{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:8e51baee-6939-559b-8e0c-85684df210c7", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/io.netty/netty-transport@4.1.130.Final-tuxcare.4", "type": "library", "group": "io.netty", "name": "netty-transport", "version": "4.1.130.Final-tuxcare.4", "purl": "pkg:maven/io.netty/netty-transport@4.1.130.Final-tuxcare.4" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:611b0107-48a3-51f2-8fd6-193fe99ca68d", "id": "CVE-2025-55163", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-55163 does not affect version 4.1.130.Final-tuxcare.4 of io.netty:netty-transport. already_fixed \u2014 The target Netty 4.1.130.Final repository already contains the complete MadeYouReset (CVE-2025-55163) mitigation. The Http2MaxRstFrameLimitEncoder defense class is present, integrated into the HTTP/2 connection handler builder, and enabled by default for servers with a threshold of 200 RST_STREAM frames per 30-second window. All protocol-error-triggered RST writes route through the protected en..." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:39667dda-8f7d-5389-9f05-e500204842cd", "id": "CVE-2026-33870", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33870 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:4a65be3d-24ca-500b-a940-103650699571", "id": "CVE-2026-33871", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33871 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:80eed947-aa70-550b-8fef-7d080bfbbda2", "id": "CVE-2026-41417", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41417 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:ba3e7b71-3cad-5c57-893e-ad79c685ee16", "id": "CVE-2026-42578", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42578 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:83d3ae48-ffbe-5f15-8704-a3c26d8bf0f9", "id": "CVE-2026-42579", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42579 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:b4f518e6-bd13-5eca-9037-b933dea2caaf", "id": "CVE-2026-42580", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42580 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:1a8fb968-4c77-54d1-9f8b-e3caf9f2bf7d", "id": "CVE-2026-42581", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42581 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:ec25fe09-bf8d-5863-b191-78c21c627960", "id": "CVE-2026-42583", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42583 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:4733e2f5-0f87-5899-bb64-4f67a3e3897e", "id": "CVE-2026-42584", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42584 affects version 4.1.130.Final-tuxcare.4 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:0b36f551-8bde-58a5-92af-72d2b03a0644", "id": "CVE-2026-42585", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42585 affects version 4.1.130.Final-tuxcare.4 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:cf546415-216e-5f88-89ce-a2dbad0ec804", "id": "CVE-2026-42586", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42586 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:fe6e6735-1238-5e55-99ab-bf45d7bdb8ae", "id": "CVE-2026-42587", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42587 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:feffc9e9-1faa-5048-b5ac-7447fe69d7a9", "id": "CVE-2026-44248", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44248 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:1c6725fa-535f-5178-813b-f8a55ba2be85", "id": "CVE-2026-44249", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44249 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:0cb8d102-bbb5-54ba-964a-5eae7c618a36", "id": "CVE-2026-44250", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44250 affects version 4.1.130.Final-tuxcare.4 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:2db74083-21c9-5f16-a685-61eaea5d5fbf", "id": "CVE-2026-44890", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:a9e4f520-6d34-5148-8a36-b137ae1f9f94", "id": "CVE-2026-44891", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44891 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:7ed027ff-a6ed-5ac2-a5a6-73010faa3e99", "id": "CVE-2026-44893", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44893 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:702dc5ed-5f8e-5321-9664-6a9c4bbe7321", "id": "CVE-2026-45416", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-45416 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:e82a9b54-aa30-5e3c-83f1-3b36ba490969", "id": "CVE-2026-45536", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-45536 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:f261921b-3653-5aa1-a0f9-585f9d3c6688", "id": "CVE-2026-45673", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-45673 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:2f118918-ec2f-52fb-9d2d-86fd1ef244ba", "id": "CVE-2026-45674", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-45674 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:52bb7db8-1ebb-5697-b49a-0183914b7f7e", "id": "CVE-2026-46340", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46340 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:e3823cd8-ebc3-56ec-96c2-7c7001875259", "id": "CVE-2026-47244", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47244 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:18b7b72b-6c15-5246-8759-2d9d12b5d80b", "id": "CVE-2026-47691", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47691 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:4f16ce3c-eabb-5c98-884e-a789ed82f3be", "id": "CVE-2026-48006", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48006 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:1f369203-3a2c-55d4-9329-4490177029c3", "id": "CVE-2026-48043", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48043 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:b13ef7b8-d2d3-56fb-b52f-041409e1c03f", "id": "CVE-2026-48059", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48059 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:1460b122-f85a-5af9-9fd1-20fd6d19b679", "id": "CVE-2026-50010", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50010 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:273ea8ad-f5da-5f6d-a0d1-bdf7e209ac11", "id": "CVE-2026-50011", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-50011 does not affect version 4.1.130.Final-tuxcare.4 of io.netty:netty-transport. Patches already applied: bff98ee51b5d0b7ee25fd5005f2169f2a0467efa (already in target via d5b4e38845f5 'Backport CVE-2026-44890 to 4.1.130.Final')" }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:a497ba57-95c5-53e4-b549-d7d1fa803f2f", "id": "CVE-2026-50020", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50020 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:83ec5971-554b-5460-a96e-369fa5a219e4", "id": "CVE-2026-50560", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:ac287adc-26b8-5dcb-88b5-99be5f9309f1", "id": "CVE-2026-55831", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-55831 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:ceb47e63-89ec-50e0-9885-e12c232fc793", "id": "CVE-2026-55833", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-55833 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:a436f769-1c2f-57aa-97d2-7022ae6c3249", "id": "CVE-2026-55851", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-55851 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:140acfdd-1627-5022-a434-2a8e6c53e1c3", "id": "CVE-2026-56745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56745 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:0a16a71c-defa-5cbf-b270-a04a37c71e6e", "id": "CVE-2026-56746", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56746 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:299d3826-ddb4-564e-825c-e1698bcfde77", "id": "CVE-2026-56817", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56817 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:f958f74a-88f7-5644-8a8f-3142308f16c3", "id": "CVE-2026-56818", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56818 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:93dcfc6d-80d7-541e-b8da-6be352e4d020", "id": "CVE-2026-56819", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56819 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:c13624e4-0ba2-57fd-bc3e-09a7fc6b03d1", "id": "CVE-2026-56820", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56820 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:f7574b81-fa74-51ad-a395-a42b71bd9058", "id": "CVE-2026-56821", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56821 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:513fee6e-e136-5429-b467-d234231cfe04", "id": "CVE-2026-56822", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56822 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:ee999b3d-da73-59f7-85da-0326121fde75", "id": "CVE-2026-59898", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59898 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:841905fd-25a2-5726-94d8-e818bda21201", "id": "CVE-2026-59899", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59899 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:5a656010-c1b6-58e6-ab42-5c6a4e20e21b", "id": "CVE-2026-59900", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59900 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:307a030b-8f87-5ff8-89f9-dd36174c0548", "id": "CVE-2026-59901", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59901 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:35f56c11-a8a1-5144-b283-bfd5cf073286", "id": "CVE-2026-59902", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59902 affects version 4.1.130.Final-tuxcare.4 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:64d8a431-3283-5392-b6bb-021035a5cb8a", "id": "CVE-2026-59903", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59903 affects version 4.1.130.Final-tuxcare.4 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:0caf3caa-8817-5542-8a9a-92bf0c56ec07", "id": "CVE-2026-59919", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59919 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:0be2826c-740a-575e-b4fb-aae294bdee4e", "id": "CVE-2026-59920", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59920 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:21821baf-6e2b-5d42-8215-70fd976b48bf", "id": "CVE-2026-59921", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59921 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:0605b9f7-3af4-51e3-98de-02e9592f9860", "id": "CVE-2026-73507", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-73507 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:0f77619b-25b5-58b9-84e2-6ecc22e40e72", "id": "CVE-2026-73508", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-73508 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:c233f4a9-c98e-5db6-96ae-73ede8d8daa6", "id": "GHSA-mfg7-5gfp-c4w3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.130.Final-tuxcare.4 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.130.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:672580a2-9120-50c3-91ff-84d9d62e81ad", "id": "GHSA-v74w-7mr3-4qg3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.130.Final-tuxcare.4 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.130.Final-tuxcare.4" } ] } ], "dependencies": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.130.Final-tuxcare.4" } ] }