{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:3c8224d8-98b4-5616-a2bf-db831d3ef048", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/io.netty/netty-transport-udt@4.1.122.Final-tuxcare.1", "type": "library", "group": "io.netty", "name": "netty-transport-udt", "version": "4.1.122.Final-tuxcare.1", "purl": "pkg:maven/io.netty/netty-transport-udt@4.1.122.Final-tuxcare.1" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:6aafd672-0377-5e25-bb4a-8e483278655a", "id": "CVE-2025-55163", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-55163 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport-udt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:58f20ce6-9a96-55fd-a3a4-8babe0cec1bd", "id": "CVE-2025-58056", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-58056 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport-udt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:92a56594-4fba-5481-9739-90ddeb02a53a", "id": "CVE-2025-58057", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-58057 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport-udt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:3e885e7a-20c8-56c0-80a0-3fa2bb228067", "id": "CVE-2025-59419", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-59419 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport-udt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:43bf364f-83d5-5690-b770-8ceaf5fc8047", "id": "CVE-2025-67735", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-67735 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport-udt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:93195143-6581-5b7d-b5ba-5cb1cf505e77", "id": "CVE-2026-33870", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33870 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport-udt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:cd4a8990-4ef7-505d-8f5a-1dc439cacbe3", "id": "CVE-2026-33871", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33871 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport-udt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:f6c2cdec-5f70-5d3c-be08-f2343dbaf48d", "id": "CVE-2026-41417", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41417 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport-udt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:e33898cf-638d-5ed7-a586-131ff00911c0", "id": "CVE-2026-42577", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-42577 does not affect version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport-udt. CVE-2026-42577 affects Netty 4.2.x only (advisory range >= 4.2.0.Final, < 4.2.13.Final). An fd left registered with an epoll event mask of 0 is woken forever by the unmaskable EPOLLERR/EPOLLHUP after a RST on a half-closed connection. Target 4.1.122.Final is NOT affected due to architectural differences. The patch modifies EpollIoHandler.java and EpollIoOps.java, part of 4.2's IoHandler/IoOps abstraction. Neither file exists in 4.1.x, which registers via EpollEventLoop.modify() off AbstractEpollChannel.flags. That field is seeded Native.EPOLLET, and no read/close/half-close path clears it (only the explicit pre-registration setEpollMode(LEVEL_TRIGGERED) opt-in), so the registration stays edge-triggered and the RST is reported once per edge instead of on every epoll_wait. The chain from INPUT (connection state change) to GOAL (CPU busy-loop via empty event mask) is broken at step (ii): the target cannot produce an empty event mask. Verdict: not_affected. Justification: code_not_reachable (Rule 5 Type A2)." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:e4a9bbd6-51c0-51a6-a61b-9dc24da4edb3", "id": "CVE-2026-42578", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42578 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport-udt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:288b3cc8-1048-556f-b2e3-b4142c011dc2", "id": "CVE-2026-42579", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42579 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport-udt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:f170be9e-2521-5dcd-868e-4b96df77a7b1", "id": "CVE-2026-42580", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42580 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport-udt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:b2e01280-3c1d-54fa-9151-59351bb28b22", "id": "CVE-2026-42581", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42581 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport-udt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:bac7bbde-9c43-50b9-ab25-059a7ec109c0", "id": "CVE-2026-42583", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42583 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport-udt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:97e79307-4a71-5ad2-8334-b6482abdd078", "id": "CVE-2026-42584", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42584 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport-udt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:6657725f-6bc9-5c6a-aac9-af5c78a406cf", "id": "CVE-2026-42585", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42585 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport-udt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:459f0885-210e-527a-8b78-51c9f544bf8e", "id": "CVE-2026-42586", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42586 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport-udt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:80c6fb17-4cc2-5cac-8620-62d1780ff82d", "id": "CVE-2026-42587", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42587 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport-udt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:ec219c32-c159-56dc-9ec6-58fbbf7d8495", "id": "CVE-2026-44248", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44248 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport-udt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:44c994ee-99ef-575b-bd8a-09f0a343ef0b", "id": "CVE-2026-44249", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44249 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport-udt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:403d7ae0-9d6d-5cb0-9c66-80cc46699216", "id": "CVE-2026-44250", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44250 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport-udt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:0f1f8ea1-12d2-5fd3-9ff9-13655ce9329e", "id": "CVE-2026-44890", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44890 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport-udt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:f58c025a-6bc1-5947-b882-b9141b3c0fbf", "id": "CVE-2026-44891", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44891 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport-udt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:e26e8364-d26e-5828-9193-a0744aa69201", "id": "CVE-2026-44893", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44893 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport-udt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:043248db-a3b1-57fc-b9b6-e5b2c9f2f91b", "id": "CVE-2026-45416", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45416 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport-udt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:86a7d8fe-8cc8-5dc3-a061-1552fed68b26", "id": "CVE-2026-45536", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45536 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport-udt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:d54310ee-1c12-5542-a0fe-ef16e84e080f", "id": "CVE-2026-45673", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45673 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport-udt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:0137fa76-40d2-5121-ad12-30a4fc617a9a", "id": "CVE-2026-45674", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45674 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport-udt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:d7281b80-aeb7-5f55-a1b9-f2425ac11b61", "id": "CVE-2026-46340", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-46340 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport-udt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:82ab6ea6-bb39-5ce0-875b-c04329fca889", "id": "CVE-2026-47244", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47244 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport-udt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:0a5e6048-5344-59e9-9ba1-29a0f8d17ae3", "id": "CVE-2026-47691", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47691 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport-udt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:3e7d7ecd-779c-5217-a0a0-a18c79dd2656", "id": "CVE-2026-48006", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-48006 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport-udt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:99d91d7c-29cb-5239-bab0-9b5bd633821a", "id": "CVE-2026-48043", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-48043 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport-udt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:c7f03579-74eb-5e2f-97d9-fd9fcd0a6e1c", "id": "CVE-2026-48059", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-48059 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport-udt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:7aa078c9-098c-5e3b-8dfa-07f1f761924d", "id": "CVE-2026-50010", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50010 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport-udt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:f9b9ac1c-b3ed-5801-922d-299f682ffc15", "id": "CVE-2026-50011", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50011 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport-udt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:f83ffbeb-169b-5257-bfa2-78f4272a67f3", "id": "CVE-2026-50020", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50020 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport-udt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:e26c1bed-fc34-598c-bce8-f7a966e62481", "id": "CVE-2026-50560", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50560 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport-udt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:0749b4c7-08f9-5289-b845-488b44102587", "id": "CVE-2026-55831", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55831 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport-udt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:32d37e70-fb98-5547-a40f-dace602c66f9", "id": "CVE-2026-55833", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55833 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport-udt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:2148bf25-8d5e-5da8-ba75-fdb9eefd148e", "id": "CVE-2026-55851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55851 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport-udt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:91e6131c-fd2d-5f32-8bb2-abefa544df4d", "id": "CVE-2026-56745", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56745 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport-udt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:71f93cb4-13cc-5a90-aa9d-f13137ea5a81", "id": "CVE-2026-56746", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56746 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport-udt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:ba7c4174-1365-5b9f-a433-64332d36201e", "id": "CVE-2026-56817", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56817 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport-udt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:2f17f734-72dd-5598-ac2b-b489a4dd067a", "id": "CVE-2026-56818", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56818 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport-udt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:6bf541c4-19e7-5726-9a2a-0e096ddc55fd", "id": "CVE-2026-56819", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56819 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport-udt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:6987ccf6-3f44-577b-9758-5d169205d979", "id": "CVE-2026-56820", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56820 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport-udt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:445ccd00-6d92-5d3e-9e2b-08145ef910c4", "id": "CVE-2026-56821", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56821 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport-udt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:1237dbf1-1579-5360-95c3-24a6c660a289", "id": "CVE-2026-56822", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56822 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport-udt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:a4115d3d-9931-5e87-80cc-5052acb65226", "id": "CVE-2026-59898", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59898 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport-udt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:6402be86-ebe2-5dfd-a505-27b64a2added", "id": "CVE-2026-59899", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59899 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport-udt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:39eff928-4b4a-5eb1-9aac-d50d432232ee", "id": "CVE-2026-59900", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59900 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport-udt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:c1d6fd41-1043-5cbc-86fe-6cdc2abaca03", "id": "CVE-2026-59901", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59901 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport-udt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:e6c42863-c642-5c22-8951-944372eb8ef6", "id": "CVE-2026-59902", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59902 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport-udt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:90890b53-2880-5810-9b45-9dd8ba71f12d", "id": "CVE-2026-59903", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59903 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport-udt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:688e8d38-01c3-544f-9f0c-131b265a6c34", "id": "CVE-2026-59919", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59919 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport-udt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:63d79c6a-37b3-5edd-b8ea-930b906125a8", "id": "CVE-2026-59920", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59920 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport-udt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:f72b8d93-d0d9-56c2-a081-5bf6932e32f5", "id": "CVE-2026-59921", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59921 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport-udt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:474186d0-e4e7-5f3b-9b7d-6399d4443b15", "id": "CVE-2026-73507", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-73507 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport-udt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:0b5f9e8c-a7ee-5bd1-91f0-f7a72e48c651", "id": "CVE-2026-73508", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-73508 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport-udt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:6b65e56f-f101-5108-bdbe-b938b93c4870", "id": "GHSA-mfg7-5gfp-c4w3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport-udt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:9c982dab-205d-5efe-8931-048ab8243b2c", "id": "GHSA-v74w-7mr3-4qg3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport-udt." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.122.Final-tuxcare.1" } ] } ], "dependencies": [ { "ref": "pkg:maven/io.netty/netty-transport-udt@4.1.122.Final-tuxcare.1" } ] }