc4c4",
      "id": "CVE-2026-45416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45416 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:225b5a15-f1e8-56b1-bdda-32a16d5841d5",
      "id": "CVE-2026-45536",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45536 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c2719fec-ddf5-57f0-82fe-73e17d33e596",
      "id": "CVE-2026-45673",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-45673 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4bb2f1e3-b345-51b1-88be-ebdd156a4af6",
      "id": "CVE-2026-45674",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-45674 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:645accbe-4e8c-5da0-a657-40910e666623",
      "id": "CVE-2026-46340",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-46340 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e0cb9537-0a4d-5015-ae9c-9a795e96bf42",
      "id": "CVE-2026-47244",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47244 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5903d114-a145-5b8d-8a7e-69d6c6f65a2b",
      "id": "CVE-2026-47691",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47691 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c3e68ef2-2bb7-59f0-a172-eef0cdd9ed62",
      "id": "CVE-2026-48006",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-48006 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:95a85a7f-98d4-578f-9568-d2938c86cc5c",
      "id": "CVE-2026-48043",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-48043 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:93138716-1aa3-58d9-a365-cd52fbf45301",
      "id": "CVE-2026-48059",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-48059 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:feffdcda-b9e3-5bb3-8bb6-5ba08c552b7c",
      "id": "CVE-2026-50010",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50010 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:32b7a913-ceb6-5f7d-aa94-a26031a4c72c",
      "id": "CVE-2026-50011",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-50011 does not affect version 4.1.130.Final-tuxcare.2 of io.netty:netty-transport-sctp. Patches already applied: bff98ee51b5d0b7ee25fd5005f2169f2a0467efa (already in target via d5b4e38845f5 'Backport CVE-2026-44890 to 4.1.130.Final')"
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0ee9fc5b-4535-5fdd-872a-c98f36b22383",
      "id": "CVE-2026-50020",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50020 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8279cac0-3ccb-5394-ad5c-458aa7243ca7",
      "id": "CVE-2026-50560",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:666a3cf3-688b-533b-b871-48d61d299ffe",
      "id": "CVE-2026-55831",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55831 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4eed9c32-ed10-5fa2-aa16-4308bcde65a4",
      "id": "CVE-2026-55833",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55833 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b0088966-2083-518f-bcdc-a11507afc603",
      "id": "CVE-2026-55851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55851 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b848857b-fc03-53b1-8aa9-f536aa1f12a2",
      "id": "CVE-2026-56745",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56745 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0ab02003-948a-5c60-872d-dc40f0d2b513",
      "id": "CVE-2026-56746",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56746 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dceaeb4e-ce6c-5923-a369-b6813c5c4173",
      "id": "CVE-2026-56817",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56817 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f14eb207-51e7-511f-9f5b-f3ffd1160ac1",
      "id": "CVE-2026-56818",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56818 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:50a6b527-d1a7-5024-94de-714f0f6c8450",
      "id": "CVE-2026-56819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56819 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e67f390e-f520-5e1d-bd46-479069a56273",
      "id": "CVE-2026-56820",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56820 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b63ea43a-c1d3-570c-9530-0e86a3ddfbbf",
      "id": "CVE-2026-56821",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56821 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:503d6fd7-8190-5f75-94ce-86f1df84e1ff",
      "id": "CVE-2026-56822",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56822 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5ce92c51-017f-5d5b-b457-9ab98472dd32",
      "id": "CVE-2026-59898",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59898 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b5cb74ee-04af-5485-9fb5-f72f1716c2df",
      "id": "CVE-2026-59899",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59899 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:440d4ebb-5ddc-563a-bef4-af405e1b9aa6",
      "id": "CVE-2026-59900",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59900 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:11753a89-1e40-5b79-9c81-bf8b336460cf",
      "id": "CVE-2026-59901",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59901 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:db9c3ac6-1b4d-55d2-8f0e-bafdcc117cf7",
      "id": "CVE-2026-59902",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59902 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:32dadb97-70d1-5ae6-8b1c-474c7e90dc7d",
      "id": "CVE-2026-59903",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59903 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:69be7c41-055e-521a-8e5f-80a9e9801b56",
      "id": "CVE-2026-59919",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59919 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c97885ad-3417-5b5d-89f4-f81e943cb2fe",
      "id": "CVE-2026-59920",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59920 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c1469302-15b0-58bf-b793-dea4e1591939",
      "id": "CVE-2026-59921",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59921 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1dcf3ebe-17f4-5da3-92b5-e4a70012e9dc",
      "id": "CVE-2026-73507",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-73507 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ce88e086-5e1b-5ffc-a070-e2060da63968",
      "id": "CVE-2026-73508",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-73508 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b77dcf91-19d2-5ad0-99d1-0785ca4802a3",
      "id": "GHSA-mfg7-5gfp-c4w3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dac027ec-6a79-596b-a39b-abaf8ba5bbfa",
      "id": "GHSA-v74w-7mr3-4qg3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.2"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.2"
    }
  ]
}