{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:8c715796-accb-5a20-98c0-fec75f0f8b37", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/io.netty/netty-transport@4.1.73.Final-tuxcare.4", "type": "library", "group": "io.netty", "name": "netty-transport", "version": "4.1.73.Final-tuxcare.4", "purl": "pkg:maven/io.netty/netty-transport@4.1.73.Final-tuxcare.4" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:c7df1b62-1419-53d2-a4d5-88af9837d194", "id": "CVE-2022-24823", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-24823 is fixed in version 4.1.73.Final-tuxcare.4 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.73.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:9ce9e8ef-208f-5ca5-873b-a7e2ffe08cc5", "id": "CVE-2022-41881", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-41881 is fixed in version 4.1.73.Final-tuxcare.4 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.73.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:7ae1a1fd-36f9-5e4e-a0fc-d6f6c9a54736", "id": "CVE-2022-41915", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-41915 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.73.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:1d5d0b5e-2d69-509c-bdeb-cea669b7a7a2", "id": "CVE-2023-34462", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-34462 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.73.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:8e42ae0d-b45d-58be-99e9-b655256f572c", "id": "CVE-2023-44487", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-44487 is fixed in version 4.1.73.Final-tuxcare.4 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.73.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:bb38a800-de3b-5974-99a8-d385f891a5e1", "id": "CVE-2023-4586", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2023-4586 is a false positive for io.netty:netty-transport 4.1.73.Final-tuxcare.4." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.73.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:71967cd1-eccf-5853-834c-753c2604a4bc", "id": "CVE-2024-29025", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-29025 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.73.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:cbf3a2aa-8fb9-57a2-85b7-c11ff6a53215", "id": "CVE-2024-47535", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-47535 is fixed in version 4.1.73.Final-tuxcare.4 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.73.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:dc69f8ae-01d9-5645-90ab-667475351750", "id": "CVE-2025-24970", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-24970 is fixed in version 4.1.73.Final-tuxcare.4 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.73.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:1470aeaf-3f4c-5aad-90eb-d25406b88875", "id": "CVE-2025-25193", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-25193 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.73.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:592eb65b-c998-5768-86b7-3ddfd985ba7f", "id": "CVE-2025-55163", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-55163 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.73.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:7d2a375a-9e50-5c4b-afc2-007249b43803", "id": "CVE-2025-58056", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-58056 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.73.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:2bcb6c64-1cd7-50bb-923d-824856919fbb", "id": "CVE-2025-58057", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-58057 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.73.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:48842c0e-3972-5f0a-9ff8-d84661d3c9e3", "id": "CVE-2025-59419", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59419 is fixed in version 4.1.73.Final-tuxcare.4 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.73.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:850e5af1-501e-54cc-a21c-9ddac98b69cd", "id": "CVE-2025-67735", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-67735 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.73.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:56d46717-fa61-5d3f-9ec7-3581cee4225a", "id": "CVE-2026-33870", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33870 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.73.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:fe98bc26-84fe-5c6e-808b-495e60c851f3", "id": "CVE-2026-33871", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33871 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.73.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:601c1b92-ac4b-5aeb-8590-f337b2474c45", "id": "CVE-2026-41417", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41417 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.73.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:632a8167-1f5a-5efc-b986-a1726cfa4840", "id": "CVE-2026-42577", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42577 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.73.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:01eb3e27-ba38-59cc-9928-8ea9fc021388", "id": "CVE-2026-42578", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42578 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.73.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:44eb1034-4b42-572b-926a-7f44d9365453", "id": "CVE-2026-42579", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42579 is fixed in version 4.1.73.Final-tuxcare.4 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.73.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:2d4a3540-8e51-54af-913c-a4d0ca6ee3f2", "id": "CVE-2026-42580", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42580 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.73.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:361ad312-f410-55fc-9242-8ff5156f7d8a", "id": "CVE-2026-42581", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42581 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.73.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:16d66f68-a00b-5689-852a-7d8f870424c9", "id": "CVE-2026-42583", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42583 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.73.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:f92973c6-9d29-5e6f-a7d9-1df4a7d4a01e", "id": "CVE-2026-42584", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42584 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.73.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:e05865eb-3971-5fe8-86fd-024b366365e5", "id": "CVE-2026-42585", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42585 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.73.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:68c3c8a5-f004-5fa5-897c-79a25b37b48c", "id": "CVE-2026-42586", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42586 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.73.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:5f917fca-81ac-59e1-9823-3266cfac1317", "id": "CVE-2026-42587", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42587 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.73.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:cd10fa97-a6bb-5b82-b9fb-865f0f43cb03", "id": "CVE-2026-44248", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44248 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.73.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:d8692daa-70de-5920-85a5-c70b57c220ae", "id": "CVE-2026-44249", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44249 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.73.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:74e2c1f2-d981-5766-aa4b-93b0a69a48cf", "id": "CVE-2026-44250", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44250 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.73.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:86d53022-2372-5e21-8be6-2d1e37b4919e", "id": "CVE-2026-44890", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.73.Final-tuxcare.4 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.73.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:b162174f-a9f3-5ecf-b852-6bbf4f474b8c", "id": "CVE-2026-44891", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44891 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.73.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:5f7b8b4f-c1f2-5a85-b313-80bd34094c85", "id": "CVE-2026-44893", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44893 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.73.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:d76cb700-d09e-52da-99c5-df5f6e08470d", "id": "CVE-2026-45416", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45416 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.73.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:2652e7f3-3292-5db8-8e6b-c6f8f47900d0", "id": "CVE-2026-45536", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45536 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.73.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:ee1ad7c0-3037-5ee9-bb1d-3bfea513156d", "id": "CVE-2026-45673", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45673 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.73.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:4cb0a124-ac3a-5bc7-b202-4669b60670ac", "id": "CVE-2026-45674", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-45674 is fixed in version 4.1.73.Final-tuxcare.4 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.73.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:25498ad3-03da-5746-8a18-e8cb1e60673a", "id": "CVE-2026-46340", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46340 is fixed in version 4.1.73.Final-tuxcare.4 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.73.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:75588bf3-b313-5735-bce7-7c4cef690c38", "id": "CVE-2026-47244", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47244 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.73.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:f387faa1-6896-5eaf-b9ee-753dc7d3a89a", "id": "CVE-2026-47691", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47691 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.73.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:30cbbc02-cbd8-543b-a833-003d603e523a", "id": "CVE-2026-48006", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-48006 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.73.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:c07fe749-163a-5568-8827-1a89002b8d54", "id": "CVE-2026-48043", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-48043 does not affect version 4.1.73.Final-tuxcare.4 of io.netty:netty-transport. not_affected \u2014 Version 4.1.73 is not affected by CVE-2026-48043. The target uses a loop-based architecture with try-finally protection (introduced in 2016) that prevents the buffer leak described in the CVE. The vulnerable ChannelInboundHandlerAdapter pattern that the upstream patch fixes does not exist in this version." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.73.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:d50f2795-49ca-517e-ad42-e5915194e90c", "id": "CVE-2026-48059", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-48059 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.73.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:36766a26-2892-5c83-b0ca-3a0dd8128f8b", "id": "CVE-2026-50010", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50010 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.73.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:1adb3154-5514-5a86-b657-07a49817d399", "id": "CVE-2026-50011", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50011 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.73.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:5b84d4e2-c18f-5948-9782-9a0c4dfab936", "id": "CVE-2026-50020", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50020 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.73.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:e1c516c4-a167-5759-9bfc-f1fbceb65132", "id": "CVE-2026-50560", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.73.Final-tuxcare.4 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.73.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:7f5380cf-10bd-5af3-ac76-39456076babb", "id": "CVE-2026-55831", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55831 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.73.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:8b1292dd-60b9-5347-8475-5ebc79987e19", "id": "CVE-2026-55833", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55833 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.73.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:3c6deedd-b065-512b-838a-f4cea523b7b1", "id": "CVE-2026-55851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55851 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.73.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:2b9710af-7b66-50d9-b896-bc4d1f29c23e", "id": "CVE-2026-56745", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56745 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.73.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:6a2c0eca-1202-51bc-a572-8968a2f5f88f", "id": "CVE-2026-56746", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56746 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.73.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:4670ada4-1ea1-5161-9526-a21f35aa992c", "id": "CVE-2026-56817", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56817 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.73.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:2222b683-c159-5176-ab40-c3db8272a67b", "id": "CVE-2026-56818", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-56818 does not affect version 4.1.73.Final-tuxcare.4 of io.netty:netty-transport. not_affected \u2014 The target version 4.1.73.Final-tuxcare.2 is NOT AFFECTED by CVE-2026-56818. The vulnerable code pattern (configurable `maxElements` limit check without cleanup, contrasting with `maxNestedArrayDepth` limit check WITH cleanup) was introduced in version 4.1.135.Final through commits e51c64c964 and 728c98b8ec (dated 2026-06-01/02). The target version predates these features entirely and does not ..." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.73.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:57e055c1-5a7a-57ea-a9ea-582453e715b2", "id": "CVE-2026-56819", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-56819 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.73.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:4d39d85d-35d9-547c-b590-b4446a03c94d", "id": "CVE-2026-59898", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59898 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.73.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:2667ca7c-2b39-5aed-96d8-2836a06f268b", "id": "CVE-2026-59899", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59899 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.73.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:e5b00783-e151-56d5-976d-026b14fb0a8d", "id": "CVE-2026-59900", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59900 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.73.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:a7c92726-4b87-5716-96e1-dd5f8fe33c0d", "id": "CVE-2026-59901", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59901 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.73.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:e95f5b97-5d92-53b8-a201-c9cf82ac888f", "id": "CVE-2026-59902", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59902 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.73.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:3b241151-0727-597b-9685-217f95b362e2", "id": "CVE-2026-59903", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59903 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.73.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:e405401a-1390-5f3d-97b7-bd98cfc8a8be", "id": "CVE-2026-59919", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59919 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.73.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:7c175c63-8986-50f2-98b1-3bd411434a82", "id": "CVE-2026-59920", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59920 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.73.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:1f801b17-1cc5-5732-bde6-8094f4187c0f", "id": "CVE-2026-59921", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59921 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.73.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:4d9db56c-9b0f-50d7-a543-32d8ebd65f32", "id": "CVE-2026-73507", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-73507 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.73.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:c394b253-1eb6-52f2-8de9-44945525c86b", "id": "CVE-2026-73508", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-73508 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.73.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:0e69c989-4464-5134-ad5d-4bac3aa94856", "id": "GHSA-mfg7-5gfp-c4w3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.73.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:805e6f9d-738a-5a15-801d-1453ee076738", "id": "GHSA-v74w-7mr3-4qg3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.73.Final-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:2a44bd69-0bb5-5881-89fe-a1426bb5ec5b", "id": "GHSA-xpw8-rcwv-8f8p", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-xpw8-rcwv-8f8p affects version 4.1.73.Final-tuxcare.4 of io.netty:netty-transport." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.73.Final-tuxcare.4" } ] } ], "dependencies": [ { "ref": "pkg:maven/io.netty/netty-transport@4.1.73.Final-tuxcare.4" } ] }