{ "@id": "urn:uuid:ef3ec1be-a9f0-426f-88f5-c5832aa48b65", "role": "Document Creator", "author": "https://tuxcare.com", "version": 2, "@context": "https://openvex.dev/ns/v0.2.0", "timestamp": "2026-10-22T10:53:07.426702+00:00", "statements": [ { "status": "not_affected", "products": [ { "@id": "pkg:maven/io.netty/netty-codec-xml@4.1.128.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.128.Final-tuxcare.1" } } ], "timestamp": "2026-10-22T10:51:48.115053+00:00", "status_notes": "Vulnerability CVE-2025-55163 does not affect version 4.1.128.Final-tuxcare.1 of io.netty:netty-codec-xml. CVE-2025-55163 (MadeYouReset) fix is present in Netty 4.1.128.Final. The vulnerability allows attackers to flood the server with RST_STREAM frames by sending malformed HTTP/2 control frames. The fix consists of two parts: (1) routing all RST_STREAM writes through the encoder chain via encoder().writeRstStream(), and (2) introducing Http2MaxRstFrameLimitEncoder that tracks and rate-limits outgoing RST frames, closing the connection when the threshold is exceeded. Both components are present and enabled by default for servers (200 RST frames per 30-second window). The fix was authored by upstream Netty maintainer Norman Maurer (norman_maurer@apple.com) in commit 009bd17b38 (August 2025) and was included in the upstream 4.1.128.Final release (October 2025), which TuxCare onboarded on October 1, 2026. This is a vendor-authored fix, not a TuxCare backport.", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2025-55163" }, "impact_statement": "CVE-2025-55163 (MadeYouReset) fix is present in Netty 4.1.128.Final. The vulnerability allows attackers to flood the server with RST_STREAM frames by sending malformed HTTP/2 control frames. The fix consists of two parts: (1) routing all RST_STREAM writes through the encoder chain via encoder().writeRstStream(), and (2) introducing Http2MaxRstFrameLimitEncoder that tracks and rate-limits outgoing RST frames, closing the connection when the threshold is exceeded. Both components are present and enabled by default for servers (200 RST frames per 30-second window). The fix was authored by upstream Netty maintainer Norman Maurer (norman_maurer@apple.com) in commit 009bd17b38 (August 2025) and was included in the upstream 4.1.128.Final release (October 2025), which TuxCare onboarded on October 1, 2026. This is a vendor-authored fix, not a TuxCare backport." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-codec-xml@4.1.128.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.128.Final-tuxcare.1" } } ], "timestamp": "2026-10-22T10:51:48.115053+00:00", "status_notes": "Vulnerability CVE-2025-67735 affects version 4.1.128.Final-tuxcare.1 of io.netty:netty-codec-xml.", "vulnerability": { "name": "CVE-2025-67735" }, "action_statement": "Vulnerability CVE-2025-67735 affects version 4.1.128.Final-tuxcare.1 of io.netty:netty-codec-xml." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-codec-xml@4.1.128.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.128.Final-tuxcare.1" } } ], "timestamp": "2026-10-22T10:51:48.115053+00:00", "status_notes": "Vulnerability CVE-2026-33870 affects version 4.1.128.Final-tuxcare.1 of io.netty:netty-codec-xml.", "vulnerability": { "name": "CVE-2026-33870" }, "action_statement": "Vulnerability CVE-2026-33870 affects version 4.1.128.Final-tuxcare.1 of io.netty:netty-codec-xml." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-codec-xml@4.1.128.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.128.Final-tuxcare.1" } } ], "timestamp": "2026-10-22T10:51:48.115053+00:00", "status_notes": "Vulnerability CVE-2026-33871 affects version 4.1.128.Final-tuxcare.1 of io.netty:netty-codec-xml.", "vulnerability": { "name": "CVE-2026-33871" }, "action_statement": "Vulnerability CVE-2026-33871 affects version 4.1.128.Final-tuxcare.1 of io.netty:netty-codec-xml." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-codec-xml@4.1.128.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.128.Final-tuxcare.1" } } ], "timestamp": "2026-10-22T10:53:07.426702+00:00", "status_notes": "Vulnerability CVE-2026-41417 is fixed in version 4.1.128.Final-tuxcare.1 of io.netty:netty-codec-xml.", "vulnerability": { "name": "CVE-2026-41417" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-codec-xml@4.1.128.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.128.Final-tuxcare.1" } } ], "timestamp": "2026-10-22T10:51:48.115053+00:00", "status_notes": "Vulnerability CVE-2026-42578 affects version 4.1.128.Final-tuxcare.1 of io.netty:netty-codec-xml.", "vulnerability": { "name": "CVE-2026-42578" }, "action_statement": "Vulnerability CVE-2026-42578 affects version 4.1.128.Final-tuxcare.1 of io.netty:netty-codec-xml." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-codec-xml@4.1.128.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.128.Final-tuxcare.1" } } ], "timestamp": "2026-10-22T10:51:48.115053+00:00", "status_notes": "Vulnerability CVE-2026-42579 affects version 4.1.128.Final-tuxcare.1 of io.netty:netty-codec-xml.", "vulnerability": { "name": "CVE-2026-42579" }, "action_statement": "Vulnerability CVE-2026-42579 affects version 4.1.128.Final-tuxcare.1 of io.netty:netty-codec-xml." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-codec-xml@4.1.128.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.128.Final-tuxcare.1" } } ], "timestamp": "2026-10-22T10:53:07.426702+00:00", "status_notes": "Vulnerability CVE-2026-42580 is fixed in version 4.1.128.Final-tuxcare.1 of io.netty:netty-codec-xml.", "vulnerability": { "name": "CVE-2026-42580" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-codec-xml@4.1.128.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.128.Final-tuxcare.1" } } ], "timestamp": "2026-10-22T10:53:07.426702+00:00", "status_notes": "Vulnerability CVE-2026-42581 is fixed in version 4.1.128.Final-tuxcare.1 of io.netty:netty-codec-xml.", "vulnerability": { "name": "CVE-2026-42581" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-codec-xml@4.1.128.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.128.Final-tuxcare.1" } } ], "timestamp": "2026-10-22T10:53:07.426702+00:00", "status_notes": "Vulnerability CVE-2026-42583 is fixed in version 4.1.128.Final-tuxcare.1 of io.netty:netty-codec-xml.", "vulnerability": { "name": "CVE-2026-42583" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-codec-xml@4.1.128.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.128.Final-tuxcare.1" } } ], "timestamp": "2026-10-22T10:53:07.426702+00:00", "status_notes": "Vulnerability CVE-2026-42584 is fixed in version 4.1.128.Final-tuxcare.1 of io.netty:netty-codec-xml.", "vulnerability": { "name": "CVE-2026-42584" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-codec-xml@4.1.128.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.128.Final-tuxcare.1" } } ], "timestamp": "2026-10-22T10:51:48.115053+00:00", "status_notes": "Vulnerability CVE-2026-42585 affects version 4.1.128.Final-tuxcare.1 of io.netty:netty-codec-xml.", "vulnerability": { "name": "CVE-2026-42585" }, "action_statement": "Vulnerability CVE-2026-42585 affects version 4.1.128.Final-tuxcare.1 of io.netty:netty-codec-xml." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-codec-xml@4.1.128.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.128.Final-tuxcare.1" } } ], "timestamp": "2026-10-22T10:53:07.426702+00:00", "status_notes": "Vulnerability CVE-2026-42586 is fixed in version 4.1.128.Final-tuxcare.1 of io.netty:netty-codec-xml.", "vulnerability": { "name": "CVE-2026-42586" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-codec-xml@4.1.128.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.128.Final-tuxcare.1" } } ], "timestamp": "2026-10-22T10:53:07.426702+00:00", "status_notes": "Vulnerability CVE-2026-42587 is fixed in version 4.1.128.Final-tuxcare.1 of io.netty:netty-codec-xml.", "vulnerability": { "name": "CVE-2026-42587" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-codec-xml@4.1.128.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.128.Final-tuxcare.1" } } ], "timestamp": "2026-10-22T10:51:48.115053+00:00", "status_notes": "Vulnerability CVE-2026-44248 affects version 4.1.128.Final-tuxcare.1 of io.netty:netty-codec-xml.", "vulnerability": { "name": "CVE-2026-44248" }, "action_statement": "Vulnerability CVE-2026-44248 affects version 4.1.128.Final-tuxcare.1 of io.netty:netty-codec-xml." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-codec-xml@4.1.128.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.128.Final-tuxcare.1" } } ], "timestamp": "2026-10-22T10:53:07.426702+00:00", "status_notes": "Vulnerability CVE-2026-44249 is fixed in version 4.1.128.Final-tuxcare.1 of io.netty:netty-codec-xml.", "vulnerability": { "name": "CVE-2026-44249" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-codec-xml@4.1.128.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.128.Final-tuxcare.1" } } ], "timestamp": "2026-10-22T10:51:48.115053+00:00", "status_notes": "Vulnerability CVE-2026-44250 affects version 4.1.128.Final-tuxcare.1 of io.netty:netty-codec-xml.", "vulnerability": { "name": "CVE-2026-44250" }, "action_statement": "Vulnerability CVE-2026-44250 affects version 4.1.128.Final-tuxcare.1 of io.netty:netty-codec-xml." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-codec-xml@4.1.128.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.128.Final-tuxcare.1" } } ], "timestamp": "2026-10-22T10:53:07.426702+00:00", "status_notes": "Vulnerability CVE-2026-44890 is fixed in version 4.1.128.Final-tuxcare.1 of io.netty:netty-codec-xml.", "vulnerability": { "name": "CVE-2026-44890" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-codec-xml@4.1.128.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.128.Final-tuxcare.1" } } ], "timestamp": "2026-10-22T10:51:48.115053+00:00", "status_notes": "Vulnerability CVE-2026-44891 affects version 4.1.128.Final-tuxcare.1 of io.netty:netty-codec-xml.", "vulnerability": { "name": "CVE-2026-44891" }, "action_statement": "Vulnerability CVE-2026-44891 affects version 4.1.128.Final-tuxcare.1 of io.netty:netty-codec-xml." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-codec-xml@4.1.128.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.128.Final-tuxcare.1" } } ], "timestamp": "2026-10-22T10:53:07.426702+00:00", "status_notes": "Vulnerability CVE-2026-44893 is fixed in version 4.1.128.Final-tuxcare.1 of io.netty:netty-codec-xml.", "vulnerability": { "name": "CVE-2026-44893" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-codec-xml@4.1.128.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.128.Final-tuxcare.1" } } ], "timestamp": "2026-10-22T10:53:07.426702+00:00", "status_notes": "Vulnerability CVE-2026-45416 is fixed in version 4.1.128.Final-tuxcare.1 of io.netty:netty-codec-xml.", "vulnerability": { "name": "CVE-2026-45416" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-codec-xml@4.1.128.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.128.Final-tuxcare.1" } } ], "timestamp": "2026-10-22T10:51:48.115053+00:00", "status_notes": "Vulnerability CVE-2026-45536 affects version 4.1.128.Final-tuxcare.1 of io.netty:netty-codec-xml.", "vulnerability": { "name": "CVE-2026-45536" }, "action_statement": "Vulnerability CVE-2026-45536 affects version 4.1.128.Final-tuxcare.1 of io.netty:netty-codec-xml." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-codec-xml@4.1.128.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.128.Final-tuxcare.1" } } ], "timestamp": "2026-10-22T10:51:48.115053+00:00", "status_notes": "Vulnerability CVE-2026-45673 affects version 4.1.128.Final-tuxcare.1 of io.netty:netty-codec-xml.", "vulnerability": { "name": "CVE-2026-45673" }, "action_statement": "Vulnerability CVE-2026-45673 affects version 4.1.128.Final-tuxcare.1 of io.netty:netty-codec-xml." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-codec-xml@4.1.128.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.128.Final-tuxcare.1" } } ], "timestamp": "2026-10-22T10:51:48.115053+00:00", "status_notes": "Vulnerability CVE-2026-45674 affects version 4.1.128.Final-tuxcare.1 of io.netty:netty-codec-xml.", "vulnerability": { "name": "CVE-2026-45674" }, "action_statement": "Vulnerability CVE-2026-45674 affects version 4.1.128.Final-tuxcare.1 of io.netty:netty-codec-xml." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-codec-xml@4.1.128.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.128.Final-tuxcare.1" } } ], "timestamp": "2026-10-22T10:51:48.115053+00:00", "status_notes": "Vulnerability CVE-2026-46340 affects version 4.1.128.Final-tuxcare.1 of io.netty:netty-codec-xml.", "vulnerability": { "name": "CVE-2026-46340" }, "action_statement": "Vulnerability CVE-2026-46340 affects version 4.1.128.Final-tuxcare.1 of io.netty:netty-codec-xml." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-codec-xml@4.1.128.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.128.Final-tuxcare.1" } } ], "timestamp": "2026-10-22T10:51:48.115053+00:00", "status_notes": "Vulnerability CVE-2026-47244 affects version 4.1.128.Final-tuxcare.1 of io.netty:netty-codec-xml.", "vulnerability": { "name": "CVE-2026-47244" }, "action_statement": "Vulnerability CVE-2026-47244 affects version 4.1.128.Final-tuxcare.1 of io.netty:netty-codec-xml." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-codec-xml@4.1.128.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.128.Final-tuxcare.1" } } ], "timestamp": "2026-10-22T10:51:48.115053+00:00", "status_notes": "Vulnerability CVE-2026-47691 affects version 4.1.128.Final-tuxcare.1 of io.netty:netty-codec-xml.", "vulnerability": { "name": "CVE-2026-47691" }, "action_statement": "Vulnerability CVE-2026-47691 affects version 4.1.128.Final-tuxcare.1 of io.netty:netty-codec-xml." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-codec-xml@4.1.128.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.128.Final-tuxcare.1" } } ], "timestamp": "2026-10-22T10:51:48.115053+00:00", "status_notes": "Vulnerability CVE-2026-48006 affects version 4.1.128.Final-tuxcare.1 of io.netty:netty-codec-xml.", "vulnerability": { "name": "CVE-2026-48006" }, "action_statement": "Vulnerability CVE-2026-48006 affects version 4.1.128.Final-tuxcare.1 of io.netty:netty-codec-xml." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-codec-xml@4.1.128.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.128.Final-tuxcare.1" } } ], "timestamp": "2026-10-22T10:51:48.115053+00:00", "status_notes": "Vulnerability CVE-2026-48043 affects version 4.1.128.Final-tuxcare.1 of io.netty:netty-codec-xml.", "vulnerability": { "name": "CVE-2026-48043" }, "action_statement": "Vulnerability CVE-2026-48043 affects version 4.1.128.Final-tuxcare.1 of io.netty:netty-codec-xml." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-codec-xml@4.1.128.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.128.Final-tuxcare.1" } } ], "timestamp": "2026-10-22T10:51:48.115053+00:00", "status_notes": "Vulnerability CVE-2026-48059 affects version 4.1.128.Final-tuxcare.1 of io.netty:netty-codec-xml.", "vulnerability": { "name": "CVE-2026-48059" }, "action_statement": "Vulnerability CVE-2026-48059 affects version 4.1.128.Final-tuxcare.1 of io.netty:netty-codec-xml." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-codec-xml@4.1.128.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.128.Final-tuxcare.1" } } ], "timestamp": "2026-10-22T10:53:07.426702+00:00", "status_notes": "Vulnerability CVE-2026-50010 is fixed in version 4.1.128.Final-tuxcare.1 of io.netty:netty-codec-xml.", "vulnerability": { "name": "CVE-2026-50010" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-codec-xml@4.1.128.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.128.Final-tuxcare.1" } } ], "timestamp": "2026-10-22T10:51:48.115053+00:00", "status_notes": "Vulnerability CVE-2026-50011 affects version 4.1.128.Final-tuxcare.1 of io.netty:netty-codec-xml.", "vulnerability": { "name": "CVE-2026-50011" }, "action_statement": "Vulnerability CVE-2026-50011 affects version 4.1.128.Final-tuxcare.1 of io.netty:netty-codec-xml." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-codec-xml@4.1.128.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.128.Final-tuxcare.1" } } ], "timestamp": "2026-10-22T10:53:07.426702+00:00", "status_notes": "Vulnerability CVE-2026-50020 is fixed in version 4.1.128.Final-tuxcare.1 of io.netty:netty-codec-xml.", "vulnerability": { "name": "CVE-2026-50020" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-codec-xml@4.1.128.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.128.Final-tuxcare.1" } } ], "timestamp": "2026-10-22T10:53:07.426702+00:00", "status_notes": "Vulnerability CVE-2026-50560 is fixed in version 4.1.128.Final-tuxcare.1 of io.netty:netty-codec-xml.", "vulnerability": { "name": "CVE-2026-50560" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-codec-xml@4.1.128.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.128.Final-tuxcare.1" } } ], "timestamp": "2026-10-22T10:51:48.115053+00:00", "status_notes": "Vulnerability CVE-2026-55831 affects version 4.1.128.Final-tuxcare.1 of io.netty:netty-codec-xml.", "vulnerability": { "name": "CVE-2026-55831" }, "action_statement": "Vulnerability CVE-2026-55831 affects version 4.1.128.Final-tuxcare.1 of io.netty:netty-codec-xml." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-codec-xml@4.1.128.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.128.Final-tuxcare.1" } } ], "timestamp": "2026-10-22T10:53:07.426702+00:00", "status_notes": "Vulnerability CVE-2026-55833 is fixed in version 4.1.128.Final-tuxcare.1 of io.netty:netty-codec-xml.", "vulnerability": { "name": "CVE-2026-55833" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-codec-xml@4.1.128.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.128.Final-tuxcare.1" } } ], "timestamp": "2026-10-22T10:51:48.115053+00:00", "status_notes": "Vulnerability CVE-2026-55851 affects version 4.1.128.Final-tuxcare.1 of io.netty:netty-codec-xml.", "vulnerability": { "name": "CVE-2026-55851" }, "action_statement": "Vulnerability CVE-2026-55851 affects version 4.1.128.Final-tuxcare.1 of io.netty:netty-codec-xml." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-codec-xml@4.1.128.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.128.Final-tuxcare.1" } } ], "timestamp": "2026-10-22T10:51:48.115053+00:00", "status_notes": "Vulnerability CVE-2026-56745 affects version 4.1.128.Final-tuxcare.1 of io.netty:netty-codec-xml.", "vulnerability": { "name": "CVE-2026-56745" }, "action_statement": "Vulnerability CVE-2026-56745 affects version 4.1.128.Final-tuxcare.1 of io.netty:netty-codec-xml." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-codec-xml@4.1.128.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.128.Final-tuxcare.1" } } ], "timestamp": "2026-10-22T10:51:48.115053+00:00", "status_notes": "Vulnerability CVE-2026-56746 affects version 4.1.128.Final-tuxcare.1 of io.netty:netty-codec-xml.", "vulnerability": { "name": "CVE-2026-56746" }, "action_statement": "Vulnerability CVE-2026-56746 affects version 4.1.128.Final-tuxcare.1 of io.netty:netty-codec-xml." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-codec-xml@4.1.128.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.128.Final-tuxcare.1" } } ], "timestamp": "2026-10-22T10:53:07.426702+00:00", "status_notes": "Vulnerability CVE-2026-56817 is fixed in version 4.1.128.Final-tuxcare.1 of io.netty:netty-codec-xml.", "vulnerability": { "name": "CVE-2026-56817" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-codec-xml@4.1.128.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.128.Final-tuxcare.1" } } ], "timestamp": "2026-10-22T10:51:48.115053+00:00", "status_notes": "Vulnerability CVE-2026-56818 affects version 4.1.128.Final-tuxcare.1 of io.netty:netty-codec-xml.", "vulnerability": { "name": "CVE-2026-56818" }, "action_statement": "Vulnerability CVE-2026-56818 affects version 4.1.128.Final-tuxcare.1 of io.netty:netty-codec-xml." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-codec-xml@4.1.128.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.128.Final-tuxcare.1" } } ], "timestamp": "2026-10-22T10:51:48.115053+00:00", "status_notes": "Vulnerability CVE-2026-56819 affects version 4.1.128.Final-tuxcare.1 of io.netty:netty-codec-xml.", "vulnerability": { "name": "CVE-2026-56819" }, "action_statement": "Vulnerability CVE-2026-56819 affects version 4.1.128.Final-tuxcare.1 of io.netty:netty-codec-xml." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-codec-xml@4.1.128.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.128.Final-tuxcare.1" } } ], "timestamp": "2026-10-22T10:51:48.115053+00:00", "status_notes": "Vulnerability CVE-2026-56820 affects version 4.1.128.Final-tuxcare.1 of io.netty:netty-codec-xml.", "vulnerability": { "name": "CVE-2026-56820" }, "action_statement": "Vulnerability CVE-2026-56820 affects version 4.1.128.Final-tuxcare.1 of io.netty:netty-codec-xml." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-codec-xml@4.1.128.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.128.Final-tuxcare.1" } } ], "timestamp": "2026-10-22T10:51:48.115053+00:00", "status_notes": "Vulnerability CVE-2026-56821 affects version 4.1.128.Final-tuxcare.1 of io.netty:netty-codec-xml.", "vulnerability": { "name": "CVE-2026-56821" }, "action_statement": "Vulnerability CVE-2026-56821 affects version 4.1.128.Final-tuxcare.1 of io.netty:netty-codec-xml." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-codec-xml@4.1.128.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.128.Final-tuxcare.1" } } ], "timestamp": "2026-10-22T10:51:48.115053+00:00", "status_notes": "Vulnerability CVE-2026-56822 affects version 4.1.128.Final-tuxcare.1 of io.netty:netty-codec-xml.", "vulnerability": { "name": "CVE-2026-56822" }, "action_statement": "Vulnerability CVE-2026-56822 affects version 4.1.128.Final-tuxcare.1 of io.netty:netty-codec-xml." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-codec-xml@4.1.128.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.128.Final-tuxcare.1" } } ], "timestamp": "2026-10-22T10:51:48.115053+00:00", "status_notes": "Vulnerability CVE-2026-59898 affects version 4.1.128.Final-tuxcare.1 of io.netty:netty-codec-xml.", "vulnerability": { "name": "CVE-2026-59898" }, "action_statement": "Vulnerability CVE-2026-59898 affects version 4.1.128.Final-tuxcare.1 of io.netty:netty-codec-xml." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-codec-xml@4.1.128.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.128.Final-tuxcare.1" } } ], "timestamp": "2026-10-22T10:51:48.115053+00:00", "status_notes": "Vulnerability CVE-2026-59899 affects version 4.1.128.Final-tuxcare.1 of io.netty:netty-codec-xml.", "vulnerability": { "name": "CVE-2026-59899" }, "action_statement": "Vulnerability CVE-2026-59899 affects version 4.1.128.Final-tuxcare.1 of io.netty:netty-codec-xml." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-codec-xml@4.1.128.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.128.Final-tuxcare.1" } } ], "timestamp": "2026-10-22T10:51:48.115053+00:00", "status_notes": "Vulnerability CVE-2026-59900 affects version 4.1.128.Final-tuxcare.1 of io.netty:netty-codec-xml.", "vulnerability": { "name": "CVE-2026-59900" }, "action_statement": "Vulnerability CVE-2026-59900 affects version 4.1.128.Final-tuxcare.1 of io.netty:netty-codec-xml." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-codec-xml@4.1.128.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.128.Final-tuxcare.1" } } ], "timestamp": "2026-10-22T10:51:48.115053+00:00", "status_notes": "Vulnerability CVE-2026-59901 affects version 4.1.128.Final-tuxcare.1 of io.netty:netty-codec-xml.", "vulnerability": { "name": "CVE-2026-59901" }, "action_statement": "Vulnerability CVE-2026-59901 affects version 4.1.128.Final-tuxcare.1 of io.netty:netty-codec-xml." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-codec-xml@4.1.128.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.128.Final-tuxcare.1" } } ], "timestamp": "2026-10-22T10:53:07.426702+00:00", "status_notes": "Vulnerability CVE-2026-59902 is fixed in version 4.1.128.Final-tuxcare.1 of io.netty:netty-codec-xml.", "vulnerability": { "name": "CVE-2026-59902" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-codec-xml@4.1.128.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.128.Final-tuxcare.1" } } ], "timestamp": "2026-10-22T10:51:48.115053+00:00", "status_notes": "Vulnerability CVE-2026-59903 affects version 4.1.128.Final-tuxcare.1 of io.netty:netty-codec-xml.", "vulnerability": { "name": "CVE-2026-59903" }, "action_statement": "Vulnerability CVE-2026-59903 affects version 4.1.128.Final-tuxcare.1 of io.netty:netty-codec-xml." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-codec-xml@4.1.128.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.128.Final-tuxcare.1" } } ], "timestamp": "2026-10-22T10:51:48.115053+00:00", "status_notes": "Vulnerability CVE-2026-59919 affects version 4.1.128.Final-tuxcare.1 of io.netty:netty-codec-xml.", "vulnerability": { "name": "CVE-2026-59919" }, "action_statement": "Vulnerability CVE-2026-59919 affects version 4.1.128.Final-tuxcare.1 of io.netty:netty-codec-xml." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-codec-xml@4.1.128.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.128.Final-tuxcare.1" } } ], "timestamp": "2026-10-22T10:51:48.115053+00:00", "status_notes": "Vulnerability CVE-2026-59920 affects version 4.1.128.Final-tuxcare.1 of io.netty:netty-codec-xml.", "vulnerability": { "name": "CVE-2026-59920" }, "action_statement": "Vulnerability CVE-2026-59920 affects version 4.1.128.Final-tuxcare.1 of io.netty:netty-codec-xml." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-codec-xml@4.1.128.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.128.Final-tuxcare.1" } } ], "timestamp": "2026-10-22T10:51:48.115053+00:00", "status_notes": "Vulnerability CVE-2026-59921 affects version 4.1.128.Final-tuxcare.1 of io.netty:netty-codec-xml.", "vulnerability": { "name": "CVE-2026-59921" }, "action_statement": "Vulnerability CVE-2026-59921 affects version 4.1.128.Final-tuxcare.1 of io.netty:netty-codec-xml." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-codec-xml@4.1.128.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.128.Final-tuxcare.1" } } ], "timestamp": "2026-10-22T10:51:48.115053+00:00", "status_notes": "Vulnerability CVE-2026-73507 affects version 4.1.128.Final-tuxcare.1 of io.netty:netty-codec-xml.", "vulnerability": { "name": "CVE-2026-73507" }, "action_statement": "Vulnerability CVE-2026-73507 affects version 4.1.128.Final-tuxcare.1 of io.netty:netty-codec-xml." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-codec-xml@4.1.128.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.128.Final-tuxcare.1" } } ], "timestamp": "2026-10-22T10:51:48.115053+00:00", "status_notes": "Vulnerability CVE-2026-73508 affects version 4.1.128.Final-tuxcare.1 of io.netty:netty-codec-xml.", "vulnerability": { "name": "CVE-2026-73508" }, "action_statement": "Vulnerability CVE-2026-73508 affects version 4.1.128.Final-tuxcare.1 of io.netty:netty-codec-xml." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-codec-xml@4.1.128.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.128.Final-tuxcare.1" } } ], "timestamp": "2026-10-22T10:51:48.115053+00:00", "status_notes": "Vulnerability CVE-2026-75595 affects version 4.1.128.Final-tuxcare.1 of io.netty:netty-codec-xml.", "vulnerability": { "name": "CVE-2026-75595" }, "action_statement": "Vulnerability CVE-2026-75595 affects version 4.1.128.Final-tuxcare.1 of io.netty:netty-codec-xml." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-codec-xml@4.1.128.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.128.Final-tuxcare.1" } } ], "timestamp": "2026-10-22T10:51:48.115053+00:00", "status_notes": "Vulnerability CVE-2026-75596 affects version 4.1.128.Final-tuxcare.1 of io.netty:netty-codec-xml.", "vulnerability": { "name": "CVE-2026-75596" }, "action_statement": "Vulnerability CVE-2026-75596 affects version 4.1.128.Final-tuxcare.1 of io.netty:netty-codec-xml." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-codec-xml@4.1.128.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.128.Final-tuxcare.1" } } ], "timestamp": "2026-10-22T10:51:48.115053+00:00", "status_notes": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.128.Final-tuxcare.1 of io.netty:netty-codec-xml.", "vulnerability": { "name": "GHSA-mfg7-5gfp-c4w3" }, "action_statement": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.128.Final-tuxcare.1 of io.netty:netty-codec-xml." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-codec-xml@4.1.128.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.128.Final-tuxcare.1" } } ], "timestamp": "2026-10-22T10:51:48.115053+00:00", "status_notes": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.128.Final-tuxcare.1 of io.netty:netty-codec-xml.", "vulnerability": { "name": "GHSA-v74w-7mr3-4qg3" }, "action_statement": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.128.Final-tuxcare.1 of io.netty:netty-codec-xml." } ] }