{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:804652a0-4f32-533f-b76c-ec0c0ec89d51",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/io.netty/netty-transport@4.1.130.Final-tuxcare.2",
      "type": "library",
      "group": "io.netty",
      "name": "netty-transport",
      "version": "4.1.130.Final-tuxcare.2",
      "purl": "pkg:maven/io.netty/netty-transport@4.1.130.Final-tuxcare.2"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:3e33321a-eafa-51f4-8cdf-e67147e1b18e",
      "id": "CVE-2025-55163",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2025-55163 does not affect version 4.1.130.Final-tuxcare.2 of io.netty:netty-transport. already_fixed \u2014 The target Netty 4.1.130.Final repository already contains the complete MadeYouReset (CVE-2025-55163) mitigation. The Http2MaxRstFrameLimitEncoder defense class is present, integrated into the HTTP/2 connection handler builder, and enabled by default for servers with a threshold of 200 RST_STREAM frames per 30-second window. All protocol-error-triggered RST writes route through the protected en..."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:03bc48df-e74f-5980-80f9-b9460ccf8c13",
      "id": "CVE-2026-33870",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33870 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:584cb0bb-c47b-56cf-bdbd-f4ba2f8edd74",
      "id": "CVE-2026-33871",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-33871 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4b96d3fb-1d4f-528a-932f-31f2fd668c04",
      "id": "CVE-2026-41417",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41417 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ea63786f-c967-52c8-9bfd-9e6d353ea3e1",
      "id": "CVE-2026-42578",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42578 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:965f6dd2-127c-5625-bd1b-c10c37340ea5",
      "id": "CVE-2026-42579",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42579 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:22069223-d90f-5b82-b9f1-995660a1eff4",
      "id": "CVE-2026-42580",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42580 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cf721ac2-893e-5d2b-9a42-952bb71f075e",
      "id": "CVE-2026-42581",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42581 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8b8f08cf-61c0-543c-8b16-152e183c6257",
      "id": "CVE-2026-42583",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42583 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b7b814a4-e9e7-518a-a15f-58a1fdd12824",
      "id": "CVE-2026-42584",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42584 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:66a7ff61-e53b-51d8-9b2e-b52fac211fcc",
      "id": "CVE-2026-42585",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42585 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d9330e4f-6c67-5e69-979a-f1e04f68d093",
      "id": "CVE-2026-42586",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42586 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ab78fae6-3953-5185-a7fd-30a37032f390",
      "id": "CVE-2026-42587",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42587 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:240dc1f6-a20d-5e77-bc22-183ad77863e1",
      "id": "CVE-2026-44248",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44248 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fe27c8e5-228a-5d00-9a53-bdf9bf73cca5",
      "id": "CVE-2026-44249",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44249 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:85252e12-b06a-52ca-8422-f51f247562ec",
      "id": "CVE-2026-44250",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44250 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0007812d-accb-51a1-9181-5f36ba7686cc",
      "id": "CVE-2026-44890",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e473b11b-5f28-5648-9a6a-68b72434c9d6",
      "id": "CVE-2026-44891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44891 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:28f0ed1c-4317-5d63-831b-4b2c21aa658c",
      "id": "CVE-2026-44893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44893 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7bd76c45-33a0-5da9-aaf9-8c3daa50af25",
      "id": "CVE-2026-45416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45416 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0b037521-83fd-58df-be73-2a3be085026f",
      "id": "CVE-2026-45536",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45536 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e3a31ec8-3a9e-50d3-97f4-fbd28e26e169",
      "id": "CVE-2026-45673",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-45673 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:37556256-612c-5ccb-a0ea-0adf7fabf31e",
      "id": "CVE-2026-45674",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-45674 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:86ba3ba6-d61a-581e-9803-d305e40611a8",
      "id": "CVE-2026-46340",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-46340 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:10e1a1f8-ccac-5cb1-a4e1-1f506c451d6b",
      "id": "CVE-2026-47244",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47244 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5545fda2-b325-5a7b-b10a-86312685e0a3",
      "id": "CVE-2026-47691",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47691 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:288d0895-036b-5395-8023-439a1a650625",
      "id": "CVE-2026-48006",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-48006 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5c1ea759-981d-5ade-8605-6e13a9a9c7e5",
      "id": "CVE-2026-48043",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-48043 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2882d21d-27c8-508e-971a-ec79720605fa",
      "id": "CVE-2026-48059",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-48059 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5c2f2f17-408e-5202-8a6c-0c3964652de2",
      "id": "CVE-2026-50010",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50010 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c9655bdc-93f9-565b-8662-ef15f8b20e34",
      "id": "CVE-2026-50011",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-50011 does not affect version 4.1.130.Final-tuxcare.2 of io.netty:netty-transport. Patches already applied: bff98ee51b5d0b7ee25fd5005f2169f2a0467efa (already in target via d5b4e38845f5 'Backport CVE-2026-44890 to 4.1.130.Final')"
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5173cd80-c3d4-55de-be74-28e6431af40f",
      "id": "CVE-2026-50020",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50020 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:94546a82-4b3a-5aff-a93d-471340b96a14",
      "id": "CVE-2026-50560",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.130.Final-tuxcare.2 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9f895f09-9483-5edf-90e8-7e3881faaf06",
      "id": "CVE-2026-55831",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55831 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:73c92daa-d9b2-5103-99c3-b87eb912364e",
      "id": "CVE-2026-55833",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55833 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c212e7ab-9e80-5cf5-ae23-e1f81e0b5a0d",
      "id": "CVE-2026-55851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55851 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4e7b899f-4d21-53ea-b50e-9019ca2287bc",
      "id": "CVE-2026-56745",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56745 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:93b96222-85a1-501a-81f5-1239cf9d11df",
      "id": "CVE-2026-56746",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56746 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:aa59d8fe-34ee-557a-97dd-04a5b1bd758c",
      "id": "CVE-2026-56817",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56817 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4628b3e8-bf6c-5832-83d6-c2cf26e10fd0",
      "id": "CVE-2026-56818",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56818 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2d0c10fa-6871-5ca2-a862-e876c74b90d2",
      "id": "CVE-2026-56819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56819 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f0e9b8f9-50e3-59b4-8cc9-5dc79175cc6f",
      "id": "CVE-2026-56820",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56820 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4688d8e4-8a43-5159-a830-bfa5de2f863d",
      "id": "CVE-2026-56821",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56821 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:81a28669-bc52-5c97-b143-511844b79e39",
      "id": "CVE-2026-56822",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56822 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:11c29751-3cc3-5429-a5be-f3ec9ee7df8f",
      "id": "CVE-2026-59898",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59898 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f56e4bf7-c49e-590d-916a-e1e2a778c2aa",
      "id": "CVE-2026-59899",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59899 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:72098d75-e5b1-5049-b2d4-c18d1c54b9a6",
      "id": "CVE-2026-59900",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59900 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dc874997-c570-52d9-858c-840a1c01131f",
      "id": "CVE-2026-59901",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59901 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:50f127fa-cac2-5082-8883-7ad40f27a65c",
      "id": "CVE-2026-59902",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59902 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:553ab0ff-b1ae-5522-8ac9-80114fcd8307",
      "id": "CVE-2026-59903",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59903 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4165ff2a-a5f8-53fc-8830-8343c9cd5016",
      "id": "CVE-2026-59919",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59919 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a3c8a45e-ae25-512b-8da7-9857815ac8f0",
      "id": "CVE-2026-59920",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59920 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:aaf1720e-4eab-5cd6-8487-8dc886abe183",
      "id": "CVE-2026-59921",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59921 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:83b2ee49-33c3-504f-913c-21d79b3c45b0",
      "id": "CVE-2026-73507",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-73507 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ab8adfc6-1ffa-5ef9-81ca-fc208a68eee7",
      "id": "CVE-2026-73508",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-73508 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9a305fa5-429c-53b0-92de-e35a62501923",
      "id": "GHSA-mfg7-5gfp-c4w3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.130.Final-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:76ffb7a5-dc16-5ad8-99d6-ae4706bbc961",
      "id": "GHSA-v74w-7mr3-4qg3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.130.Final-tuxcare.2 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.130.Final-tuxcare.2"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.netty/netty-transport@4.1.130.Final-tuxcare.2"
    }
  ]
}