{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:8c44818e-af7d-5697-b41f-29530e0351ff", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/io.netty/netty-transport@4.1.122.Final-tuxcare.1", "type": "library", "group": "io.netty", "name": "netty-transport", "version": "4.1.122.Final-tuxcare.1", "purl": "pkg:maven/io.netty/netty-transport@4.1.122.Final-tuxcare.1" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:7ce133ce-7ffe-508d-95b5-c182381030ad", "id": "CVE-2025-55163", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-55163 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:bd05b2d6-c28e-5d21-83ad-9cf8149bc63f", "id": "CVE-2025-58056", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-58056 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:2e74b362-d3f8-58f9-8e91-a3cf59eba8b6", "id": "CVE-2025-58057", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-58057 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:66eba3a5-33b6-5c56-b22f-6a0087278869", "id": "CVE-2025-59419", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-59419 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:4e3564dc-972f-5f28-8617-04e803974fa5", "id": "CVE-2025-67735", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-67735 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:372bfc4f-340e-5970-9bcf-5b23be6ab3df", "id": "CVE-2026-33870", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33870 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:73f3b0b9-5ea4-5503-bfb3-84a702a6dcaa", "id": "CVE-2026-33871", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33871 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:b7241594-e893-55f9-bf3f-7d5937b6ab65", "id": "CVE-2026-41417", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41417 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:3e73519f-39c6-53d3-baa3-685d176fad48", "id": "CVE-2026-42577", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-42577 does not affect version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport. CVE-2026-42577 affects Netty 4.2.x only (advisory range >= 4.2.0.Final, < 4.2.13.Final). An fd left registered with an epoll event mask of 0 is woken forever by the unmaskable EPOLLERR/EPOLLHUP after a RST on a half-closed connection. Target 4.1.122.Final is NOT affected due to architectural differences. The patch modifies EpollIoHandler.java and EpollIoOps.java, part of 4.2's IoHandler/IoOps abstraction. Neither file exists in 4.1.x, which registers via EpollEventLoop.modify() off AbstractEpollChannel.flags. That field is seeded Native.EPOLLET, and no read/close/half-close path clears it (only the explicit pre-registration setEpollMode(LEVEL_TRIGGERED) opt-in), so the registration stays edge-triggered and the RST is reported once per edge instead of on every epoll_wait. The chain from INPUT (connection state change) to GOAL (CPU busy-loop via empty event mask) is broken at step (ii): the target cannot produce an empty event mask. Verdict: not_affected. Justification: code_not_reachable (Rule 5 Type A2)." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:300ee5b8-80c7-5be4-a282-5ec9cc1fb2da", "id": "CVE-2026-42578", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42578 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:fdb7920e-6d67-50e1-bcc3-b229281919cd", "id": "CVE-2026-42579", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42579 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:249dd711-24e1-552a-b803-fc46c3c2eeae", "id": "CVE-2026-42580", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42580 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:9444e636-85fc-596d-a47b-abc2193a0e2b", "id": "CVE-2026-42581", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42581 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:716cb139-2ca8-5edd-b4a4-d6ffa8787c39", "id": "CVE-2026-42583", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42583 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:a1d2fa31-5572-54fe-bbc9-f282c055672e", "id": "CVE-2026-42584", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42584 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:1e2abefe-ab04-57c3-8b59-57af2940cdee", "id": "CVE-2026-42585", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42585 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:baab45c3-be6e-5b65-a5f1-05bbdb19bc66", "id": "CVE-2026-42586", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42586 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:9d7b9d77-7aeb-51c3-9061-b17d4cf8c9f4", "id": "CVE-2026-42587", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42587 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:52e37e73-e4be-5562-b936-09e7c872fa6e", "id": "CVE-2026-44248", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44248 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:0c468588-c4fa-59dc-8c37-fe5a970be634", "id": "CVE-2026-44249", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44249 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:c096a760-1ef7-5527-9c7c-8600ea7c4c24", "id": "CVE-2026-44250", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44250 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:8fc4b165-cfeb-54f3-a510-8409e2374413", "id": "CVE-2026-44890", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44890 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:20887501-bad5-5877-a606-ec7f2755ee4c", "id": "CVE-2026-44891", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44891 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:61e27d72-3c58-5591-a105-98b6b77c2807", "id": "CVE-2026-44893", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44893 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:6e9a7fda-18b5-5486-9422-34f908661ec0", "id": "CVE-2026-45416", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45416 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:3e2886b4-3ab2-5cd5-a038-983637eb759e", "id": "CVE-2026-45536", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45536 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:fc8da709-a150-5509-b78f-1bd59d82558e", "id": "CVE-2026-45673", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45673 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:b8ae62cf-fb2f-5f53-8b72-1abc4a6505fb", "id": "CVE-2026-45674", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45674 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:a00b6a95-4997-5b88-bd39-8064c826b0ed", "id": "CVE-2026-46340", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-46340 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:16a5aca4-c8bb-5e6f-b9fb-74df85146125", "id": "CVE-2026-47244", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47244 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:3d0168b5-73e0-57d9-90ac-4b017b64296b", "id": "CVE-2026-47691", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47691 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:1a82ece6-0efb-585d-81e1-6c1abc4edb62", "id": "CVE-2026-48006", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-48006 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:f37bfb26-7423-5294-8e84-bb326de7f7cc", "id": "CVE-2026-48043", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-48043 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:c754d792-a3f7-5b3e-bbeb-937198a662e3", "id": "CVE-2026-48059", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-48059 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:7eb47c46-0e74-5a83-be2e-eab05a559fec", "id": "CVE-2026-50010", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50010 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:39ebb6a2-016f-52c3-a07d-8affc19f7133", "id": "CVE-2026-50011", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50011 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:aead7aae-9e88-56da-8c11-59a86fab4d4f", "id": "CVE-2026-50020", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50020 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:92079f47-e89f-55b2-ba3a-53eac147b44e", "id": "CVE-2026-50560", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50560 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:48d44928-764b-572c-a3be-14f89aca3811", "id": "CVE-2026-55831", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55831 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:627a77c3-dfcf-5af9-a06a-42ec329974fd", "id": "CVE-2026-55833", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55833 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:e2dd8c61-603c-5066-9dd2-e44a710dfdea", "id": "CVE-2026-55851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55851 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:d9fe8e1b-b38d-595c-a7cf-4929113b0d9b", "id": "CVE-2026-56745", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56745 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:c273b463-51ce-5971-ae73-7526b1990544", "id": "CVE-2026-56746", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56746 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:f5cd1f20-7de1-5041-8426-d0ab1b4c7e2b", "id": "CVE-2026-56817", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56817 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:e3d2e077-a7ec-533c-9eb0-8cbe31f508ce", "id": "CVE-2026-56818", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56818 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:f486a2f7-627f-5304-84cc-1ff70798a7da", "id": "CVE-2026-56819", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56819 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:1d41c3ca-ae94-577e-bf90-b86813846ffe", "id": "CVE-2026-56820", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56820 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:75c1782e-6e13-51e8-9bdc-bf3eb5edbda5", "id": "CVE-2026-56821", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56821 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:4941552a-9f77-5fcd-9afd-29a827a83b7c", "id": "CVE-2026-56822", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56822 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:3b7893b9-eec6-5680-81d3-fd5092d973a4", "id": "CVE-2026-59898", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59898 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:cd9a1797-a043-5002-b417-0d1febd9ace9", "id": "CVE-2026-59899", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59899 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:6e27ef43-cc07-5d4d-84e6-62e4187e0311", "id": "CVE-2026-59900", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59900 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:68da9770-6fbc-545a-925f-34228ca6a80f", "id": "CVE-2026-59901", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59901 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:5acc2372-12c4-5335-a1c7-65d13a8679bc", "id": "CVE-2026-59902", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59902 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:7bd496a4-b187-5139-8229-9d55502cf9ac", "id": "CVE-2026-59903", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59903 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:f0c43719-d609-513d-9dc4-20f0abd6af6f", "id": "CVE-2026-59919", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59919 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:c6638ce4-012f-5eb2-9b3c-9aa6f8b05a90", "id": "CVE-2026-59920", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59920 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:61b07cec-b198-5144-a7a6-7ed83979262b", "id": "CVE-2026-59921", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59921 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:3e85f8c1-4dc1-5266-9fb8-40acd10141f0", "id": "CVE-2026-73507", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-73507 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:7bc538c2-a719-5465-a775-389f565f4104", "id": "CVE-2026-73508", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-73508 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:36fad335-2685-5da1-8b1b-47775516d7a8", "id": "GHSA-mfg7-5gfp-c4w3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.122.Final-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:ce7c06fe-3dd0-5373-ace2-69910f6132e2", "id": "GHSA-v74w-7mr3-4qg3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.122.Final-tuxcare.1 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.122.Final-tuxcare.1" } ] } ], "dependencies": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.122.Final-tuxcare.1" } ] }