{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:6a977220-8b6a-5492-8f74-f2b84995ec77",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.5",
      "type": "library",
      "group": "io.netty",
      "name": "netty-transport",
      "version": "4.1.63.Final-tuxcare.5",
      "purl": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.5"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:2e6ffdae-8f4d-5713-b5c7-2d770d14b95c",
      "id": "CVE-2021-37136",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-37136 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:066fc57c-51be-5a05-ac61-baf1f7269426",
      "id": "CVE-2021-37137",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-37137 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:149c6e1c-78c5-5690-b172-3df61f79d079",
      "id": "CVE-2021-43797",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-43797 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a2cd855e-54a8-5c22-9bab-fd8ab575c3ae",
      "id": "CVE-2022-24823",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-24823 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8ffefc8d-0583-5d3b-b26b-6b24618f4869",
      "id": "CVE-2022-41881",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-41881 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:26a27b3c-8293-51c1-86f5-4deb64b4b163",
      "id": "CVE-2022-41915",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-41915 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ba4ab741-a12e-5fdc-8fa1-432fa09a8363",
      "id": "CVE-2023-34462",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-34462 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:28eb605d-1549-5c03-a177-63b6da137d83",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-44487 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e8abc4ca-6fb2-5aed-8ae6-b5a5cf52dacf",
      "id": "CVE-2023-4586",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2023-4586 is a false positive for io.netty:netty-transport 4.1.63.Final-tuxcare.5."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3d31c674-06dc-5bb4-81b6-870c9172a2ab",
      "id": "CVE-2024-29025",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-29025 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:df431bf8-2a84-58b8-95db-675e37478ed4",
      "id": "CVE-2024-47535",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-47535 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d9f6e76d-6951-54a8-be1c-4dce409b4233",
      "id": "CVE-2025-24970",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-24970 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0e02cb9a-4eeb-5e61-8cc7-1522817a7cda",
      "id": "CVE-2025-25193",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-25193 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:27002450-8280-551b-9201-bdfe23adb4e4",
      "id": "CVE-2025-55163",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55163 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:31d7dd6b-4034-5ce7-8be0-7f02feca768a",
      "id": "CVE-2025-58056",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58056 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:db64653e-9869-5da9-bc89-539c33c37eb3",
      "id": "CVE-2025-58057",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-58057 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:387945a3-d251-5c1b-bab2-e1c14ffb3e24",
      "id": "CVE-2025-59419",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-59419 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:07bccc06-8f44-5219-980b-c06af97c7742",
      "id": "CVE-2025-67735",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-67735 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1e2d493c-3880-5dc3-bb03-26916e419bc1",
      "id": "CVE-2026-33870",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33870 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:85e2dc06-9f97-5a45-a0f6-e72274551e72",
      "id": "CVE-2026-33871",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33871 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:274a4419-7eae-5335-9fd3-533fa98669c0",
      "id": "CVE-2026-41417",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41417 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:80dc7909-e9e0-56d4-aa8c-f1fc071c6c44",
      "id": "CVE-2026-42577",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42577 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d80eb37a-19c9-5856-9a2d-06b0a63d10ce",
      "id": "CVE-2026-42578",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42578 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1f09e84a-910d-5aa3-b367-d67fb5b0e369",
      "id": "CVE-2026-42579",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42579 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:aeb11801-cf95-5245-ba72-487d6cca8e99",
      "id": "CVE-2026-42580",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42580 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a8260dcd-512e-57af-9b96-c18267daab3d",
      "id": "CVE-2026-42581",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42581 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f66f1564-3acd-5c7c-bd0c-c21b6086e201",
      "id": "CVE-2026-42583",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42583 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:19138ece-5a3d-5130-bf58-9c5900bbadc3",
      "id": "CVE-2026-42584",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42584 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a4627e08-c250-593b-a221-6ba81fa12e07",
      "id": "CVE-2026-42585",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42585 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0f2faa23-bdd9-573f-91e4-d492c883b4db",
      "id": "CVE-2026-42586",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42586 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d98ece32-b38b-53bf-bf63-746d1efe5ea0",
      "id": "CVE-2026-42587",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42587 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:85e68530-ce42-5afb-8b95-f8c36f00e1b0",
      "id": "CVE-2026-44248",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44248 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c36da7f6-ad59-5b01-acc1-6c219fe441b8",
      "id": "CVE-2026-44249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44249 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:20aff701-3f83-52c6-a880-ead0a6306eec",
      "id": "CVE-2026-44250",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44250 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a07178e6-b88c-55e8-87e1-66fae95e4559",
      "id": "CVE-2026-44890",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:54db2ac2-212f-5979-8f37-357268f026ca",
      "id": "CVE-2026-44891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44891 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:51b0ee0c-c4e0-5e93-8bd1-f2879b0fed65",
      "id": "CVE-2026-44893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44893 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:307e8a2d-c588-5417-88da-2c8ff440fd38",
      "id": "CVE-2026-45416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45416 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fe7a6c0e-cabb-57f0-bad7-27129d608029",
      "id": "CVE-2026-45536",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45536 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2b61f7a2-4fbd-5b0a-95b8-3ad1048bb8f6",
      "id": "CVE-2026-45673",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45673 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c0f117f6-a316-5e07-b706-6fe96f510d80",
      "id": "CVE-2026-45674",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-45674 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:70af011d-d6b6-5395-9924-f381c77290d5",
      "id": "CVE-2026-46340",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-46340 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3fd574e8-d7d8-5f7c-aa5f-e20f17f2055d",
      "id": "CVE-2026-47244",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47244 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fd5aebfa-9786-5e64-9b7b-5572355af4a9",
      "id": "CVE-2026-47691",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47691 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7355ca0c-5af3-5a16-bd36-85c8f073c712",
      "id": "CVE-2026-48006",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48006 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:20dbe42f-c8f4-5d12-96fd-38f0c1211e1b",
      "id": "CVE-2026-48043",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-48043 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:46a2773c-c84c-54de-8748-0abe0d1e9989",
      "id": "CVE-2026-48059",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-48059 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4a800133-b00b-5e0a-acf8-56203497a851",
      "id": "CVE-2026-50010",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50010 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:06438190-6ea7-56d6-ad98-ee4466a7a57d",
      "id": "CVE-2026-50011",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50011 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:701b42dd-7bdc-536b-b1d4-0f0f2e31f7ae",
      "id": "CVE-2026-50020",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50020 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a61e6678-f04d-56f6-b0a0-e57476122f1d",
      "id": "CVE-2026-50560",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5e4d532e-4631-59da-8d3e-e89d96dfcb8f",
      "id": "CVE-2026-55831",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55831 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a0bbca22-2bc2-50b7-99c1-b2586dfcfada",
      "id": "CVE-2026-55833",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55833 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:31bbc3d1-56f5-57d8-885e-ebdb36a985bc",
      "id": "CVE-2026-55851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55851 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:68e37093-fa30-5690-b453-dddb3fa25529",
      "id": "CVE-2026-56745",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56745 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:604ade1d-8a12-544c-a21b-829b8e0b29c4",
      "id": "CVE-2026-56746",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56746 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:547e8eab-695c-56b9-8b8f-cc96ab7e3456",
      "id": "CVE-2026-56817",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-56817 does not affect version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport. not_affected \u2014 The Netty codec-xml module contains XmlDecoder, which instantiates an Aalto XML parser without security configuration (line 38: new InputFactoryImpl() with no XXE protection). However, this is a library component that Netty itself does not use in its own production code. The vulnerability only manifests when downstream applications explicitly add XmlDecoder to their Netty channel pipelines. Per..."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fd573de2-e622-5fe7-ac86-792c899967ef",
      "id": "CVE-2026-56818",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56818 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c50b3c76-fffa-5e16-bef0-1902cdfcb45b",
      "id": "CVE-2026-56819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56819 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ecac5354-a1d5-5d91-973a-5d3b2bbf4b3e",
      "id": "CVE-2026-59898",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59898 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fd9b35d9-17d5-52bc-83f3-ace316ac04d1",
      "id": "CVE-2026-59899",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59899 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:72e08946-e290-57d1-b0e5-f4c14c8d5485",
      "id": "CVE-2026-59900",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59900 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:afb0a4d0-b1ed-572e-98d5-ab04001d9e60",
      "id": "CVE-2026-59901",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59901 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:958969a1-8de9-5524-a996-b79fe6f5e649",
      "id": "CVE-2026-59902",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59902 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e6fe6c0e-cde6-5324-be59-3682386d345a",
      "id": "CVE-2026-59903",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59903 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c2fa2ceb-2e75-5d16-991c-3fb39eb8715e",
      "id": "CVE-2026-59919",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59919 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:57c9c6a7-468c-5e92-ace7-37e4dab6168b",
      "id": "CVE-2026-59920",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59920 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b33a2f22-a116-5a2d-a59c-c4dd52399167",
      "id": "CVE-2026-59921",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59921 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0d3fc300-2746-5baf-8b46-d050a04888c6",
      "id": "CVE-2026-73507",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-73507 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ece7b5d1-3e2f-581e-a2b1-509ca8b0befd",
      "id": "CVE-2026-73508",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-73508 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:43b7297c-41fb-557e-aefb-3670e16089e3",
      "id": "GHSA-mfg7-5gfp-c4w3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2097b129-2862-5bbf-b99d-fdeb9697ef55",
      "id": "GHSA-v74w-7mr3-4qg3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:20758e36-34a6-54b3-ae86-07fe4c614059",
      "id": "GHSA-xpw8-rcwv-8f8p",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-xpw8-rcwv-8f8p affects version 4.1.63.Final-tuxcare.5 of io.netty:netty-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.5"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.netty/netty-transport@4.1.63.Final-tuxcare.5"
    }
  ]
}