{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:74d47d88-494b-581c-bcaa-445677673c9f",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.3",
      "type": "library",
      "group": "io.netty",
      "name": "netty-transport-sctp",
      "version": "4.1.130.Final-tuxcare.3",
      "purl": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.3"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:295096da-d333-54e0-82cd-738abc0b58c5",
      "id": "CVE-2025-55163",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2025-55163 does not affect version 4.1.130.Final-tuxcare.3 of io.netty:netty-transport-sctp. already_fixed \u2014 The target Netty 4.1.130.Final repository already contains the complete MadeYouReset (CVE-2025-55163) mitigation. The Http2MaxRstFrameLimitEncoder defense class is present, integrated into the HTTP/2 connection handler builder, and enabled by default for servers with a threshold of 200 RST_STREAM frames per 30-second window. All protocol-error-triggered RST writes route through the protected en..."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b060d1f9-7661-5765-8089-7f4365a091b1",
      "id": "CVE-2026-33870",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33870 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f78d4b87-f39c-575a-8a8d-d59455dcf2e1",
      "id": "CVE-2026-33871",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-33871 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:998085e7-a525-58c1-8e62-6a53c791a317",
      "id": "CVE-2026-41417",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41417 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cd121aa8-09e0-52d0-9501-ffdbd21db902",
      "id": "CVE-2026-42578",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42578 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:805057ef-8030-560d-a3bf-425c25602754",
      "id": "CVE-2026-42579",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42579 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:159f8a07-8ebd-5f09-95bb-bc1bb93db9dd",
      "id": "CVE-2026-42580",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42580 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1383316f-3ae0-5dec-8a25-0452b5da241f",
      "id": "CVE-2026-42581",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42581 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f01449ff-a005-58c9-bcb5-7bb24f0a3c7f",
      "id": "CVE-2026-42583",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42583 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4032af5f-31a5-52a1-839b-5070874693d4",
      "id": "CVE-2026-42584",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42584 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b122ed4e-daa0-50e2-b93b-adbc4d23880d",
      "id": "CVE-2026-42585",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42585 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9123ebad-5118-5370-9d6e-3e4c95a63995",
      "id": "CVE-2026-42586",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42586 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:13499a84-aa30-50d5-a69f-9530d6fa7e69",
      "id": "CVE-2026-42587",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42587 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e8db599b-ba50-571f-9f01-003ec50db04a",
      "id": "CVE-2026-44248",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44248 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a3e747ee-fa0f-57ba-a020-9276fce36b3b",
      "id": "CVE-2026-44249",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44249 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8a00822e-bd5e-5fd9-b0e9-3472dcb2ff01",
      "id": "CVE-2026-44250",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44250 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9bceed6b-7e11-5e34-992d-fe19da665481",
      "id": "CVE-2026-44890",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3a21617d-1a59-5531-9c11-f0ba92c521b9",
      "id": "CVE-2026-44891",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44891 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2a33fdb6-1592-5018-8b37-8eefbffa9b0b",
      "id": "CVE-2026-44893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44893 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2e33a3b1-fc53-598a-9158-5d00971f411a",
      "id": "CVE-2026-45416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45416 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:38dd15e1-d96b-50d5-847c-d1cbc0367204",
      "id": "CVE-2026-45536",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45536 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:19a0dd89-1250-59de-a8fe-6750723c5e67",
      "id": "CVE-2026-45673",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-45673 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a3375b1c-5544-53d5-93b5-83f0cb0d85bc",
      "id": "CVE-2026-45674",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-45674 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c720edc4-b47a-5b80-858f-f2ffd212e99f",
      "id": "CVE-2026-46340",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-46340 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4472dc62-97aa-558b-9c27-c06fe365c359",
      "id": "CVE-2026-47244",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47244 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b4c3cb24-7724-5c02-b3bc-7b932560ae42",
      "id": "CVE-2026-47691",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47691 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e30c889a-542f-5fdc-a091-9b2cc53b5062",
      "id": "CVE-2026-48006",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-48006 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:42039340-3e72-5d3b-8680-31aaf276685b",
      "id": "CVE-2026-48043",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-48043 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bc4061a2-c7f8-5dcb-9bb7-919679812da9",
      "id": "CVE-2026-48059",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-48059 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2fe1358c-56df-5f57-ad8c-18ff90bcd6e6",
      "id": "CVE-2026-50010",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50010 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:054267a7-71f0-51ae-bc49-c5d1a9f47251",
      "id": "CVE-2026-50011",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-50011 does not affect version 4.1.130.Final-tuxcare.3 of io.netty:netty-transport-sctp. Patches already applied: bff98ee51b5d0b7ee25fd5005f2169f2a0467efa (already in target via d5b4e38845f5 'Backport CVE-2026-44890 to 4.1.130.Final')"
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:72cf5c43-c799-598f-bccf-f91c65e26bfc",
      "id": "CVE-2026-50020",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50020 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f5d4ce2e-9c47-5f4c-9f3d-556c0c670c84",
      "id": "CVE-2026-50560",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d02d5712-502a-56ab-b147-1edd1260f38d",
      "id": "CVE-2026-55831",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-55831 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5056b4d3-a473-5e2b-b6e2-46164d8e4100",
      "id": "CVE-2026-55833",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-55833 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6732768d-3b25-5c14-aed2-4ccdc32b1821",
      "id": "CVE-2026-55851",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-55851 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1a7a2363-df4f-50b3-9e45-32e34fff2385",
      "id": "CVE-2026-56745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-56745 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6a2a7064-5015-5eb7-b496-499c52142d4f",
      "id": "CVE-2026-56746",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-56746 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7277fe29-d1f2-5c75-b0c4-4515b6a79f11",
      "id": "CVE-2026-56817",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-56817 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6d4793b9-7ed5-512c-ab97-137aa67e95d3",
      "id": "CVE-2026-56818",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-56818 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ec3f0d75-2973-5d74-830c-e2f05a7b8e3a",
      "id": "CVE-2026-56819",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-56819 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:23537ef9-aaaa-5cd5-83a7-e1b40dd00ffd",
      "id": "CVE-2026-56820",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-56820 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fd18723a-08ea-5163-9984-7db620a63e16",
      "id": "CVE-2026-56821",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-56821 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:45f51816-efb6-596e-bcee-2dd2980bd046",
      "id": "CVE-2026-56822",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-56822 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:066fe63b-3e01-52df-b254-cf676506a585",
      "id": "CVE-2026-59898",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59898 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9974726e-5a34-5bab-93c7-a586b25688a9",
      "id": "CVE-2026-59899",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59899 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:77ad6df3-87c3-5065-b973-67e6aae625aa",
      "id": "CVE-2026-59900",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59900 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:420b152b-3af6-5f93-b487-e2bc47a543d9",
      "id": "CVE-2026-59901",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59901 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7046f260-8702-51d9-a4c2-1fea01d27630",
      "id": "CVE-2026-59902",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59902 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8fb4c8bb-15e8-5538-b2fa-238d16b1e11d",
      "id": "CVE-2026-59903",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59903 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:69d4d947-929c-55b8-961c-b0bece27fb32",
      "id": "CVE-2026-59919",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59919 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5d0bd9c2-da81-58b1-b781-e454fc8f8f3a",
      "id": "CVE-2026-59920",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59920 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a3078942-c906-55e6-ac0a-b6cebd1aa3a6",
      "id": "CVE-2026-59921",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59921 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:176deb75-85f8-5e5e-a450-d6dcc9bb9b5f",
      "id": "CVE-2026-73507",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-73507 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b4ad5549-3bec-5042-93ac-df6550514f99",
      "id": "CVE-2026-73508",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-73508 is fixed in version 4.1.130.Final-tuxcare.3 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:21d82bc0-ed2c-5c59-acc2-63e7c4088072",
      "id": "GHSA-mfg7-5gfp-c4w3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:62e536c5-2913-59e3-8349-a6973e354ec8",
      "id": "GHSA-v74w-7mr3-4qg3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.130.Final-tuxcare.3 of io.netty:netty-transport-sctp."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.3"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.netty/netty-transport-sctp@4.1.130.Final-tuxcare.3"
    }
  ]
}