{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:9faa2963-f946-598d-9e44-76c98045022b", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/io.netty/netty-transport@4.1.122.Final-tuxcare.2", "type": "library", "group": "io.netty", "name": "netty-transport", "version": "4.1.122.Final-tuxcare.2", "purl": "pkg:maven/io.netty/netty-transport@4.1.122.Final-tuxcare.2" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:dde8d24d-2898-5ee3-a4fc-0052d6aaa522", "id": "CVE-2025-55163", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55163 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:fb0f2d8c-ed19-5a10-aeda-8c65cf22d404", "id": "CVE-2025-58056", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-58056 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:b4f9708c-89a3-5c2e-9e41-848331658050", "id": "CVE-2025-58057", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-58057 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:1b72400e-184a-5359-9319-cf4d0ab6506a", "id": "CVE-2025-59419", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59419 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:75b95f58-08f3-5beb-b74c-cd57d514bc1f", "id": "CVE-2025-67735", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-67735 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:b65fceee-c464-55c3-bb6e-736afb55c405", "id": "CVE-2026-33870", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33870 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:7dce59a2-298d-5973-929e-108c4c1d9467", "id": "CVE-2026-33871", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33871 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:66287d02-52a4-5349-bf99-a6ed766b6fda", "id": "CVE-2026-41417", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41417 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:9ae3634b-575f-5097-a376-54413347bf9b", "id": "CVE-2026-42577", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-42577 does not affect version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport. CVE-2026-42577 affects Netty 4.2.x only (advisory range >= 4.2.0.Final, < 4.2.13.Final). An fd left registered with an epoll event mask of 0 is woken forever by the unmaskable EPOLLERR/EPOLLHUP after a RST on a half-closed connection. Target 4.1.122.Final is NOT affected due to architectural differences. The patch modifies EpollIoHandler.java and EpollIoOps.java, part of 4.2's IoHandler/IoOps abstraction. Neither file exists in 4.1.x, which registers via EpollEventLoop.modify() off AbstractEpollChannel.flags. That field is seeded Native.EPOLLET, and no read/close/half-close path clears it (only the explicit pre-registration setEpollMode(LEVEL_TRIGGERED) opt-in), so the registration stays edge-triggered and the RST is reported once per edge instead of on every epoll_wait. The chain from INPUT (connection state change) to GOAL (CPU busy-loop via empty event mask) is broken at step (ii): the target cannot produce an empty event mask. Verdict: not_affected. Justification: code_not_reachable (Rule 5 Type A2)." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:1b760e70-d454-546d-8411-65bdf494846c", "id": "CVE-2026-42578", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42578 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:ee77f697-81c6-5d56-8464-b3773bfb13ff", "id": "CVE-2026-42579", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42579 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:b6597cd5-2e48-59a7-a0bf-95501fb43108", "id": "CVE-2026-42580", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42580 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:707e424b-e1a7-5e27-aead-647992af5eda", "id": "CVE-2026-42581", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42581 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:5a4a6e0a-87c9-5ba5-a90a-ebaedb5405ea", "id": "CVE-2026-42583", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42583 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:3b30adc3-aa4c-5118-bf08-ea568824d702", "id": "CVE-2026-42584", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42584 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:7dfeb73f-dded-5401-bf70-15bbb5b397e8", "id": "CVE-2026-42585", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42585 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:4075fb21-acd7-599d-92ed-8c1f58023106", "id": "CVE-2026-42586", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42586 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:ae91292c-f0d3-5c78-9240-cc9286984253", "id": "CVE-2026-42587", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42587 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:93b19586-fee3-50f4-8538-5b9c33058b49", "id": "CVE-2026-44248", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44248 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:1113a1a9-ec5a-5e55-b20a-799464fcc481", "id": "CVE-2026-44249", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44249 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:7fbee218-9ac2-595c-a187-898216e667bb", "id": "CVE-2026-44250", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44250 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:bfb20ed9-9933-5ad0-9cb8-806d1f3da422", "id": "CVE-2026-44890", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:c1697eeb-359a-5c40-a7a4-f5b93ee11d74", "id": "CVE-2026-44891", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44891 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:156424ce-d851-5736-af98-7f24445cc43e", "id": "CVE-2026-44893", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44893 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:11d2451f-acfe-51ba-b726-3dbdfb293761", "id": "CVE-2026-45416", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-45416 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:3b29a3b2-5592-5388-9475-d6775f894092", "id": "CVE-2026-45536", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-45536 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:aa14e030-344b-56e0-92ca-824f9421a13a", "id": "CVE-2026-45673", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-45673 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:d565408c-37be-5205-bab6-1536d4f4a571", "id": "CVE-2026-45674", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-45674 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:227cb30d-b4c2-5230-a5fa-dcb30b242fbb", "id": "CVE-2026-46340", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46340 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:efb865fa-6faf-59fb-be9f-b70f27e9f49f", "id": "CVE-2026-47244", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47244 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:703c8e8c-346e-526d-bf7e-0336d451ce7d", "id": "CVE-2026-47691", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47691 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:9c4c38ba-a06a-5cbc-a3ca-9d46d8f3824c", "id": "CVE-2026-48006", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48006 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:c5c46fec-a023-526b-8442-30d5f815689f", "id": "CVE-2026-48043", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48043 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:16ee37b0-c2fd-58b2-8b3c-bf974454fa43", "id": "CVE-2026-48059", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48059 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:bf07d314-653f-56be-839a-7d4011f7d76c", "id": "CVE-2026-50010", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50010 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:3977d2be-2866-514d-8a83-7c27682296dc", "id": "CVE-2026-50011", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50011 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:fac91569-ba6e-5630-8265-dba5c8174603", "id": "CVE-2026-50020", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50020 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:6e5c10f8-9377-556a-b92b-375ccc8b7c97", "id": "CVE-2026-50560", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:c8727f4d-a148-5f53-ac47-2b54a5dfd8e9", "id": "CVE-2026-55831", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-55831 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:900d6e3e-bf26-559d-ab58-cc630fbe9f18", "id": "CVE-2026-55833", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-55833 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:69c216de-1284-574c-b7fa-5c2b2f75e272", "id": "CVE-2026-55851", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-55851 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:aeaea9ad-1843-525b-a04f-e03e1ad539af", "id": "CVE-2026-56745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56745 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:0ce063f0-6b25-5a52-8e6d-48214ea255d1", "id": "CVE-2026-56746", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56746 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:4e4c153b-eb87-5c60-a5f6-4128e729d16b", "id": "CVE-2026-56817", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56817 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:fcf595a8-c2b3-5068-bf7c-59ebeb12982d", "id": "CVE-2026-56818", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56818 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:d4843cb7-30a8-5fd1-9e85-d520eeeb35bd", "id": "CVE-2026-56819", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56819 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:0dcf73bf-cb62-543d-bae4-ac5906a9cac0", "id": "CVE-2026-56820", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56820 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:dfa64a1e-33a8-58e9-871b-7178053a2340", "id": "CVE-2026-56821", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56821 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:c2e40324-f3d5-5280-9006-7dc4558d632b", "id": "CVE-2026-56822", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56822 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:4f45683a-badc-5646-8bf9-ab51ddf57b18", "id": "CVE-2026-59898", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59898 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:5df94428-fb66-5feb-b4a8-b5eba6da71ae", "id": "CVE-2026-59899", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59899 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:405649be-404c-57ff-83f0-87a903eb258a", "id": "CVE-2026-59900", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59900 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:0dd48afb-deee-52ae-8324-1227bdb617cd", "id": "CVE-2026-59901", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59901 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:53df4951-c124-56ef-ac01-c3498207af6c", "id": "CVE-2026-59902", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59902 affects version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:a92fe9c6-dfb7-5390-baff-5ecb0e58848d", "id": "CVE-2026-59903", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59903 affects version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:c9e76d3d-5e1b-5c44-bdae-a35cbaea6650", "id": "CVE-2026-59919", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59919 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:509c41c2-6504-5319-bdc0-3e7a25c3fc19", "id": "CVE-2026-59920", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59920 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:70fd9c23-4977-5caf-987b-27c319951e29", "id": "CVE-2026-59921", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59921 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:52842393-ff51-5cef-83e8-28f39c9f43d7", "id": "CVE-2026-73507", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-73507 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:9a33277c-677a-5bab-b28e-fd5b5f61da6a", "id": "CVE-2026-73508", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-73508 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:ed7c045f-4133-523a-b99a-a34deec6f8a9", "id": "GHSA-mfg7-5gfp-c4w3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:c1bc8a84-6818-5a92-b6a6-f674ee23b9cc", "id": "GHSA-v74w-7mr3-4qg3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.122.Final-tuxcare.2 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.122.Final-tuxcare.2" } ] } ], "dependencies": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.122.Final-tuxcare.2" } ] }